Privacy Policy

1. Who we are (Data Controller)

The data controller responsible for your personal data is:

• Business name: Ditta Individuale Artino Angelo
• Address: Via Enrico Carano 23 - 00171 Roma (RM), Italy
• Email: info@romevespatour.it
• Certified email / PEC: artinoangelo@pec.it
• VAT / Tax ID: 16654071006

2. What data we collect

When you make a booking or contact us, we may collect:

• Full name
• Email address
• Phone / WhatsApp number
• Tour date and selected time
• Number of guests
• Pick-up address or hotel (if provided)
• Any notes or special requests you send us
• Minimal technical data needed to operate the website and process your request (such as basic log data)

We do not collect or store your full payment card details — these are handled directly by our payment provider (see section 4).

3. Why we use your data (purposes & legal basis)

We process your data to:

• Manage and confirm your booking (performance of a contract)
• Take and verify your payment (performance of a contract)
• Send operational communications about your tour, such as confirmations and updates (performance of a contract)
• Schedule your tour and check availability using our operational calendar (legitimate interest)
• Provide customer support before, during and after the experience (legitimate interest)
• Comply with legal and accounting obligations (legal obligation)

4. Payments — Stripe

Payments are processed by Stripe, a third-party payment provider. When you pay, your card information is submitted directly to Stripe and is subject to Stripe's own privacy terms. We receive only the information needed to confirm your payment (such as a payment reference and status), never your full card number.

5. Operational calendar — Google Calendar

To manage availability and schedule tours, we record booking details in Google Calendar, used as an internal operational tool. This allows our team to avoid overbooking and to prepare for your tour. Access is limited to authorized team members.

6. Sharing your data

We only share your data with service providers that help us run the service (such as our payment provider, calendar/scheduling tools, and hosting provider), and only as needed for the purposes above. We do not sell your personal data.

7. Data retention

We keep your booking data only as long as necessary for the purposes described above, including to provide the service, handle any follow-up, and meet legal or accounting obligations. After that period, your data is deleted or anonymized. Specific retention periods can be provided on request at info@romevespatour.it.

8. Your rights under the GDPR

You have the right to:

• Access the personal data we hold about you
• Ask us to correct inaccurate or incomplete data
• Ask us to delete your data ("right to be forgotten")
• Restrict or object to certain processing
• Request data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with your local data protection authority (in Italy, the Garante per la protezione dei dati personali)

To exercise any of these rights, contact us at info@romevespatour.it.

9. Data security

We take reasonable technical and organizational measures to protect your personal data against loss, misuse and unauthorized access. Payments are handled over secure, encrypted connections by our payment provider.

10. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page, with the "Last updated" date revised accordingly.

11. Contact

For any privacy question or request, contact Ditta Individuale Artino Angelo at info@romevespatour.it (certified email / PEC: artinoangelo@pec.it).