Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains how Italy2Love handles personal data when you visit italy2love.com, write to us or apply to be listed as a partner. It describes what the website actually does today. If that changes, we update this page before the change goes live.

1. Who we are

Italy2Love is published by ALPACA DIGITALE SRLS VAT IT03198540605. We are the data controller for the processing described on this page.

For any privacy question or request, write to info@italy2love.com.

2. What we collect and why

When	What data	Why	Legal basis (GDPR)
You browse the website	IP address, browser and device information, the page requested, date and time, as recorded in server and security logs	Deliver the website, keep it secure and prevent abuse	Legitimate interests, Art. 6(1)(f)
Audience measurement	The address of the page you view, the page you came from and the technical information every browser sends with a web request, including your IP address. No cookies and no identifiers are stored on your device	Count visits and see which pages are read, in aggregate	Legitimate interests, Art. 6(1)(f)
Analytics and advertising measurement, only if you accept them in the cookie banner	Pages viewed, clicks on links to our booking partners, use of our trip planner and sign-up box, device and browser information, approximate location derived from your IP address, and the identifiers stored by Google Analytics, Microsoft Clarity and the Meta Pixel. Microsoft Clarity also records how pages are used, such as scrolling, clicks and mouse movement, so we can replay sessions with form inputs masked	Understand which guides and features are useful, find what does not work on a page, and measure our advertising on Meta	Consent, Art. 6(1)(a). You can change your choice at any time from the consent settings on the website
You use the contact form or email us	Name, email address, your message and anything you choose to include	Reply to you and handle any follow-up	Steps you ask us to take before a possible contract, Art. 6(1)(b); otherwise legitimate interests in answering correspondence, Art. 6(1)(f)
You apply through the “List your business” form	Your name, business name, email, website or social page, area of operation, type of experience and, if you choose, phone or WhatsApp number and a description of your business	Assess your application and reply, including with a quote	Steps you ask us to take before a possible contract, Art. 6(1)(b)
You rate an article	Your vote and the technical data needed to limit duplicate votes	Show an average rating and keep it reliable	Legitimate interests, Art. 6(1)(f)
You sign up for our email updates	First name, email address, the page where you signed up, the page you came from, campaign tags in the link, browser language, device type, the date and the exact wording of the consent you gave	Send the travel tips and updates you asked for, and keep proof of your consent	Consent, Art. 6(1)(a). You can unsubscribe at any time from the link in every email or by writing to us
You exercise your privacy rights, or the law requires it	Your contact details, your request and the information strictly needed to verify your identity	Handle your request, meet legal obligations and, if necessary, defend legal claims	Legal obligation, Art. 6(1)(c); legitimate interests, Art. 6(1)(f)

Our forms are set up not to record your IP address or browser details and not to place tracking cookies. Giving us your details is voluntary, but we cannot reply without an email address. Please do not send payment card details, identity documents or health information through the forms.

3. What we do not do

We use Google Analytics, Microsoft Clarity and the Meta Pixel only if you accept them in the cookie banner. If you decline, they are not loaded.
We do not use any other advertising pixel or cookie-based analytics.
We do not sell your personal data, and we do not use it to build advertising profiles.
We do not take booking or payment details: bookings happen on our partners’ websites (see section 5).

If we decide to add analytics or advertising technologies, we will update this policy and the Cookie Policy first and, where the law requires it, ask for your consent before they run.

4. Who receives your data

Aruba S.p.A. (Italy) hosts the website and our email. It processes data on our behalf.
Metricool Software, S.L. (Madrid, Spain) provides our cookie-free audience measurement and processes data on our behalf. According to Metricool, its website tracker stores nothing on your device and does not store IP addresses.
Google Ireland Limited (Dublin, Ireland) provides Google Analytics, used only with your consent, and the Google Workspace tools (Google Sheets and Apps Script) where we keep our list of email subscribers. It processes this data on our behalf.
Meta Platforms Ireland Limited (Dublin, Ireland) receives data through the Meta Pixel, only with your consent, and processes it under its own terms and privacy policy.
Microsoft Ireland Operations Limited (Dublin, Ireland) provides Microsoft Clarity, used only with your consent, to show us in aggregate and through masked session replays how our pages are used.
Our team and collaborators who run and maintain the website, including ALPACA DIGITALE SRLS for backups. They access data only as their role requires and are bound by confidentiality.
Professional advisers and public authorities, only when necessary to meet a legal obligation or to establish or defend legal claims.

Messages sent through our forms are stored in the website database and delivered to our mailbox at info@italy2love.com.

5. Affiliate links and bookings

Italy2Love links to experiences offered by third parties, mainly Viator. Some of these links are affiliate links: if you book through them, we may earn a commission.

When you follow one of these links, you leave Italy2Love. The partner can see that you arrived from our link, through the affiliate code in the link and the address of the page you came from. From that point, the partner’s own terms, privacy policy and cookie choices apply. Bookings, payments, cancellations and refunds are handled entirely by the partner. Italy2Love never receives your payment details.

6. Where your data is processed

Most of the providers listed in section 4 are based in the European Union. Google, Microsoft and Meta may also process data in the United States: Google and Microsoft state that they are certified under the EU-U.S. Data Privacy Framework and use standard contractual clauses where needed, and Meta relies on the transfer mechanisms described in its own privacy policy. If any other provider outside the EEA or the UK is ever involved, we will name it here and rely on an adequacy decision or on standard contractual clauses.

When you choose to visit a partner’s website, that partner may process your data in other countries under its own policy.

7. How long we keep your data

Server and security logs: for the limited period our hosting provider keeps them for operation and security, after which they are deleted automatically.
Messages and partner applications: up to 12 months after our last exchange, then deleted. If we start working together, we keep the records needed for that relationship while it lasts, and accounting records for the period required by Italian law.
Backups: copies of the website database, which include form entries, are kept for a limited rotation period and then overwritten.
Email subscriptions: until you unsubscribe. After that, we keep only the record needed to make sure we do not write to you again.
Audience statistics: kept in aggregate form, which does not identify you.
Google Analytics: event data for 2 months and user-level data for up to 14 months from your last visit, then deleted automatically. Data collected through the Meta Pixel is kept by Meta under its own policy.
Microsoft Clarity: session recordings for 30 days and usage data for up to 9 months, then deleted.

We may keep specific data for longer only when we need it for a dispute or a legal obligation.

8. Your rights

Under the GDPR you can ask to access, correct or delete your personal data, to restrict its use or to receive it in a portable format. You can object at any time to processing based on our legitimate interests, including audience measurement, and to any direct marketing. Where we rely on your consent, you can withdraw it at any time; this does not affect what we did before.

Write to info@italy2love.com, ideally with “Privacy request” in the subject line. We reply within one month. If a request is complex, that period can be extended, and we will tell you why within the first month. We only ask for the information we need to confirm who you are.

You can also lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority where you live or work. If UK data protection law applies to you, you can contact the Information Commissioner’s Office.

9. Visitors from the United States

We do not sell personal information, and we do not share it for cross-context behavioral advertising or targeted advertising. Wherever you live, you can ask us what personal information we hold about you, ask us to correct it or ask us to delete it by writing to info@italy2love.com. We will not treat you differently for making a request.

10. Children

Italy2Love is a travel website for a general adult audience and is not directed at children. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, write to us and we will delete it.

11. Changes to this policy

We update this page whenever our practices change, and the date at the top shows the latest version. If a change requires your consent, we will ask for it before applying it.