Privacy Policy

Please note that the Privacy Policy was last revised on January 1, 2024.

At Rome-Tourism, we care about your personal information, which is why we have prepared this Privacy Policy to explain how we collect, use, and share it. We respect your privacy and are committed to protecting it by complying with this privacy policy (“Policy”). This Policy describes the types of information we may collect from you or that you may provide (“Personal Information”) on the Rome-Tourism.org website (“Website”) and all related products and services (collectively, “Services”), as well as our practices for collecting, using, maintaining, protecting, and disclosing that Personal Information. It also describes the choices available to you regarding our use of your personal information and how you can access and update it.

This Policy is a legally binding agreement between you (“User”, “you” or “your”) and Tripisgreat LLC (doing business as “Tripisgreat”, “we”, “us”, or “our”). If you enter into this Policy on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to this Policy, in which case the terms “User”, “you” or “your” shall refer to such entity. If you do not have such authority or if you disagree with the terms of this Policy, you must not accept this Policy and may not access and use the Services. By accessing and using the Services, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. This Policy does not apply to the practices of companies that we do not own or control, or to individuals that we do not employ or manage.

Automatic Information Collection

When you open the Website, our servers automatically record information that your browser or device sends. This data may include information such as your device’s IP address and location, browser and device name and version, operating system type and version, language preferences, the web page you were visiting before you came to the Services, the pages of the Services you visit, the time spent on those pages, information you search for on the Services, access times and dates, and other statistics.

Automatically collected information is only used to identify potential cases of abuse and establish statistical information regarding the usage and traffic of the Services.

Personal Information Collection

You can access the Services and use them without telling us who you are or revealing any information by which you can be identified as a specific, identifiable individual. However, if you wish to use some of the features offered by the Services, you may be asked to provide certain personal information (for example, your name and email address).

We receive and store any information you knowingly provide to us when you create an account, make a purchase, or fill out a form on the Services. When required, this information may include the following:

Account details (such as username, unique user ID, password, etc.)
Contact information (such as email address, phone number, address, etc.)
Basic personal information (such as name, user ID, gender, country of residence, age, traveler preferences, etc.)
Geolocation data of your device (latitude and longitude)

You may choose not to provide us with your personal information, but you may not be able to take advantage of some features of the Services.

Comment Submission

When you leave comments on the site, we collect the data shown in the comments form, as well as your IP address and browser user agent string to help detect spam.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to check if you are using it. The Gravatar service privacy policy is available here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Children’s Privacy Protection

We do not knowingly collect personal information from children under the age of 13. If you are under the age of 13, please do not submit personal information through the Services. If you have reason to believe that a child under the age of 13 has provided personal information to us through the Services, please contact us to request the deletion of that child’s personal information from our Services.

We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce this Policy by instructing their children never to provide personal information through the Services without their permission. We also ask all parents and legal guardians overseeing the care of children to take the necessary precautions to ensure that their children are informed not to communicate personal information online without their permission.

Use and Processing of Collected Information

We act as a data controller and data processor under the GDPR when we process personal information, except when we have entered into a data processing agreement with you, in which case you would be the data controller and we would be the data processor.

Our role may vary depending on the specific situation involving personal information. We act as a data controller when we ask you to provide the personal information necessary for you to access and use the Services. In this case, we are a data controller as we determine the purposes and means of the processing of personal information and we comply with the obligations of data controllers as set forth in the GDPR.

We act as a data processor when you submit personal information through the Services. We do not own, control, or make decisions regarding the personal information submitted, and this personal information is processed only in accordance with your instructions. In this case, the user who provides personal information acts as a data controller under the GDPR.

To make the Services available to you or to comply with a legal obligation, we may need to collect and use certain personal information. If you do not provide the information we request, we may not be able to provide you with the requested products or services. Information we collect from you may be used for the following purposes:

Creating and managing user accounts
Delivering Services
Improving Services
Sending administrative information
Sending marketing and promotional communications
Responding to inquiries and providing assistance
Requesting user feedback or collecting reviews
Improving user experience
Providing targeted advertising
Executing and managing orders
Enforcing terms and policies
Managing and operating the Services.

The processing of your personal information depends on how you interact with the Services, your location in the world, and the application of any of the following: (i) you have given your consent for one or more specific purposes; this does not apply, however, when the processing of personal information is subject to the California Consumer Privacy Act or European data protection law; (ii) the provision of information is necessary for the performance of this Policy with you and/or any pre-contractual obligations thereof; (iii) processing is necessary for compliance with a legal obligation to which you are subject; (iv) processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us; (v) processing is necessary for the purposes of the legitimate interests pursued by us or by a third party. We may also combine or aggregate some of your personal information in order to better serve you and improve and update our Services.

