Cookie Policy


This page describes how the website www.grandtouroperator.com is managed with regard to the processing of personal data of users who consult it. Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), Grand Tour Operator provides visitors with the following information.Please note that this privacy policy does not apply to other websites that may be accessed through links on this site, for which Grand Tour Operator assumes no responsibility.

1) Subject of the Processing

BROWSING DATA

The computer systems and software procedures used to operate this website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. These data are not collected to be associated with identified individuals, but could—through processing and association with data held by third parties—allow users to be identified.

Such data include IP addresses or domain names of the devices used by visitors, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file returned, the numerical code indicating the status of the response (e.g. success, error), and other parameters related to the user’s operating system and computer environment.

DATA PROVIDED VOLUNTARILY BY THE USER

The voluntary, explicit, and optional sending of emails to the addresses indicated on this site, as well as the completion of the contact form, entails the acquisition of the sender’s email address (required to respond) and any other personal data included in the message.

2) Purpose of the Processing

Your personal data may be processed:

  • without your express consent (Art. 6, letters b) and f), GDPR), for the following service purposes:
    • to manage and maintain the website;
    • to allow access to and use of the website’s content;
    • to process requests sent via form or email;
    • to comply with legal, regulatory, EU, or Authority requirements;
    • to prevent fraudulent activities or abuses;
    • to defend the rights of the Data Controller, for example in legal proceedings.

3) Processing Methods

The processing of personal data is carried out through operations such as collection, recording, organization, storage, consultation, processing, modification, selection, extraction, use, interconnection, blocking, communication, erasure, and destruction. Your data are processed using paper, electronic, and automated tools.

The Data Controller will retain the data for the time strictly necessary to achieve the purposes indicated above.

4) Access to Data

Data may be accessed, for the purposes already stated, by:

  • employees and collaborators of the Data Controller, acting as internal processors or persons in charge of processing;
  • external companies (external processors) for technical, support, maintenance, hosting, website management, etc.;
  • other third parties (suppliers, professional firms, credit institutions, competent authorities) that perform outsourced activities on behalf of the Data Controller.

Under no circumstances will the data be disseminated.

5) Data Transfer

The management and storage of personal data take place on servers located within the European Union, at the Data Controller’s premises or those of its Processors. Currently, the servers are located in Italy. Data will not be transferred outside the EU unless the Data Controller deems it necessary to relocate the servers to non-EU countries, in which case the transfer will be carried out in compliance with applicable regulations (standard contractual clauses, adequate safeguards, etc.).

6) Nature of Data Provision and Consequences of Refusal

Providing data for the purposes indicated is mandatory. Failure to provide such data would make it impossible to ensure correct browsing and the provision of services or content.

7) Rights of the Data Subject

As a data subject, you have the rights set out in Article 15 of the GDPR, including the right to obtain:

  • confirmation of whether or not personal data concerning you exist, and their communication in an intelligible form;
  • information regarding the origin of the data, the purposes and methods of processing, the logic applied in case of electronic processing, the identification details of the Data Controller, Processors, and third parties to whom the data are communicated;
  • the updating, rectification, or integration of the data;
  • the erasure, anonymization, or blocking of data processed unlawfully;
  • certification that these operations have been communicated to the parties to whom the data were transmitted, where applicable;
  • the right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning you; to object to processing for direct marketing purposes (including automated means); and, where applicable, to exercise the rights of rectification, erasure (right to be forgotten), restriction of processing, data portability, objection, and the right to lodge a complaint with the Supervisory Authority.

8) How to Exercise These Rights

You may exercise your rights at any time by sending:

9) Minors

This website and the services offered are not intended for individuals under 18 years of age, and Grand Tour Operator does not knowingly collect personal data from minors. Should such data be collected by mistake, the Data Controller will promptly delete them upon request.

10) Data Controller, Co-Controllers, Processors, and Persons in Charge

Data Controller: Grand Tour Operator, Via Garibaldi 58/l – 25080 Nuvolento (BS). Email: office@grandtourooerator.com

The updated list of processors and persons in charge is available at the Data Controller’s registered office.

11) Changes to This Policy

This policy may be updated. We recommend periodically reviewing this page and referring to the most recent version.