Privacy Policy
Data Controller: Puglia Info Tourist srls — Via Galatina 7, 73014 Gallipoli (LE) — P.IVA 05010500758
Email: seatourgallipoli@gmail.com
Data Protection Contact: seatourgallipoli@gmail.com
Last updated: March 2026
1. Data collected
We collect the following personal data when you use our website or make a booking:
- First and last name
- Email address
- Phone number
- Payment data (processed by SumUp/Stripe, not stored on our servers)
- Browsing data (technical and analytics cookies)
2. Purpose of data processing
Data is used for:
- Managing bookings and providing the requested services
- Booking-related communications (confirmations, changes, cancellations)
- Compliance with legal and tax obligations
- Anonymous statistical analysis to improve our service
- Sending promotional communications (only with explicit consent)
3. Legal basis
Processing is based on: contract performance (booking), consent (marketing), legal obligation (invoicing), legitimate interest (security and service improvement).
Promoter (PR) statistics — cookieless counter
To measure, in aggregate, how many visitors our promoters bring (the discount codes on flyers, e.g. ?sconto=CODE), the site records a visit count without cookies and without storing any data on your device. When you visit with a PR code, a daily pseudonymous identifier is generated server-side (an HMAC fingerprint computed from date, IP address and user-agent): the IP address and user-agent are not retained, only the fingerprint together with the day, site and code. The purpose is solely internal, aggregate statistics (single site, no profiling, no advertising, no commercial sharing); the legal basis is the Controller's legitimate interest (Art. 6(1)(f) GDPR). Raw fingerprints are kept at most until the following day's consolidation, after which only aggregate counts remain. Infrastructure is provided by Cloudflare (data processor).
4. Data retention
Data is retained for the time necessary for the purposes indicated above and in any case no longer than 5 years from the last contractual relationship, unless otherwise required by law.
5. Data sharing
Data may be shared with:
- Payment service providers (SumUp, Stripe)
- Google Analytics (anonymous data)
- Competent authorities where required by law
6. Your rights
You have the right to: access your data, rectify it, delete it, restrict processing, object to processing, and request data portability. To exercise your rights, contact us at seatourgallipoli@gmail.com.
7. Cookies
This website uses technical cookies necessary for its operation and analytics cookies (Google Analytics) for anonymous statistical analysis. For more details, see our Cookie Policy.