PRIVACY POLICY

Verona Travel SRLS

Last updated: 03/11/2026

​

1. Introduction

At Verona Travel, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how Verona Travel SRLS (“Verona Travel”, “we”, “us” or “our”) collects, uses, stores and protects personal information in connection with our websites and services.

Our activities include accommodation and property management, Vespa and scooter rentals, guided tours, travel experiences and tailor-made travel services.

This Policy applies to personal data processed by Verona Travel SRLS in connection with these activities, including information collected through our websites, booking systems, email communications and direct interactions with customers.

​

2. Data Controller

The data controller for the processing activities described in this Policy, where Verona Travel SRLS determines the purposes and means of processing, is:

Verona Travel SRLS
VAT number: IT04881640231
Via Nicola Mazza 7
37129 Verona (VR), Italy
Email: info@verona-travel.com

For privacy-related enquiries or requests concerning your personal data, you may contact us using the details above.

Where a service involves other independent data controllers, such as accommodation owners, booking platforms or external service providers, their respective responsibilities and privacy information may also apply.

​

3. Personal Data We Collect

Depending on the services you request, we may collect and process different categories of personal data.

3.1 Identification and contact information

This may include:

• First name and last name.

• Email address and telephone number.

• Residential or billing address, where necessary.

• Nationality and other identification details where required by law.

• Identification document information when necessary for accommodation or rental procedures.

3.2 Booking and travel information

When you book accommodation, rent a scooter or request a travel experience, we may process:

• Booking dates and duration.

• Selected accommodation, vehicle or travel service.

• Number of guests or participants.

• Relevant booking preferences and special requests.

• Booking confirmations, amendments and cancellations.

• Communications relating to your reservation.

3.3 Driver and vehicle rental information

For Vespa and scooter rentals, we may process information necessary to assess eligibility and manage the rental agreement, including:

• Driving licence details.

• Age or date of birth, where required.

• Country of licence issuance.

• Information necessary to verify applicable driving requirements.

• Rental agreement information.

• Vehicle condition reports, including photographs.

• Information relating to accidents, damage, insurance claims or disputes, where applicable.

3.4 Accommodation guest information

When managing accommodation reservations, we may collect identification and stay-related information needed to:

• Register and manage reservations.

• Organize check-in and check-out.

• Comply with applicable public security reporting requirements.

• Fulfil tourism statistics and tourist tax obligations.

• Provide customer assistance during the stay.

Where required by law, guest identification details may be communicated to the competent public authorities through the relevant reporting systems.

3.5 Payment and billing information

We may process information relating to payments, refunds, deposits and invoices, including:

• Transaction amounts and dates.

• Payment status and transaction references.

• Billing details.

• Information necessary to manage refunds and security deposits.

Payments may be processed through external payment service providers.

Where payment card information is entered directly into a secure payment platform, the relevant provider may process those details under its own applicable privacy and security arrangements.

3.6 Website and technical information

When you visit our websites, certain information may be collected automatically, including:

• IP address.

• Browser type and device characteristics.

• Technical logs and security information.

• Website interactions and preferences.

• Cookie identifiers and similar technologies, where applicable.

Further information is available in our Cookie Policy.

3.7 Communications and enquiries

When you contact us by email, telephone, messaging service or website form, we may process your contact details and the information you provide in order to respond to your enquiry and manage any subsequent service request.

​

4. Purposes and Legal Bases for Processing

We process personal data only where an appropriate legal basis applies under Article 6 of the General Data Protection Regulation (GDPR).

4.1 Booking and service management

Purpose: To respond to booking enquiries, manage reservations, provide accommodation, arrange scooter rentals, organize tours and deliver other requested travel services.

Legal basis: Performance of a contract or taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).

4.2 Compliance with legal obligations

Purpose: To comply with applicable accounting, tax, public security, tourism reporting and other statutory obligations.

Legal basis: Compliance with a legal obligation (Article 6(1)(c) GDPR).

This may include the communication of guest identification information to competent authorities, as required by Italian law.

