Effective Date: January 2026

1. Identity and Contact Details of the Controller

The Data Controller responsible for the processing of your personal data is:

Company Name: Deserving Italy S.r.l.
Registered Office: Via Venezia, 59/4 – 35131 Padova Italy
Contact Email: info@deservingitaly.com

2. Types of Data Collected

We process the following categories of data:

Data provided voluntarily: Personal information you provide when filling out contact forms, subscribing to newsletters, or requesting services (e.g., First Name, Last Name, Email Address, Phone Number, Company Name).
Navigation Data: Information collected automatically by our systems during your visit, such as IP addresses, browser type, operating system, and access timestamps.
Cookies and Tracking Data: Data collected via cookies, pixels, and similar technologies to analyze website usage and improve user experience (e.g., Google Analytics).

3. Purpose of Processing

Your personal data is collected for the following purposes:

Service Provision: To respond to your inquiries, provide quotes, and manage the travel services requested.
Marketing & Newsletter: To send you updates, exclusive offers, and news about Deserving Italy (only with your explicit consent).
Analytics: To analyze website traffic and user behavior to improve our digital platform.
Legal Compliance: To fulfill legal obligations related to accounting, tax, and administrative regulations.

4. Legal Basis for Processing

We process your data based on the following legal grounds:

Contractual Necessity: Processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract (e.g., travel planning).
Consent: You have given clear consent for specific purposes, such as receiving marketing communications. You may withdraw this consent at any time.
Legitimate Interest: Processing is necessary for our legitimate interests (e.g., network security, soft-spam to existing clients) provided your rights do not override these interests.
Legal Obligation: Processing is necessary for compliance with a legal obligation (e.g., invoicing and tax records).

5. Recipients of Data

Your data may be shared with the following categories of recipients:

Service Providers: Third parties who provide services on our behalf (e.g., hosting providers, email marketing platforms like Mailchimp).
Partners: Operational partners essential for the fulfillment of the service (e.g., payment processors like Stripe/PayPal).
Professionals: External consultants (e.g., accountants, legal advisors) for administrative compliance.
Authorities: Public authorities, if required by law.

6. Transfer of Data Outside the EU

Some of our service providers (e.g., Google Analytics, Mailchimp) may process data outside the European Economic Area (EEA), specifically in the USA. In such cases, we ensure that the transfer is compliant with GDPR regulations by adopting appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs).

7. Data Retention Period

We retain your data only for the time strictly necessary to fulfill the purposes for which it was collected:

Marketing Data: Retained for 24 months or until you revoke your consent (“opt-out”).
Administrative/Accounting Data: Retained for 10 years as required by Italian tax laws.
Generic Inquiries: Retained for the time necessary to handle the request.

8. User Rights

Under the GDPR, you have the following rights regarding your personal data:

Right of Access: To request a copy of your personal data.
Right to Rectification: To request correction of inaccurate data.
Right to Erasure (“Right to be Forgotten”): To request deletion of your data under certain conditions.
Right to Restriction: To request limitation of processing.
Right to Data Portability: To receive your data in a structured, commonly used format.
Right to Object: To object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent: To withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, please contact us at info@deservingitaly.com. You also have the right to lodge a complaint with the supervisory authority (in Italy: Garante per la protezione dei dati personali).

9. Cookie Policy

For detailed information on how we use cookies and tracking technologies, please refer to our specific Cookie Policy available [Link to Cookie Policy].