Privacy Policy
Last updated: September 9, 2026
This Privacy Policy describes how San Giorgio Travel collects and processes the personal data of users who visit www.sangiorgiotravel.com or request information through the contact form or WhatsApp, in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian law.
1. DATA CONTROLLER
The Data Controller is:
AFFITTACAMERE SAN GIORGIO S.A.S.
San Giorgio Travel
Via Rollandi 175
19017 Manarola (SP), Italy
VAT No. 01355870112
Email: travel@sangiorgiotravel.com
2. PERSONAL DATA PROCESSED
The following personal data may be processed through the website:
* identification and contact details, such as first name, surname, email address and telephone number;
* information provided voluntarily in messages, such as travel dates, number of participants, requested services and preferences;
* technical browsing data, such as IP address, device type, browser, operating system, pages visited and access times;
* preferences relating to cookies and tracking technologies.
Users are kindly requested not to include unnecessary personal data or particularly sensitive information in their messages unless it is essential for arranging the requested service.
3. PURPOSES AND LEGAL BASES
Personal data may be processed to:
* respond to requests submitted through the contact form, email or WhatsApp;
* prepare quotations and provide information about the requested services;
* arrange any tourism services, transfers and experiences requested by the user;
* comply with administrative, tax, accounting and legal obligations;
* ensure the security, proper operation and maintenance of the website;
* subject to consent where required, analyse website usage and measure the effectiveness of advertising activities.
Depending on the circumstances, processing is based on taking pre-contractual steps at the user’s request, performance of a contract, compliance with legal obligations, the Data Controller’s legitimate interest in the security and proper operation of the website, or the user’s consent.
4. CONTACT FORM
When a user submits a request through the contact form available on the website, the information provided is used solely to respond to the request, prepare a possible quotation and arrange the requested services.
Providing the information marked as mandatory is necessary in order to receive a response. Failure to provide it may prevent the Data Controller from handling the request.
5. CONTACT VIA WHATSAPP
The website contains a button that allows users to start a conversation through WhatsApp.
When this function is used, the user is redirected to WhatsApp, a service operated by Meta Platforms. The telephone number, message content and other information relating to the communication will also be processed by WhatsApp/Meta in accordance with its own terms and privacy policies.
Using WhatsApp is optional. Users may also contact San Giorgio Travel by email or through the contact form.
6. COOKIES AND MEASUREMENT TOOLS
The website uses technical cookies that are necessary for its operation. Subject to the user’s consent, cookies or similar technologies may also be used for statistical and advertising purposes, including technologies connected with Google Analytics and Google Ads.
Cookie preferences are managed through the Usercentrics platform. Users may accept, reject or change their choices at any time by using the appropriate button available on the website.
Further information is available on the “Cookie Policy” page.
7. WIX PLATFORM
The website is created and hosted using Wix.com. Wix may process technical data, browsing data and information submitted through forms in order to provide website hosting, security, maintenance and management services.
Depending on the circumstances, Wix acts as a data processor on behalf of the Data Controller or as an independent data controller for the processing described in its own Privacy Policy.
8. RECIPIENTS OF PERSONAL DATA
To the extent necessary, personal data may be disclosed to:
* IT service, hosting and website maintenance providers;
* Wix.com and its technical service providers;
* Usercentrics, for managing cookie preferences;
* Google, when analytics or advertising services are used with the user’s consent;
* Meta Platforms/WhatsApp, when the user chooses to use WhatsApp;
* administrative, tax or legal advisers;
* collaborators and suppliers involved in arranging the requested service;
* public authorities, when required by law.
Personal data is not sold to third parties.
9. INTERNATIONAL DATA TRANSFERS
Some technology providers may process data outside the European Economic Area.
Where necessary, such transfers are carried out using the safeguards provided for by the GDPR, such as adequacy decisions, Standard Contractual Clauses approved by the European Commission or other applicable safeguards.
10. DATA RETENTION
Data received in connection with requests for information and quotations is retained for the time necessary to respond to and manage the request and, as a general rule, for no longer than 24 months from the most recent communication, unless longer retention is necessary for the establishment, exercise or defence of legal claims.
If the request results in a contractual relationship, personal data and administrative and tax documents will be retained for the period required by law, normally 10 years.
Technical data and cookie preferences are retained for the periods indicated in the Cookie Policy and in the settings of the consent management platform.
11. PROCESSING METHODS AND SECURITY
Personal data is processed using electronic systems and, where necessary, paper records. Appropriate technical and organisational measures are adopted to protect it against unauthorised access, loss, disclosure, alteration or unlawful use.
12. DATA SUBJECT RIGHTS
Where provided for by the GDPR, users may:
* request access to their personal data;
* request that their personal data be corrected or updated;
* request the deletion of their personal data;
* request restriction of processing;
* object to processing;
* request data portability;
* withdraw previously given consent, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, users may contact:
Users also have the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it.
13. CHILDREN
The website and the services offered are not intended directly for children. Children must not submit personal data through the website without the authorisation of a parent or legal guardian.
14. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy may be updated following changes to applicable law, technology or the services used by the website. The updated version will be published on this page together with the date of the latest revision.