Privacy Policy
Last updated: 30 October 2026
This notice explains how allegranavettagallipolina.com processes the personal data of people who visit the website www.allegranavettagallipolina.com and of people who request or book a transport service. It is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
1. Data controller
The data controller is Puglia Tourist di Claudio Rollo, trading under the brand allegranavettagallipolina.com.
- Registered office: Via Triste 40, 73020 Martignano (LE), Italy
- VAT number: 05060870754
- Email: info@allegranavettagallipolina.com
- Phone and WhatsApp: +39 351 57 42 091
The controller has not appointed a Data Protection Officer (DPO), as it is not required to do so. For any privacy question you can write to the email address above.
2. What data we collect
Browsing data. The systems that run the website record some technical data during normal browsing: IP address, browser and device type, operating system, date and time of the visit, pages visited. This data is used to make the website work and to protect it, and is not used to identify you.
Data sent through the booking form. When you request a quote or book a ride you provide:
- first and last name
- phone number
- email address
- pick-up and drop-off locations
- date and time of the service
- number of passengers
- flight number (if the service starts or ends at an airport)
- any notes
Fields marked as required are needed to organise the service: without them we cannot answer your request. Please do not enter sensitive data in the notes, such as health information, which is not needed for the booking.
Data you send us directly. If you contact us by email, phone or WhatsApp we process the data you give us (for example your phone number and the content of your messages) only to reply and manage the service. If you use WhatsApp, the service is provided by WhatsApp Ireland Limited, which processes data as an independent controller under its own privacy notice.
Cookies and measurement tools. The website uses technical cookies, needed for it to work, and, only with your consent, Google Analytics 4 and Google Ads cookies. Details are in the Cookie Policy. We also use Google Search Console, which provides aggregated data on the searches people use to find the website and does not install cookies on your device.
3. Why we process data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering requests for information and quotes, organising and carrying out the booked transport service | Performance of a contract or pre-contractual steps requested by you (Art. 6.1.b) |
| Complying with tax, accounting and legal obligations related to the service | Legal obligation (Art. 6.1.c) |
| Ensuring the operation and security of the website and preventing abuse | Legitimate interest of the controller (Art. 6.1.f) |
| Defending our rights in case of disputes | Legitimate interest of the controller (Art. 6.1.f) |
| Collecting statistics on website use with Google Analytics 4 | Consent (Art. 6.1.a) |
| Measuring Google Ads campaign conversions and showing relevant ads | Consent (Art. 6.1.a) |
You can withdraw your cookie consent at any time using the "Cookie preferences" link on the website. Withdrawal does not affect processing already carried out. We do not use your data for newsletters or promotional communications and we do not take decisions based solely on automated processing.
4. How we process data and who we share it with
Data is processed using electronic tools and, where needed, on paper, by authorised persons and with appropriate security measures. Requests sent through the form reach our email inbox and are not stored in a website database.
Data may be shared only with those who need it for the purposes stated:
- drivers and collaborators who actually carry out the service
- accountant and consultants, for tax and accounting obligations
- Aruba S.p.A. (Italy), which provides website hosting and email service, appointed as data processor
- Google Ireland Limited, for the Google Analytics 4, Google Ads and Google Search Console services
- public authorities, when required by law
Data is not sold or disclosed.
Transfers outside the European Union. Google services may involve the transfer of some data to the United States, to Google LLC. The transfer takes place on the basis of the European Commission's adequacy decision on the EU-U.S. Data Privacy Framework, to which Google LLC adheres, and of the Standard Contractual Clauses. In Google Analytics 4 the IP address is not recorded.
5. How long we keep data
| Data | Retention period |
|---|---|
| Completed bookings and related tax documents | 10 years, as required by civil and tax law (Art. 2220 of the Italian Civil Code) |
| Quote requests that do not become a booking | 24 months from the last contact |
| Google Analytics 4 data | 14 months |
| Technical server logs | For the period set by the hosting provider, unless needed to establish wrongdoing |
| Cookies | For the duration stated in the Cookie Policy |
When the period ends, data is deleted or anonymised.
6. Your rights
At any time you can ask the controller to:
- access your data and receive a copy (Art. 15)
- correct or update it (Art. 16)
- delete it (Art. 17)
- restrict its processing (Art. 18)
- receive it in a structured format and transmit it to another controller (Art. 20)
- object to processing based on legitimate interest (Art. 21)
- withdraw consent, without affecting processing already carried out (Art. 7)
To exercise your rights write to info@allegranavettagallipolina.com. We reply within 30 days.
If you believe the processing violates the GDPR, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome (www.garanteprivacy.it).
7. Minors
The booking form is for adults only. Bookings for underage passengers must be made by a parent or by the person responsible for them.
8. Changes to this notice
We may update this notice, for example in case of new services or changes in the law. The version in force is always published on this page, with the date of the last update shown at the top.