Privacy Policy

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

Data Controller

TRAVEL SETTER S.R.L.

• Registered office: Via Antonio Gramsci, 18 – 50129 Florence (FI), Italy
• Operating office: Via Pippo Spano, 8 – 50129 Florence (FI), Italy
• VAT number: IT 07312960482
• Business Register / REA number: FI-694860
• Certified email (PEC): travelsettersrl@pec.it
• Email: info@travelsetter.it

For any request regarding the processing of your personal data, you may contact the Data Controller at the addresses above.

Categories of Data Collected

Depending on your interactions with this website, Travel Setter S.R.L. may collect:

• Identification and contact data: first name, last name, email address, phone number, provided through the consultation request forms, private stay inquiry forms, or newsletter sign-up ("The Setter's Edit").
• Request-related data: property type, region of interest, destination, stay dates, number of adults/children/infants, preferences, and any notes voluntarily provided in free-text fields.
• Browsing data: IP address, browser type, pages visited, and other technical data automatically collected during navigation, including via cookies and similar technologies (see Cookie Policy).
• Data provided voluntarily: any information shared via email, WhatsApp, or phone with the Travel Setter team.

No special categories of data (Art. 9 GDPR) are collected unless voluntarily provided by the data subject (e.g., dietary or health-related needs relevant to organizing a stay), in which case processing will only occur with explicit consent and solely for the purposes of arranging the trip.

Purposes and Legal Basis of Processing

Purpose

Legal Basis

Responding to requests for information, quotes, or consultation

Pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR)

Organizing and providing the requested travel services

Performance of a contract (Art. 6.1.b GDPR)

Mandatory tax, accounting, and insurance obligations

Legal obligation (Art. 6.1.c GDPR)

Sending the newsletter and promotional communications

Consent of the data subject (Art. 6.1.a GDPR), revocable at any time

Website improvement and anonymous/aggregate statistical analysis

Legitimate interest of the Data Controller (Art. 6.1.f GDPR)

Processing Methods

Data is processed using IT and telematic tools, in a manner strictly related to the purposes indicated above, and in any case in a way that guarantees the security and confidentiality of the data, in compliance with the technical and organizational measures required by Articles 25 and 32 of the GDPR.

Data Retention

Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, and in any case:

• for the duration of the contractual relationship and for the subsequent statutory periods required for tax and civil law purposes;
• until consent is withdrawn, for data processed for newsletter/marketing purposes.

Data Sharing and Disclosure

Personal data may be shared, to the extent strictly necessary for the purposes indicated above, with:

• suppliers and operational partners involved in providing the travel service (e.g., accommodation providers, insurance companies, transport operators);
• technical and IT service providers (e.g., hosting, website management, iteranea);
• consultants and professionals (accountant, lawyer) for legal compliance purposes;
• public authorities, when required by law.

Depending on the case, these parties act as independent Data Controllers or as Data Processors under Art. 28 GDPR, following formal appointment.

Data is not disclosed or transferred to third parties for commercial purposes without the explicit consent of the data subject.

Data Subject Rights

As a data subject, you have the right to:

• obtain confirmation of the existence of a processing operation and access your data (Art. 15 GDPR);
• obtain rectification of inaccurate data or completion of incomplete data (Art. 16 GDPR);
• obtain erasure of your data, in the cases provided by law (Art. 17 GDPR);
• obtain restriction of processing (Art. 18 GDPR);
• obtain data portability (Art. 20 GDPR);
• object to processing based on legitimate interest or carried out for direct marketing purposes (Art. 21 GDPR);
• withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal;
• lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).

To exercise these rights, please write to: info@travelsetter.it or travelsettersrl@pec.it.

Minors

The services offered through this website are not directed at minors under 18 years of age. The Data Controller does not knowingly collect data from minors without the consent of a parent or legal guardian.

Cookies

This website uses technical cookies and, subject to consent, profiling and third-party cookies. For further information, please refer to the Cookie Policy, available at the bottom of the website.

Changes to This Privacy Policy

The Data Controller reserves the right to modify or simply update this Privacy Policy, in whole or in part, including due to changes in applicable law. Any changes will be published on this page.

Last updated: 16/07/2026