Privacy Policy
Last updated: 30 March 2026
This Privacy Policy explains how Tourista (“we”, “us”, “our”), operating the website eralashdaticho.pro from Warsaw, Poland, collects, uses, and stores personal data when you visit the site or contact us about tours to Italy.
1. Data controller
The controller of your personal data is the business operating Tourista / eralashdaticho.pro. Contact: [email protected], phone: +48 123 456 789.
2. What we collect
- Enquiry and booking data: name, email address, phone number (if provided), message content, travel dates, party size, and preferences you include in forms or emails.
- Technical data: browser type, approximate region (from server logs), and timestamps—used for security and basic statistics where permitted.
- Cookie banner choice: we store your consent preferences in your browser (local storage) so we do not repeatedly show the same prompt.
3. Purposes and legal bases (GDPR)
- Responding to enquiries and fulfilling contracts — Art. 6(1)(b) GDPR (steps prior to contract / performance).
- Legitimate interests — Art. 6(1)(f): operating and securing the website, fraud prevention, and limited internal analytics that do not override your rights.
- Consent — Art. 6(1)(a): where we ask for optional cookies or marketing, only if you agree.
- Legal obligation — Art. 6(1)(c): retaining records where tax or accounting law requires.
4. Cookies and local storage
We do not load third-party advertising or analytics scripts by default. Our cookie banner stores your choice (accept, reject, or custom) in localStorage on your device. You can clear it through browser settings; the banner may appear again until you make a new choice.
5. Recipients and transfers
We may share data with IT and email providers, payment processors, and travel suppliers (hotels, transport, guides) strictly as needed to prepare or deliver your trip. If a supplier is outside the European Economic Area, we use appropriate safeguards (such as Standard Contractual Clauses) where required.
6. Retention
Enquiry emails and booking records are kept for as long as needed to handle your request and for any follow-up legal or accounting retention period (typically up to several years after the last interaction, unless a longer period is required by law).
7. Your rights
Under GDPR you may request access, rectification, erasure, restriction, portability (where applicable), and object to processing based on legitimate interests. You may lodge a complaint with the Polish supervisory authority (UODO) or your local data protection authority. To exercise rights, email [email protected].
8. Children
Our services are not directed at children under 16. We do not knowingly collect their data; if you believe we have, contact us to delete it.
9. Updates
We may revise this Policy and will change the “Last updated” date above. Significant changes may be highlighted on the site or by email where appropriate.