Privacy Policy

1. Introduction

Ricasoli Group S.r.l. ("we", "us", "our"), with registered office at Via Senato 29, 20121 Milano (MI), Italy, VAT no. IT08638750961, operating under the brand Ricasoli Travel, is the data controller responsible for processing your personal data collected through the forms on our website.

This Privacy Policy explains how we collect, use, store and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Italian data protection laws.

2. Data We Collect

We collect personal data when you submit one of the forms on our website. The specific data collected depends on the form you use:

a) Contact and Booking Forms

Across the contact form and our online booking forms (chauffeur service, helicopter transfer, hotel booking, private jet charter, airline ticketing, event ticketing, train ticketing, luxury car rental and custom travel requests), we may collect:

• Full name
• Email address
• Phone number (including country code)
• Travel dates and times
• Pick-up and drop-off locations (or origin and destination)
• Number of passengers and luggage
• Preferred vehicle, aircraft, hotel or service category
• Trip purpose and additional preferences (optional)
• Special requests, dietary or accessibility needs (optional)
• Any other information you choose to share with us in the message field

3. Purpose and Legal Basis

We process your personal data for the following purposes:

• To process your booking inquiry or contact request and provide you with a quote, itinerary or assistance for the requested travel service (legal basis: your explicit consent, Art. 6(1)(a) GDPR)
• To send you a confirmation email acknowledging receipt of your submission (legal basis: legitimate interest, Art. 6(1)(f) GDPR)
• To notify our travel team so that we can follow up on your request, coordinate suppliers and deliver the service you have requested (legal basis: legitimate interest, Art. 6(1)(f) GDPR, and where applicable, the performance of a contract, Art. 6(1)(b) GDPR)

4. Destinatari e responsabili del trattamento

I tuoi dati personali possono essere condivisi con i seguenti fornitori di servizi terzi che agiscono come responsabili del trattamento per nostro conto:

• Supabase Inc. — Hosting e archiviazione del database. I tuoi dati sono archiviati sull'infrastruttura di Supabase. Supabase è certificata SOC 2 Type II e conforme al GDPR. Per maggiori informazioni, visita supabase.com/privacy.
• Resend Inc. — Invio di e-mail transazionali. Utilizzato per inviare e-mail di conferma a te e notifiche al nostro team. Per maggiori informazioni, visita resend.com/legal/privacy-policy.
• Vercel Inc. — Hosting e distribuzione del sito. Vercel tratta i dati nell'ambito dell'erogazione del nostro sito. Per maggiori informazioni, visita vercel.com/legal/privacy-policy.
• Google Ireland Limited — Servizi di gestione tag e analytics tramite Google Tag Manager. I tag analitici e di marketing caricati tramite Google Tag Manager si attivano solo dopo aver fornito il consenso tramite il nostro banner cookie. Per maggiori informazioni, visita policies.google.com/privacy.
• iubenda S.r.l. — Gestione del consenso ai cookie. Il banner cookie utilizzato per raccogliere e gestire le tue preferenze è fornito da iubenda ed è caricato tramite Google Tag Manager. Per maggiori informazioni, visita iubenda.com.

Tutti i responsabili del trattamento sono vincolati da appropriati accordi sul trattamento dei dati e sono tenuti ad implementare adeguate misure di sicurezza.

5. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, and in any case no longer than 24 months from the date of collection, unless a longer retention period is required by law.

6. Your Rights

Under the GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data ("right to be forgotten")
• Restrict processing of your data
• Data portability
• Object to processing
• Withdraw your consent at any time

To exercise any of these rights, please contact us at info@ricasolitravel.com.

7. Cookie

Il nostro sito utilizza cookie tecnici strettamente necessari per il corretto funzionamento del sito. Questi cookie non richiedono il tuo consenso.

Utilizziamo inoltre cookie analitici e di marketing tramite Google Tag Manager. Questi cookie si attivano solo dopo che hai fornito il consenso tramite il nostro banner cookie. Puoi rivedere e aggiornare le tue preferenze in qualsiasi momento tramite il banner cookie.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

10. Contact Us

For any questions regarding this Privacy Policy or the processing of your personal data, please contact: