Privacy Policy

This Privacy Policy was last updated on 3 February 2026.

We created this Privacy Policy pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”), so that our users can better understand their rights relating to their personal data and to ensure that our data processing activities comply with the General Data Protection Regulation.

This Privacy Policy concerns our data collection practices and describes your rights to access and correct your personal data, or to limit its use. Unless links to another policy are provided or unless otherwise stated, this Privacy Policy applies when you visit or use the website www.ciaonaplestours.com.

Please note that by using our services you accept the terms of this Privacy Policy; if you do not intend to accept our Privacy Policy, we kindly ask you not to use our services.

Ciao Naples is not responsible for any further processing carried out by its customers and/or commercial partners, or for any additional data they may request.

1. Data Controller and Data Processor

  • Data Controller: Ciao Naples

  • Data Processor: Ciao Naples (unless otherwise specified)

2. What data we collect

We collect certain data directly from you, such as information you provide when you contact us through forms or email. We do not request—and will never request—data that is excessive or not necessary for our activities.

2.1 Data provided directly by you

We may collect various data from you or about you, depending on how you use our services. Examples may include:

  • First name and last name

  • Email address

  • Phone number (if provided)

  • Information included in your message (e.g., travel dates, number of participants, preferences, special requests), when you submit a tailor‑made request or ask for assistance

Data is processed by the Data Controller; for further information you can contact us at the email address indicated in this Privacy Policy.

2.2 Cookies and data collection tools

As described in detail in our Cookie Policy, Ciao Naples and service providers acting on its behalf may use server logs and automatic data collection tools such as cookies, tags, scripts, custom links, device or browser fingerprints, and web beacons (collectively, “Data Collection Tools”) when you access and use the website.

These Data Collection Tools automatically track and collect certain system and usage data. In some cases, we may link data collected through these Data Collection Tools with other information you provide (for example, when you submit a request).

We use cookies for various purposes, such as analyzing the use of the website, personalizing your experience, facilitating access, and recognizing returning visitors.

We use or may use the following types of cookies:

  • Preferences: cookies that remember information about your browser and preferred settings.

  • Security: cookies that support security features and help prevent abuse.

  • Functional: cookies that store functional settings.

  • Session status: cookies that track interactions to help us improve browsing and website performance; some of these cookies may be strictly necessary for proper website operation.

You can set your browser to notify you when cookies are being placed, limit the type of cookies allowed, or refuse cookies altogether. In this case, some website features may not work properly.

Some third-party partners that provide certain features on our website may also use Local Storage Objects (LSO) or similar technologies to collect and store data.

2.3 Analytics

We use or may use third-party analytics services (for example, Google Analytics). These services use Data Collection Tools that allow us to analyze website usage by providing information such as: the third‑party website you came from, the frequency of your visits, events that occur on the website, usage and performance data, and the source/medium of traffic.

We use this data to improve our website and better understand how it performs across devices.

2.4 Online advertising

We use or may use third-party advertising services (for example, Meta/Facebook or Google) including remarketing/retargeting, to promote our services on other websites or applications you use.

Ads may be based on usage/system data and third parties’ tracking data. Depending on the advertising service, cookies or other tracking technologies may be placed on your device to collect information about your use of the website and to provide personalized ads.

3. Purposes of processing (why we use your data)

There are various ways you may provide us with your personal data:

  • Mandatory provision: providing certain data may be necessary to respond to your requests or to comply with legal obligations; if not provided, we may not be able to assist you.

  • Optional provision: failure to provide optional data does not prevent you from using the website.

  • Voluntary submission: for example, when you send an email to addresses listed on our website, we collect the sender’s address and any personal data included in the message and attachments to respond and provide assistance.

We process your data to:

  • Provide information and handle your requests (e.g., tailor‑made itineraries, tour information, support).

  • Communicate with you.

  • Provide customer care.

  • Prevent fraud and abuse, and protect the security and integrity of the website.

  • Analyze website usage and improve performance and content.

  • Where applicable and subject to your choices/consent, support marketing and advertising activities.

4. How we share data

Ciao Naples may share your data for commercial purposes, security, compliance with laws, or as part of corporate reorganization. It may also share data if it is aggregated/anonymized, or if it obtains your consent.

4.1 Transfer of data to other countries

Personal data collected through the website is stored on servers located within the European territory, unless otherwise required by specific third‑party providers.

By way of example, we may share your data:

  • With service providers: companies that perform services on our behalf, such as website hosting, analytics, marketing/advertising services (including retargeting), email services, and customer support. These providers may access personal data and must use it only according to our instructions to provide the requested services.

  • For legal and security reasons: where we believe in good faith that disclosure is permitted or required by law, necessary for legal proceedings, necessary to enforce our policies, or necessary to prevent fraud/abuse and address security issues.

  • With your authorization: with your consent, we may share data for purposes outside the scope of this Privacy Policy.

5. Security

We adopt appropriate security measures to protect against unauthorized access, alteration, disclosure, or destruction of the personal data we collect and store. These measures vary based on the type and sensitivity of the data.

However, no system is completely secure, so we cannot guarantee that communications and data transfers are fully protected from unauthorized access by third parties.

6. Your rights

You have rights regarding your personal data, including the ability to withdraw consent (where applicable), object to certain processing, and exercise the rights listed below.

We record your consent (where required) and can indicate whether you provided it and for which purposes. If you receive communications you believe were not authorized by you, please contact us so we can stop.

7. Choices regarding your data

You may choose not to provide certain data, but in that case we may not be able to respond to specific requests.

If you have questions about your data, our use of your information, or your rights, contact us at:

Email: infociaonaples@gmail.com

7.1 Full list of rights

In particular, the User has the right to:

  • Withdraw consent at any time (where processing is based on consent).

  • Object to processing where it is based on a legal basis other than consent (subject to applicable conditions).

  • Access their data and obtain information about processing, and receive a copy of the processed data.

  • Request rectification of inaccurate data.

  • Obtain restriction of processing where conditions are met.

  • Obtain deletion of personal data where conditions are met.

  • Receive their data and, where technically feasible, have it transferred to another controller (data portability) where processing is based on consent or a contract and carried out by automated means.

  • Lodge a complaint with the competent data protection authority and/or seek judicial remedy.

7.3 Access, update and deletion of your personal data

To request access to, correction of, or deletion of your personal data, email infociaonaples@gmail.com. We may take up to 30 days to respond. For your protection, we may need to verify your identity before processing your request. Please note we may retain certain data where there is a legal basis to do so (e.g., legal obligations).

7.4 Protection of minors

We recognize the importance of protecting children’s privacy and encourage parents and guardians to supervise their children’s online activities. Children under 13 years of age (or 16 in the European Economic Area) are not authorized to use the website/services. If we learn that we have collected personal data from individuals below these ages, we will take reasonable steps to delete it. Parents may contact us at infociaonaples@gmail.com to request removal.

8. Where we store your data

We store and retain your data on servers of our service providers located within the European territory.

9. Updates and contact information

If we make a material change to this policy, we will inform users by email, by a notice on the website, or through another mechanism required by law. Changes will take effect on the day they are published.

9.1 Changes to this Privacy Policy

We may update this Privacy Policy periodically. Unless otherwise stated, changes will take effect on the day they are published. To the extent permitted by law, if you continue to use the website after changes take effect, your continued use will be considered acceptance of the updated Privacy Policy.

The Data Controller is not responsible for updating all links displayed in this Privacy Policy. If a link is not working and/or up to date, Users acknowledge and accept that they should refer to the relevant document and/or section of the referenced third‑party websites.