We rely on user consent as a legal basis, as defined in the GDPR, to collect and process your personal information.
Note that, under certain legislation, we may be permitted to process information until you object to such processing by deleting your account, without having to rely on consent or any other of the legal bases above. In all cases, we will be happy to clarify the specific legal basis that applies to the processing, and in particular, whether the provision of personal information is a legal or contractual requirement or a requirement necessary to enter into a contract.

Payment Processing

In the case of paid Services, you may need to provide your credit card details or other payment account information, which will be used solely for processing payments. We use third-party payment processors (“Payment Processors”) to process your payment information securely.

Payment processors adhere to the latest security standards managed by the PCI Security Standards Council, which is a joint effort of brands such as Visa, MasterCard, American Express, and Discover. Sensitive and private data exchanges occur over an SSL-secured communication channel and are encrypted and protected with digital signatures. The Services are also compliant with strict vulnerability standards to create as secure an environment as possible for users. We will share payment data with payment processors only to the extent necessary for processing your payments, refunding such payments, and addressing complaints and inquiries related to such payments and refunds. Please note that payment service providers may collect certain personal information from you, enabling them to process your payments (e.g., your email address, address, credit card details, and bank account number) and manage all stages of the payment process through their systems, including data collection and processing. The use of your personal information by these payment service providers is governed by their respective privacy policies, which may or may not contain privacy protection as comprehensive as this Policy. We encourage you to review their respective privacy policies.

Information Management

You can delete certain personal information we have about you. The personal information you can delete may change as the Services change. When you delete personal information, we may retain an unrevised copy of the personal information in our records as long as necessary to comply with our obligations to our affiliates and partners, and for the purposes described below. If you wish to permanently delete your account and personal information, please contact us via the form at: https://Rome-Tourism.org/en/contact-2.

Disclosure of Information

Depending on the Services requested or if it is necessary to complete a transaction or provide a Service you have requested, we may share your information with our affiliates, contract companies, and service providers (collectively, “service providers”) we rely on to help operate the Services made available to you and whose privacy policies are compatible with ours or who agree to comply with our personal information policies. We will not share any personally identifiable information with third parties and will not share any information with unaffiliated third parties.

Service providers are not authorized to use or disclose your information except as necessary to provide Services on our behalf or to comply with legal requirements. Service providers receive only the information they need to perform their designated functions, and we do not authorize them to use or disclose the information provided for their own marketing or other purposes.

We may also disclose any personal information we collect, use, or receive if required or permitted by law, for example, to comply with a subpoena or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.

Information Retention

We will retain and use your personal information for as long as necessary to comply with our legal obligations, as long as your user account remains active, to enforce our policies, resolve disputes, and unless a longer retention period is required or permitted by law.

If you leave a comment, the comment and its metadata are retained indefinitely. This is so that follow-up comments can be automatically recognized and approved instead of holding them in a moderation queue.

If you register on our website, we also store the personal information you provide in your user profile. All users can see, edit, or delete their personal information at any time (except for their username, which they cannot change). Website administrators can also see and edit that information.

We may use any aggregated data derived from your personal information or incorporating it after you update or delete it. At the end of the retention period, personal information will be deleted. As a result, the right to access, the right to deletion, the right to rectification, and the right to data portability cannot be enforced after the retention period expires.

Transfer of Information

Depending on your location, data transfers may involve transferring and storing your information in a country other than your own. If such a transfer takes place, you can learn more by checking the relevant sections of this Policy or by contacting us using the contact information provided in the contact section.

Data Protection Rights under GDPR

If you reside in the European Economic Area (“EEA”), you have certain data protection rights, and we strive to take reasonable steps to allow you to correct, amend, delete, or limit the use of your personal information. If you wish to be informed about the personal information we hold about you and if you want it to be removed from our systems, please contact us. In certain circumstances, you have the following data protection rights:

