Privacy and Data Protection Policy

The legal entity responsible for the processing of your personal data is:

We collect personal information necessary to deliver our travel services, including:

• Identification & Contact Data: First name, last name, email address, telephone number, language preference.

• Transaction Data: Payment confirmation codes, billing details, tour dates, booking IDs (we do not store raw credit card numbers on our servers).

• Technical & Browsing Data: IP address, browser type, device information, and site interaction logs collected via essential cookies.

• Contractual Necessity (Art. 6.1.b GDPR): Processing is required to execute your tour booking, issue tickets, send confirmations, and deliver customer support.

• Legal Obligation (Art. 6.1.c GDPR): Processing is required to fulfill Italian tax, legal accounting, and consumer protection duties.

• Consent (Art. 6.1.a GDPR): Processing for marketing communications or promotional newsletters occurs only if you explicitly opt-in via a dedicated checkbox.

• Retention Period: Personal data processed for booking execution is retained for up to 10 years in compliance with Italian tax and commercial law obligations.

• Third-Party Data Sharing: Data is shared strictly on a need-to-know basis with payment service providers (e.g., Stripe, PayPal), IT infrastructure partners within the EU, and licensed tour guides fulfilling your specific booking.

Under European Union data protection regulations, you possess the following rights:

• Right of Access & Rectification: Request a copy of your stored data or correct inaccurate information.

• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when no longer legally required.

• Right to Restrict or Object: Limit or object to data processing activities.

• Right to File a Complaint: File a formal grievance with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali — www.garanteprivacy.it

To submit a data access or deletion request, email us at support@bestinrometour.com.

• Pursuant to EU Regulation No. 524/2013, European consumers may submit complaints via the official European Commission ODR platform: https://ec.europa.eu/consumers/odr