TRIPSICILY · PRIVACY NOTICE UNDER ARTICLE 13 GDPR
Privacy notice
The form linked to this copy is active on Zoho Campaigns and can receive subscriptions when completed and submitted. This notice must be completed before publishing this copy and using the form to collect subscriptions. The hosting service may also process technical browsing data: its configuration, the parties involved and the applicable terms must be established for actual use. All fields marked “DA COMPILARE” (to be completed) must be filled in before collection is enabled.
This notice covers browsing the TripSicily pre-launch page and the planned email updates service. It describes the intended processing and will be updated to reflect the actual configuration before the service is enabled.
1. Controller and contact details
The data controller is DA COMPILARE — full business or personal name and actual contact details. Email for privacy requests: DA COMPILARE. Contact details of the data protection officer (DPO), if appointed: DA COMPILARE; remove this entry if it does not apply.
2. Browsing data
Serving this page may involve processing IP addresses, request dates and times, pages requested, browser and device information, logs and error reports. The actual categories collected, operational and security purposes, respective legal bases and retention periods are DA COMPILARE after checking the hosting service.
Data strictly necessary for the connection are transmitted when the website is used. You do not need to subscribe to browse this page.
3. Pre-launch email updates
Once the service is enabled, your email address will be used to send updates about TripSicily’s progress and launch. Information strictly necessary to document the request, consent, address confirmation and unsubscription will also be processed.
The intended legal basis is your consent under Article 6(1)(a) GDPR. Providing the data is optional: without an email address and consent, you cannot receive these emails, but you can still browse this page.
Email address confirmation through a link sent by email (double opt-in) is planned. Before activation, the method of recording evidence of consent must be established. The list will not automatically be extended to commercial offers, partner communications or a post-launch newsletter.
Each email will include an unsubscribe link. You may also withdraw consent by writing to the privacy contact, without affecting the lawfulness of processing carried out before withdrawal.
4. Service providers and access to data
Data may be accessed by people authorised by the controller and by providers involved in hosting, form management and email delivery, according to their actual roles and applicable agreements. Recipients or categories of recipients, roles and services used: DA COMPILARE.
The proposed configuration uses Cloudflare Workers for publication and Zoho Campaigns for email updates. Activation, contracting entities, privacy roles, subprocessors and the settings of both services must be verified; this draft does not treat them as established facts. Data are not intended for public disclosure.
5. Transfers outside the European Economic Area
Countries where data are processed, any transfers or access from third countries, adequacy decisions or other applicable safeguards and how to obtain a copy: DA COMPILARE after checking the hosting and email services and their subprocessors. It is not yet possible to state that no international transfers take place.
6. Retention
The following must be established and specified separately: technical log retention DA COMPILARE; deletion deadline for unconfirmed requests DA COMPILARE; duration of the pre-launch list and a final deadline if the launch is postponed DA COMPILARE; criteria and periods for keeping only necessary evidence of consent or withdrawal DA COMPILARE. Emails will stop after unsubscription or once the stated purpose has been fulfilled.
7. Cookies and other tools
The code of this preview does not include profiling cookies, advertising pixels or behavioural analytics tools. For the published website, the platform’s actual cookies and scripts, Cloudflare and Zoho Campaigns settings, the Zoho CAPTCHA selected for the form, any other antispam tools and the email service, including open tracking, must be checked.
The list, purposes, providers and durations of cookies actually present are DA COMPILARE. A consent banner is not required for technical tools alone; any tools subject to consent must be managed before they are enabled.
8. Your rights and complaints
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction of processing and portability, and object to processing where that right applies. You may withdraw consent at any time. To exercise your rights, use the contact in section 1. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
This preview does not envisage automated decision-making with legal or similarly significant effects, or profiling. The final website’s operation must be checked before confirming this statement.
9. Updates and references
Date and version of the final notice: DA COMPILARE.
References: Regulation (EU) 2016/679 — GDPR and Garante — Guidelines on cookies and other tracking tools (Italian).