Privacy Policy of Gira e Sole Ltd
This Privacy Policy describes how Gira e Sole Ltd (referred to as “we”, “us”, or “our”) collects, uses, and discloses personal information when you use our website www.giraesole.com and the services offered through the Site, in compliance with Regulation (EU) 2016/679 (GDPR).
A section on service files saved by the browser while browsing is available here: Cookies Policy
WHAT IS THE PRIVACY POLICY?
These are the rules that govern the collection and use of personal data, such as first name, last name, email, address, phone…
In general, these data are collected to:
- comply with legal requirements (entering into the contract and issuing tax documents);
- deliver the purchased service;
- commercial communications;
- internal statistical analysis.
1. Information We Collect
When you visit our Site or book a tour or activity with us, we may collect personal information such as your name, email address, telephone number, date of birth and billing information.
We may also collect information related to your bookings, including tour preferences, travel dates, and any special requirements or accommodations requested.
We automatically collect certain information about your device, including your IP address, browser type, operating system, and referring website.
2. How We Use Your Information
We use the personal information we collect for the following purposes:
To facilitate bookings and provide you with the services you request, including tour reservations, itinerary planning via email, telephone and/or WhatsApp, confirmation emails, and customer support.
To communicate with you about your bookings, respond to enquiries, and provide information about our tours, activities, and promotions.
To analyse trends, monitor the effectiveness of our marketing efforts, and improve the quality of our services and user experience.
3. Data Sharing and Disclosure
We may share your personal information with third parties in the following circumstances:
We may engage third-party service providers to assist us in providing services to you, such as processing payments, managing bookings, and delivering marketing communications.
We may disclose your information to comply with applicable laws, regulations, legal processes, or government requests.
4. Data Retention
We retain personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The specific retention period for your personal data may vary depending on the type of information and the purposes for which it is processed.
We will retain your personal data for as long as necessary to provide you with the services you have requested, to comply with our legal obligations, to resolve disputes, and to enforce our agreements.
If you have consented to receive marketing communications from us, we will retain your contact information for as long as you remain subscribed to our mailing list or until you opt out of receiving marketing communications.
When personal data is no longer needed for the purposes for which it was collected, we will securely delete or anonymise it in accordance with our data retention policies and applicable laws and regulations.
5. Your Rights
Your have the right to access the personal information we hold about you and request a copy of your data.
You have the right to request that we correct any inaccuracies in your personal information.
You have the right to request the deletion of your personal information (“right to be forgotten”).
You have the right to request that we restrict the processing of your personal information under certain circumstances.
To exercise any of these rights, please contact us using the contact information provided below.
Please note that we may require additional information from you to verify your identity before processing your request. We aim to respond to all privacy policy requests within 72 hours.
6. International Data Transfers
Your personal information may be transferred to and processed in countries outside of your jurisdiction, including the United Kingdom and Italy, where data protection laws may differ from those in your country of residence.
7. Data Storage and Security
We take the security of your personal information seriously and employ appropriate technical and organisational measures to protect it against unauthorized access, disclosure, alteration, or destruction.
Your data is stored securely and is encrypted during transmission over the internet using industry-standard encryption protocols, such as Secure Socket Layer (SSL) technology.
Access to your personal data is restricted to authorized personnel who need access to it for the purposes outlined in this Privacy Policy. We regularly review and update access controls to ensure that only authorised individuals have access to your data.
We use firewalls and intrusion detection systems to monitor and protect our systems from unauthorized access and cyber threats.
Our employees undergo training on data protection and security best practices to ensure that they handle personal information in accordance with applicable laws and regulations.
While we take reasonable precautions to protect your personal data, please be aware that no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
If you have any concerns about the security of your personal information, please contact us using the contact information provided in this Privacy Policy.
8. Marketing Communications
By providing your contact information through the contact page on our website or over the phone to one of our agents and consenting to this Privacy Policy, you agree that Gira e Sole may contact you for marketing purposes in the future. This may include sending you promotional offers, newsletters, and other marketing communications related to our products and services.
You have the right to opt out of receiving marketing communications from us at any time. You can request to be removed from our mailing list by contacting us using the contact information provided in this Privacy Policy.
Please note that even if you opt out of receiving marketing communications we may still contact you for transactional or administrative purposes related to you bookings or accounts with us.
9. GDPR Compliance
Gira e Sole Ltd is committed to complying with the requirements of the General Data Protection Regulation (GDPR) and other applicable data protection laws. The GDPR provides individuals with certain rights regarding their personal data and imposes obligations on organizations that process personal data.
Gira e Sole Ltd acts as the data controller for the personal data collected through our website and services. If you have any questions or concerns regarding the processing of your personal data or if you would like to exercise your rights under the GDPR, please contact us using the contact information provided in this Privacy Policy.
We process personal data for the following lawful purposes:
- To fulfil our contractual obligations to you, such as providing you with the services you have requested.
- To comply with our legal obligations, such as tax and accounting requirements.
- With your consent, to send you marketing communications and promotional offers.
Under the GDPR, you have the following rights regarding your personal data:
- Right to Access: You have the right to request access to your personal data and receive a copy of the information we hold about you.
- Right to Rectification: You have the right to request that we correct any inaccuracies in your personal data.
- Right to Erasure: You have the right to request the deletion of your personal data (“right to be forgotten”).
- Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data under certain circumstances.
- Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
- Right to Object: You have the right to object to the processing of your personal data under certain circumstances.
Your personal data may be transferred to and processed in countries outside of your jurisdiction, including the United Kingdom and Italy, where data protection laws may differ from those in your country of residence. We will ensure that appropriate safeguards are in place to protect your personal data when it is transferred internationally.
We may update this Privacy Policy from time to time to reflect changes in our privacy practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website.
10. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us at:
Gira e Sole Ltd
info@giraesole.com
11. Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our privacy practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website.