4.3 Customer communications and assistance

Purpose: To provide booking information, respond to questions, communicate important service updates and assist customers before, during and after their experience.

Legal basis: Performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR), or legitimate interests in managing customer relationships where appropriate (Article 6(1)(f) GDPR).

4.4 Security, fraud prevention and legal claims

Purpose: To protect our services, manage security incidents, prevent misuse, handle complaints and establish, exercise or defend legal claims.

Legal basis: Legitimate interests (Article 6(1)(f) GDPR), and compliance with legal obligations where applicable.

Our legitimate interests include protecting our business, customers, vehicles, properties and legal rights, while respecting the rights and freedoms of the individuals concerned.

4.5 Marketing communications

Purpose: Where applicable, to send newsletters, promotional offers, information about new experiences or other marketing communications.

Legal basis: Consent (Article 6(1)(a) GDPR), or another specifically applicable legal basis where permitted by law.

Where consent is required, you can withdraw it at any time.

You may also object to the processing of your personal data for direct marketing purposes.

4.6 Website analytics and optional tracking

Purpose: To understand website performance, improve navigation and evaluate the effectiveness of our online services.

Legal basis: Consent where required, or another applicable legal basis where the technology and processing meet the relevant legal requirements.

The placement and use of cookies and similar tracking technologies are also governed by applicable ePrivacy rules.

For more information, please consult our Cookie Policy.

​

5. When Providing Personal Data Is Necessary

Certain personal data is necessary to respond to your requests, manage reservations, provide the services you book or comply with legal obligations.

For example, identification details may be required for accommodation registration, and driving licence information may be necessary for scooter rentals.

If required information is not provided, we may be unable to complete your booking or deliver the relevant service.

Providing personal data for optional marketing activities is not a condition for booking or using our services.

​

6. Third-Party Platforms and Service Providers

To operate our services, we may use external technology providers, professional advisers and business partners.

Depending on the service, these may include:

Website and technology providers

Our website is operated using Wix and may use external hosting, communication, security and technical services.

Accommodation booking platforms

Our accommodation services may involve platforms such as Lodgify and other reservation channels through which customers can book or enquire about properties.

Payment providers

Payment processors and financial institutions may process information necessary to complete secure transactions and refunds.

Accommodation owners and operational partners

Where necessary for the management of accommodation services, relevant booking and guest information may be shared with property owners, authorized operational personnel and service providers involved in delivering the stay.

Travel and experience partners

For tours and tailor-made travel services, relevant information may be shared with the providers involved in delivering the requested services, such as guides, transport companies, accommodation providers and other travel partners.

Professional advisers and authorities

Personal data may be disclosed to accountants, legal advisers, insurers and competent public authorities when necessary and legally justified.

External recipients may act as data processors, independent controllers or, where applicable, joint controllers, depending on their actual role in the processing activity.

We share only the information reasonably necessary for the relevant purpose and apply appropriate contractual and organizational safeguards where required.

​

7. Accommodation and Legal Reporting Obligations

As part of our accommodation management activities, we may be required to collect and communicate guest identification and stay-related information to competent authorities.

Depending on the applicable obligations, this may include:

• Public security reporting through the Italian Alloggiati Web system.

• Tourism statistics and accommodation reporting.

• Tourist tax administration.

• Other legally required communications connected with accommodation services.

The information collected for these purposes is limited to what is necessary to fulfil the applicable legal requirements.

Personal data collected for mandatory reporting is not used for unrelated marketing purposes without an appropriate legal basis.

​

8. International Data Transfers

Some service providers or travel partners may be located outside the European Economic Area (EEA), or may process personal data in other countries.

Where personal data is transferred outside the EEA, we take steps to ensure that the transfer complies with applicable GDPR requirements.

Depending on the circumstances, transfers may rely on:

• An adequacy decision adopted by the European Commission.

• Appropriate safeguards, such as European Commission Standard Contractual Clauses.

• Another valid transfer mechanism or applicable derogation permitted by the GDPR.

