Privacy & Cookies Policy

Website: www.lake-como-italy.travel
Last updated: [01/12/2025]

---

1. Data Controller

The Data Controller responsible for the processing of personal data collected through this website is:

Lake Como Italy Travel
Data Protection Manager (DPM): Mr. Antonino Bonfiglio
E-mail for privacy-related questions: info@lake-como-italy.it

We are committed to respecting your privacy and processing your personal data in a transparent, secure and lawful way, in compliance with the EU General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and applicable Italian data protection laws.

2. What Data We Collect

When you browse our website, we may collect the following categories of data:

2.1. Technical and Browsing Data (collected automatically)

When you visit this website, certain technical information is automatically collected, such as:

• Partially anonymised IP address
• Type of browser and device used
• Pages visited and navigation path
• Date and time of access
• Technical events, such as error messages or loading issues

This information is collected in an aggregated and anonymous form and is used solely to ensure the correct functioning, security and performance of the website.

2.2. Data You Provide Voluntarily

If you contact us directly by e-mail at info@lake-como-italy.it, we may receive personal data such as:

• First and last name
• E-mail address
• Any other information you choose to include in your message

We use this data solely in order to read, manage and respond to your request. We do not use these data for marketing, remarketing or profiling purposes.

3. Purposes and Legal Bases of Processing

Your data are processed only for specific and legitimate purposes:

3.1. Website Operation and Security

We process technical and browsing data to ensure the security, stability and proper functioning of the website (e.g., to prevent fraud or abuse, to detect technical issues).
Legal basis: our legitimate interest in keeping the website secure and functional (Article 6(1)(f) GDPR).

3.2. Responding to Requests

When you contact us by e-mail, we process your contact details and the content of your message in order to respond to your enquiry.
Legal basis: taking steps at your request prior to entering into a potential contract or providing information (Article 6(1)(b) GDPR).

We do not carry out remarketing, behavioural advertising or user profiling.

4. Data Retention

We retain personal data only for as long as necessary for the purposes for which they are processed:

• Technical and browsing data: kept for up to 30 days, unless a longer period is required to investigate security incidents.
• Data provided via e-mail: kept for the time strictly necessary to handle and follow up your request, and in any case no longer than 12 months