Last updated: July 17, 2026
The data controller is [COMPANY LEGAL NAME], [ADDRESS], VAT [VAT] ("ItalyPlanner", "we", "us"). Contact for privacy matters: [EMAIL].
If you create an ItalyPlanner account we process: your email address; a password hash (only if you choose to set a password — the default sign-in uses one-time codes sent by email, which are stored hashed and expire after 10 minutes); the content you choose to save to your account (My Trip selections, saved guides, personal notes, trip dates and party size); and technical session data. Legal basis: performance of a contract (Art. 6(1)(b) GDPR — providing the dashboard you request). Optional travel-tips emails are sent only with your separate, explicit consent (Art. 6(1)(a)), recorded at sign-up and revocable at any time from your dashboard or via the unsubscribe link. Account data is hosted on our EU hosting provider (Hostinger) and is never sold or shared for advertising. Retention: until you delete your account — a self-service "Delete account" control in the dashboard erases your account and all associated data immediately and irreversibly. When you use an account, the My Trip data you save is synchronized to our server for the sole purpose of making it available to you across devices.
We use service providers acting on our instructions: hosting (Hostinger), analytics (Google Ireland Ltd — Google Analytics 4 with Consent Mode), email delivery (our newsletter/transactional provider), and the licensed guides of the TourLeaderPro network strictly for services you request. We do not sell your personal data.
The Site uses a consent-first setup: analytics and advertising storage are denied by default (Google Consent Mode v2) and activated only if you consent through the cookie banner. Functional storage necessary for the Site (including My Trip local storage) does not require consent as it is strictly functional and stays on your device. You can change your choices at any time from the cookie settings link in the footer and through your browser controls.
Where data is transferred outside the EU/EEA (for example to Google LLC in the United States), we rely on adequacy decisions (including the EU-US Data Privacy Framework where the recipient is certified) and/or Standard Contractual Clauses with supplementary measures.
Usage data: up to 14 months (GA4 default). Newsletter data: until you unsubscribe. Plan-request emails: up to 24 months. Paid-service and billing records: as required by Italian tax law (currently 10 years). Local-storage data: on your device, under your control.
You have the right of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time without affecting prior processing. Write to [EMAIL]. You may lodge a complaint with your supervisory authority — in Italy, the Garante per la Protezione dei Dati Personali (gpdp.it).
If you are a resident of California or another US state with a comprehensive privacy law, you have rights to know, access, correct, delete, and to opt out of "sale" or "sharing" of personal information. We do not sell personal information for money. Clicking an affiliate link may constitute "sharing" for cross-context behavioral advertising under the CPRA: you can prevent this by not consenting to advertising cookies, and we honor the Global Privacy Control (GPC) signal where technically applicable. To exercise rights: [EMAIL]. We do not discriminate against you for exercising them.
The Site is not directed to children under 16 and we do not knowingly collect their data.
We apply appropriate technical and organizational measures (TLS in transit, access controls, data minimization — notably, keeping My Trip data on your device rather than our servers).
We may update this Policy; material changes will be flagged on this page. Contact: [EMAIL].