INFORMATION NOTICE PURSUANT TO ARTICLES 13–14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679
Grand Tour Operator, in its capacity as
Data Controller, informs you that your personal data will be processed in the manner and for the purposes described below.
The Data Controller is committed to safeguarding the privacy and confidentiality of Personal Data, in compliance with the principles of fairness, lawfulness, transparency, and the protection of your rights.
1) TYPES OF DATA PROCESSED
We process personal data you provide (name, email, company name, etc.) when submitting voluntary requests, as well as data automatically collected by the website.
Data provided by you: personal, identifying, and non-sensitive data submitted when making requests via email or through the contact form concerning our products or services.
Automatically collected data: anonymous data collected through cookies or similar technologies. For more information, please refer to our
Cookie Policy.
Note: Users under 16 years of age cannot provide personal data without the consent of their parents or legal guardians.
2) PURPOSES AND LEGAL BASES OF PROCESSING
We will process your personal data for the following purposes:
A) To fulfil our contractual obligations, respond to your requests for information, prepare quotations, execute sales or service agreements, and provide after-sales support.
B) To carry out aggregated and anonymous statistical analyses aimed at improving our services.
C) For administrative purposes and to comply with legal obligations (e.g., accounting or tax requirements, or requests from judicial authorities).
D) In the case of submitting a curriculum vitae, exclusively for personnel selection purposes.
3) IS THE PROVISION OF DATA MANDATORY?
Providing data is
optional, but failure to do so may make it impossible for us to handle certain requests or provide specific services.
4) LOCATION, PROCESSING METHODS, AND RETENTION PERIODS
The processing of personal data is carried out in compliance with Article 4 of the Privacy Code and Article 4(2) of the GDPR, through operations such as collection, recording, organisation, storage, consultation, processing, modification, selection, retrieval, use, interconnection, communication, and erasure of data.
Data is processed using paper and electronic tools, adopting appropriate technical and organisational measures to ensure security and confidentiality.
Data is not stored within the website itself.
– For the purposes referred to in point
C, data is retained for a maximum of
10 years after the end of the relationship.
– For the purposes referred to in point
B, data is retained for a maximum of
38 months from the date of collection.
5) ACCESS TO DATA
Your data may be made accessible:
- to employees and collaborators of the Data Controller, acting as authorised personnel or internal data processors;
- to third parties (e.g., website providers, cloud providers, IT consultants, hardware/software support technicians, couriers, credit institutions, professional firms, etc.) performing outsourced activities on behalf of the Data Controller, appointed as Data Processors.
6) DATA TRANSFER
Data will not be disclosed, sold, or exchanged with third parties without your explicit consent, except where required by law or requested by judicial authorities.
7) YOUR RIGHTS
You have the right to know which personal data is processed and to exercise the following rights:
- Right of access: obtain confirmation as to whether or not your personal data is being processed and access such data.
- Right to rectification: obtain the correction of inaccurate personal data or the integration of incomplete data.
- Right to erasure: obtain the deletion of data that is no longer necessary or processed unlawfully.
- Right to data portability: receive your data in a structured, commonly used, and machine-readable format.
- Right to restriction of processing: obtain the temporary suspension of processing under certain circumstances.
- Right to object: object to processing on legitimate grounds.
To exercise these rights or to request further information on the processing of your data, you can contact us at:
info@grandtouroperator.com
8) CHANGES TO THIS NOTICE
This notice may be updated over time. You are therefore invited to periodically consult this page to check for any updates.
Last update: October 2025