Where required, you may request further information about the relevant safeguards by contacting us.

For travel arrangements involving destinations outside the EEA, the disclosure of certain booking or traveller information to local service providers may also be necessary to deliver the services requested.

​

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, taking into account applicable legal obligations and the need to establish, exercise or defend legal claims.

Retention periods or criteria depend on the relevant processing activity.

• Booking and contractual records: retained for the period necessary to manage the service and any applicable contractual or legal obligations.

• Accounting and tax records: retained for the periods required by applicable Italian law.

• Mandatory accommodation reporting records: handled and retained in accordance with the specific legal requirements applicable to each record.

• Customer enquiries: retained for the period reasonably necessary to respond and manage any related request.

• Marketing data: retained in accordance with the applicable consent, objection and retention arrangements.

• Technical and security logs: retained for periods proportionate to their security and operational purposes.

• Claims and disputes: retained where necessary for the establishment, exercise or defence of legal claims.

When personal data is no longer required, it will be deleted, anonymized or otherwise handled in accordance with applicable law.

​

10. Data Security

We apply appropriate technical and organizational measures designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure or destruction.

Depending on the processing activity, these measures may include:

• Secure communication protocols.

• Access controls and authorization procedures.

• Appropriate management of accounts and credentials.

• Security measures provided by our technology partners.

• Organizational procedures for handling customer information.

While no electronic system can guarantee absolute security, we seek to maintain safeguards appropriate to the risks associated with our processing activities.

In the event of a personal data breach, we will comply with the notification and communication obligations established by applicable law.

​

11. Your Rights Under the GDPR

Subject to the conditions and limitations established by applicable law, you have the right to:

Access your personal data
Request confirmation of whether we process your data and obtain access to the relevant information.

Rectify inaccurate data
Request correction of inaccurate or incomplete personal data.

Request erasure
Request deletion of your personal data where the applicable legal conditions are met.

Restrict processing
Request limitations on certain processing activities where permitted by law.

Object to processing
Object to processing based on legitimate interests in the circumstances provided by the GDPR.

You also have the right to object at any time to processing for direct marketing purposes.

Data portability
Receive certain personal data in a structured, commonly used and machine-readable format, or request its transmission to another controller where applicable.

Withdraw consent
Withdraw previously given consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Rights concerning automated decisions
Exercise the rights provided by Article 22 GDPR where applicable to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise your rights, please contact:

info@verona-travel.com

We will respond in accordance with the time limits and requirements established by the GDPR.

​

12. Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.

In Italy, the supervisory authority is:

Garante per la protezione dei dati personali

Website: https://www.garanteprivacy.it

You may also exercise other administrative or judicial remedies available under applicable law.

​

13. Children's Personal Data

Our services may involve families travelling with children.

Where necessary to manage accommodation reservations, travel arrangements or comply with applicable legal obligations, we may process limited personal data relating to minors.

Such information is processed only for appropriate purposes and in accordance with applicable data protection requirements.

We do not intentionally use children's personal data for unrelated marketing or profiling activities without a valid legal basis.

​

14. Cookies and Similar Technologies

Our websites may use cookies and similar technologies for essential functionality, security, booking services, analytics and other purposes, depending on the features enabled.

Where required by law, optional tracking technologies are activated only after obtaining valid consent.

You can find further information about the technologies used, their purposes and how to manage your choices in our Cookie Policy.

​

15. Automated Decision-Making

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects on individuals, unless such processing is specifically disclosed and carried out in accordance with applicable law.

Automated technical processes may be used to support website functionality, bookings, payments and operational procedures.

​

16. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, processing activities, legal obligations or applicable data protection requirements.

The latest version will be published on our website, together with its revision date.

Where required by law, we will provide additional information about material changes.

​

17. Contact Information

For any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Verona Travel SRLS
Via Nicola Mazza 7
37129 Verona (VR), Italy
VAT number: IT04881640231

Email: info@verona-travel.com

Supervisory authority:
https://www.garanteprivacy.it