Hesperia Travel

Privacy Policy

Last updated: 06/10/2026

This Privacy Notice describes how Hesperia Travel processes personal data of users who visit the website and who use contact or tour-request forms, pursuant to Regulation (EU) 2016/679 (GDPR) and applicable Italian law.

1. Data controller

The data controller is Hesperia Travel.

2. Data we process

Depending on how you interact with the site, we may process:

  • identity and contact data (name, surname, email, phone, country);
  • information related to your travel enquiry (destinations, dates, number of guests, preferences, message);
  • technical browsing data (IP address, logs, session identifiers, cookies and similar technologies — see Cookie Policy);
  • data you voluntarily include in messages.

We do not request special categories of data (Art. 9 GDPR), unless you spontaneously include them in a message; in that case they are processed only to handle your request.

3. Purposes and legal bases

  • Handling enquiries submitted via forms (tour information, quotes, contacts): pre-contractual steps at the data subject’s request (Art. 6.1.b GDPR).
  • Replies and support by email, phone or WhatsApp, if indicated by the user: same basis or legitimate interest in providing an effective service (Art. 6.1.f).
  • Legal obligations where applicable (Art. 6.1.c).
  • Site security and operation (technical logs, abuse prevention): legitimate interest (Art. 6.1.f).
  • Non-essential / analytics cookies, if enabled: consent (Art. 6.1.a), as described in the Cookie Policy.

Form data are processed only after acceptance of this notice via the mandatory checkbox.

4. Methods and place of processing

Data are processed with electronic tools and appropriate security measures, by authorised staff or by providers acting as processors (e.g. hosting, email tools, site plugins). Servers and services may be located in the European Economic Area; any transfers outside the EU will use GDPR-adequate safeguards.

5. Retention

  • enquiries and contact messages: up to 24 months after the matter is closed, unless longer needed (e.g. contract or legal duties);
  • browsing/log data: for the technical time needed and as stated in the Cookie Policy;
  • data for legal obligations: for the period required by law.

6. Disclosure

Data are not disseminated. They may be shared with:

  • technical providers (hosting, maintenance, email, CRM if used);
  • partners needed to organise the trip (hotels, guides, transfers), only where useful to fulfil the request and to the extent necessary;
  • public authorities, if required by law.

7. Nature of providing data

Providing data in mandatory form fields is required to receive a reply. Failure to provide them prevents sending the request. Optional fields help personalise the quote but are not mandatory.

8. Your rights

You may exercise the rights under Arts. 15–22 GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent where applicable) by writing to Info@hesperiatravel.com. You may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

9. Minors

The site services are not intended for children under 14. We do not knowingly collect children’s data; if a parent believes such data were submitted, they may contact us for erasure.

10. Updates

This notice may be updated; the date at the top indicates the latest revision. For cookies and tracking technologies, see the Cookie Policy.

WhatsApp