Privacy and professional information

1. Data and purposes

To answer enquiries, I use your name, email, optional telephone number and information you choose to provide: destination, dates, group size, language, interests and practical preferences. Providing this information is voluntary; contact details and essential information are needed to reply. Other details help me prepare a personal proposal.

Please do not enter diagnoses, documents, medical data or other sensitive information in the free-text fields. This site does not collect payments or automatically confirm availability or bookings.

To deliver and secure the website, the hosting service also processes technical request data, such as IP address, requested page, date and browser information, under its service terms.

2. Legal bases

Enquiries and visit planning rely on pre-contractual measures requested by you and, when a service is agreed, performance of the contract (Article 6(1)(b) GDPR). Administrative and tax requirements rely on legal obligations (point c). Technical operation and website security rely on the legitimate interest in providing a reliable service and preventing abuse (point f).

The site does not provide for promotional mailings, sale of personal data, profiling or automated decisions with legal effects on you.

3. Hosting, email and recipients

The website is hosted by Netlify, Inc. Emails are received and managed through Google’s Gmail. Providers process the data needed for their services; César Augusto handles enquiry content to reply and organise visits. Information may be shared with advisers or authorities where necessary for legal duties or protecting rights.

The VivoCities link presents a professional collaboration. This site does not automatically forward enquiry data to Ernesto or VivoCities.

4. Processing outside the European Economic Area

Netlify and Google services may involve processing outside the European Economic Area, including the United States. Their documents linked below explain applicable mechanisms, including the EU–US Data Privacy Framework and, where provided, standard contractual clauses. Contact the controller for details about your enquiry.

5. Retention criteria

Enquiry correspondence is retained for the time needed to assess the request, reply and handle follow-up. If a service is agreed, retention takes account of performance and applicable administrative and tax requirements. Where a dispute arises, data needed to handle it and protect rights is retained for the relevant period.

Technical hosting data follows the provider’s retention periods and operational terms. The site does not save entered form fields on your device for a later visit.

6. Language, cookies and external services

The page address determines its language, which you can change in the menu. The site does not embed advertising pixels, profiling tools or third-party visitor analytics, and does not load fonts from external services. Providers describe their technical functions in their own notices.

Instagram, Google Maps, the Ministry portal and VivoCities are external services, opened when you select their links and governed by their own privacy notices. These pages do not preload embedded content from them.

7. Your rights

You can request access, correction, erasure and restriction of your data, as well as portability and objection where Articles 15–22 GDPR apply. Email cesarbracho1994@gmail.com with your request. You can also complain to the Italian Data Protection Authority (Garante) or another competent supervisory authority.