This policy explains what data itatransfer.com collects, why, and on what legal basis.
The data controller is ItaTransfer S.r.l., Via Bellinzona, 48, 22100 Como (CO), Italy. Data contact: info@itatransfer.com.
What we collect: name, phone or messenger, optionally e-mail, route, date and time, number of passengers and luggage, flight number and comments, plus the page language and device type.
Why: to pass the request to a carrier and to contact you about the booking.
Legal basis: performance of a contract and steps taken at your request before entering into it (Art. 6(1)(b) GDPR).
The carrier that accepts the job, to the extent needed for the journey: name, contact, route, time, flight. The carrier is an independent controller of that data.
Service providers: hosting, the request delivery service, and Google (analytics — only with your consent, see section 4).
We do not sell your data and do not pass it to third parties for advertising.
Technical storage the site cannot work without (language choice, saving a draft request) is always used and does not require consent.
Google Analytics 4 (Google Ireland Ltd.) runs after you consent: either by pressing “Accept” or by dismissing the banner and continuing to use the site. If you press “Decline”, analytics is not loaded and no analytics cookies are set. It collects non-identifying visit data: pages, referral source, device, country, and the steps of the booking form.
Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the Cookies link in the footer.
Our server keeps a technical access log: IP address, date and time, the page requested and the browser type. It is needed to run and protect the site — to spot failures, overload and intrusion attempts, and to understand load.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR). The log is not used for advertising, is not linked to your booking and is not shared with third parties. Retention: 30 days, after which entries are deleted automatically.
Using Google Analytics may involve transfers to the United States. Google Ireland Ltd. relies on the EU Standard Contractual Clauses and additional safeguards. If you do not consent to analytics, no such transfer takes place.
Booking data — 24 months from the date of travel, needed for handling disputes and accounting, then deleted.
Analytics data — 14 months (Google Analytics setting), then deleted automatically.
Correspondence — 12 months from the last message.
You may request access to your data, its correction or erasure, restriction of processing, data portability, and you may object to processing and withdraw consent.
Write to info@itatransfer.com from the same contact you used in the request. We reply within 30 days.
If you believe your rights have been breached, you may lodge a complaint with the Italian supervisory authority — the Garante per la protezione dei dati personali (garanteprivacy.it) — or with the authority in your EU country of residence.
If this policy changes we update this page and the date below. We notify you separately about significant changes.