Who is responsible for your data
The data controller (titolare del trattamento) is Italivia, Via Albert Einstein, 4, 20092 Cinisello Balsamo (MI), Italia. For any question about personal data, write to info@italivia.com.
Your rights
At any time you can:
- find out what information we hold about you;
- ask us to correct or delete it;
- require us to restrict how it is processed;
- receive it in a portable format;
- object to its processing;
- withdraw consent you have previously given.
Send your request to info@italivia.com and include the contact details from your booking request: phone, messenger or email. This lets us check that the request really comes from the person the data belongs to. We will reply within 30 days at the latest.
What happens when you open the website
Server log. For every request, the server makes a technical record: IP address, date and time, the page opened and the browser type. The log helps us spot faults and overloads, notice hacking attempts and gauge traffic. The legal basis is legitimate interest (GDPR, Art. 6(1)(f)). These records are not linked to booking requests, not used for advertising and not shared with third parties.
Essential files. These store your chosen language and a draft of your request. The site cannot work without them, so we do not ask for consent to them.
Visitor statistics. Google Analytics 4, provided by Google Ireland Ltd., is switched on only with your consent. Consent means clicking "Accept", or closing the banner and then continuing to use the site. Click "Decline" and Google Analytics never loads, so none of its cookies are stored.
It collects anonymised information: which pages were opened, where the visitor came from, their device and country, and at which step of the request form they stopped.
Ad measurement. Google Ads, also provided by Google Ireland Ltd., runs only if you have explicitly clicked "Accept". When you arrive via one of our ads, the site stores an identifier for that click in your browser for up to 30 days. If you send a request within that time, we pass Google the identifier, the time of the request and, if you provided them, a hashed version of your phone number and email address. This is how Google counts the request as a result of the ad. None of this is used to show you personalised ads.
If you have not clicked "Accept", the click identifier is not stored and not sent to Google. Your request then carries only a note saying "came from an ad", which stays with us and is not passed to Google.
For statistics and ad measurement, the legal basis is consent (GDPR, Art. 6(1)(a)). If you change your mind, withdraw it via the "Cookies" link at the bottom of the page.
Data in the USA. When Google Analytics is in use, information may reach the United States, outside the EEA. In such cases Google Ireland Ltd. uses the EU's standard contractual clauses together with extra safeguards. If you haven't agreed to statistics, nothing is transferred.
What happens when you send a request
Which data. Your name, phone number or messenger, and optionally your email. Where from and where to, the pick-up date and time. The number of passengers and pieces of luggage, your flight number and any comment. The site also records the language of the page you were on and your device type.
Purpose. So that a carrier can take on your booking and we can reach you about the trip.
Legal basis. Carrying out a contract with you, or taking steps you have asked for before one is concluded (GDPR, Art. 6(1)(b)).
Recipient. The carrier who accepted the booking. They receive only what is needed for the journey: your name and contact details, the route, the pick-up time and the flight number. From then on they are a data controller in their own right and handle it independently.
What happens when you write in the chat
Which data. The text of your messages and your phone number, if you leave one. The site also records which page you are writing from and in which language. A technical conversation key is stored in your browser so that you can return to the conversation later. It is kept for 30 days after the last message.
Purpose. To answer you, work out a price and make a booking.
Legal basis. Steps taken at your request before a contract is concluded (GDPR, Art. 6(1)(b)).
Who answers. An automated Italivia assistant answers first. An operator joins if you ask.
A request. Please don't put unnecessary personal details in the chat: identity documents, health information, bank card details. We don't need them to answer you or to book a trip.
Who else processes the data
We do not sell data. Apart from the carrier, it is accessible only to the services the site cannot run without: our hosting provider and the service that delivers booking requests. Google receives data only with your consent, as described above.
The chat runs on technical services that process messages on our behalf. Some of them are located outside the European Union.
How long we keep it
| What | Period |
|---|---|
| Booking request | 24 months from the date of the journey, for disputes and accounting, then deleted |
| Correspondence about an enquiry and chat history on our server | 12 months from the last message |
| Server log | 30 days, then deleted automatically |
| Google Analytics data | 14 months (as configured in Google Analytics), then deleted automatically |
| Ad click identifier in the browser | up to 30 days, only with consent |
| Chat conversation key in your browser | 30 days after the last message |
How to complain
If you believe we have infringed your rights when processing your data, you can file a complaint with Italy's supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it). You may also contact the supervisory authority of the EU country where you live.
Changes to this policy
We publish any new version on this page and update the date below the text. If the changes are significant, we will also notify you separately.
Version dated 13 November 2026