Privacy notice
Who is responsible for your data
The data controller is DIESSE Transfer & Tour di Antonello Di Santo, Via Maiella 37, 65010 Spoltore (PE), Italy, VAT no. 16617831009. Contact: nccroma7@gmail.com.
What we collect and why
- Requests you send us (name, agency, work email, phone if given, route, dates, passengers, message). We use them to reply, prepare a quote and, if you book, to carry out the service and invoice it. Legal basis: steps taken at your request before a contract, and performance of the contract.
- Business contact details of travel agencies and tour operators taken from public professional sources, used to introduce our services by email. Legal basis: our legitimate interest in B2B communication, balanced against your rights. You can object at any time (see below).
- Reviews you write on this website (rating, review, the name and country you choose to show, the kind of trip, your email and, if given, your booking number). We publish the rating, review, name, country, kind of trip and the month you wrote it, after our team has read it; your email and booking number are never published and are used only to check that you travelled with us and, if needed, to contact you about your review. Legal basis: your consent, which you can withdraw at any time by asking us to remove your review.
- Invoicing and tax records for completed services, kept as required by Italian law.
This website does not use advertising or tracking cookies.
Route preview map. When you use the map to see a route, the places you type are sent to OpenStreetMap-based services to find them and calculate the road route (Photon by komoot, and OSRM servers run by the OpenStreetMap community in Germany), and the map images are loaded from OpenStreetMap. These services receive your IP address and the text you type; we do not store the route unless you then send us a request.
Who receives it
Only the people who handle your request, and the service providers we need to run the business: website hosting and forms (Oracle Cloud Infrastructure), our booking and contact management system and its database, and email providers. Some of them are based in the United States or store data there; where this applies we rely on the safeguards required by GDPR, such as standard contractual clauses. We do not sell your data.
How long we keep it
Requests that do not lead to a booking: up to 24 months from the last contact. Published reviews: until you ask us to remove them, or until we stop showing them. Booking and invoicing records: as long as Italian tax and accounting law requires (generally 10 years). Contacts who ask us not to write again are kept only in a suppression list so we do not contact them again.
Your rights
You can ask us to access, correct or delete your data, to restrict or object to its processing, and to receive a copy of it. To stop receiving our emails, reply "unsubscribe" or use the link in the message. Write to nccroma7@gmail.com. You may also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, garanteprivacy.it).