(i) You have the right to withdraw your consent where you have previously given your consent to the processing of your personal information. Where the legal basis for our processing of your personal information is consent, you have the right to withdraw that consent at any time. The withdrawal will not affect the lawfulness of processing before the withdrawal.
(ii) You have the right to know if we are processing your personal information, obtain information on certain aspects of the processing, and obtain a copy of your personal information undergoing processing.
(iii) You have the right to verify the accuracy of your information and request that it be updated or corrected. You also have the right to ask us to complete personal information that you believe is incomplete.
(iv) You have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent. Where personal information is processed for public interest reasons, in the exercise of an official authority vested in us, or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a reason related to your particular situation to justify the objection. However, please note that if your personal information is processed for direct marketing purposes, you may object to such processing at any time without providing any justification. To find out if we are processing personal information for direct marketing purposes, please refer to the corresponding sections of this Policy.
(v) You have the right, in certain circumstances, to restrict the processing of your personal information. These circumstances include: you contest the accuracy of your personal information and we need to verify it; the processing is unlawful, but you oppose the erasure of your personal information and request instead the restriction of its use; we no longer need your personal information for the purposes of processing, but you need it to establish, exercise, or defend your legal rights; you have objected to the processing pending verification of whether our legitimate grounds override yours. When processing has been restricted, such personal information will be marked accordingly and, except for storage, will only be processed with your consent or for the establishment, exercise, or defense of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest.
(vi) You have the right, in certain circumstances, to obtain the erasure of your personal information from us. These circumstances include: personal information is no longer necessary in relation to the purposes for which it was collected or otherwise processed; you withdraw your consent on which the processing is based; you object to the processing under certain data protection laws; the processing is for direct marketing purposes; and the personal data has been unlawfully processed. However, there are exclusions to the right to erasure, including where processing is necessary: for the exercise of the right to freedom of expression and information; for compliance with a legal obligation; or for the establishment, exercise, or defense of legal claims.
(vii) You have the right to receive the personal information that you have provided to us in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transmitted to another data controller without hindrance, provided that such transmission does not adversely affect the rights and freedoms of others.
(viii) You have the right to lodge a complaint with a data protection authority regarding our collection and use of your personal information. If you are not satisfied with the outcome of your complaint directly with us, you have the right to file a complaint with your local data protection authority. For more information, please contact your local data protection authority in the EEA. This provision applies provided that your personal information is processed by automated means and that the processing is based on your consent, on a contract to which you are a party, or on pre-contractual obligations thereof.

California Privacy Rights

Consumers residing in California are granted specific rights regarding their personal information under the California Consumer Privacy Act (“CCPA”). If you reside in California, this section applies to you.

As outlined in this policy in the section on information collection above, we have collected the following categories of personal information over the past twelve (12) months:

Personal Identifiers (such as email address, phone number, etc.)
Personal Characteristics (such as age, gender, etc.)

In addition to the rights explained in this policy, California residents who provide personal information as defined by law to obtain Services for personal, family, or household purposes have the right to request and obtain from us, once per calendar year, information about the categories and specific elements of personal information that we have collected and disclosed.

Additionally, California residents have the right to request the deletion of their personal information or to opt out of the sale of their personal information, which may include the sale, disclosure, or transfer of personal information to another company or third party for monetary or other valuable consideration. To do this, simply contact us. We will not discriminate against you if you exercise your rights under the CCPA.

How to Exercise Your Rights

Any request to exercise your rights can be directed to us through the contact information provided in this document. Please note that we may ask you to verify your identity before responding to such requests. Your request must contain sufficient information to allow us to verify that you are indeed the person you claim to be or that you are the authorized representative of that person. If we receive your request from an authorized representative, we may ask you to provide evidence that you have granted them power of attorney or that the authorized representative has valid written authorization to submit requests on your behalf.

Cookies

Our Services may use “cookies” to personalize your online experience. A cookie is a text file placed on your hard drive by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you and can only be read by a web server in the domain that issued the cookie.

We may use cookies to collect, store, and track information for security and personalization purposes, as well as for statistical purposes. Please note that you have the option to accept or decline cookies. Most web browsers automatically accept cookies by default, but you can modify your browser settings to decline cookies if you wish.

If you leave a comment on our site, you may choose to save your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.

If you visit our login page, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.

When you log in, we will also set several cookies to save your login information and screen display choices. Login cookies last for two days, and display option cookies last for one year. If you select “Remember me”, your connection will persist for two weeks. If you log out of your account, the login cookies will be deleted.

If you edit or publish an article, an additional cookie will be saved in your browser. This cookie contains no personal data and simply indicates the ID of the article you just edited. It expires after 1 day.

Data Analytics

Our Services may use third-party analytics tools that utilize cookies, web beacons, or similar data collection technologies to gather standard internet activity and usage information. The information collected is used to compile statistical reports on user activity, such as how often users visit our Services, which pages they visit, and how long they stay. We use the information obtained through these analytics tools to monitor performance and improve our Services. We do not use third-party analytics tools to track or collect personally identifiable information about our users, and we will not associate any information collected from statistical reports with an individual user.

“Do Not Track” Signals

Some browsers incorporate a “Do Not Track” feature that signals to websites you visit that you do not want your online activity to be tracked. Tracking is not the same as using or collecting information related to a website. For this purpose, tracking refers to the collection of personally identifiable information from consumers who use or visit a website or online service as they navigate across different websites over time. The way browsers communicate the Do Not Track signal is not yet uniform. Therefore, the Services are not yet set up to interpret or respond to Do Not Track signals communicated by your browser. Nevertheless, as outlined in this policy, we limit the use and collection of your personal information. For a description of Do Not Track protocols for browsers and mobile devices or to learn more about your choices, visit internetcookies.com.

We may display online advertisements and share aggregated and non-identifying information about our customers that we or our advertisers collect while you are using the Services. We do not share any personally identifiable information about individual customers with advertisers. In some cases, we may use aggregated and non-identifying information to deliver tailored ads to a targeted audience.

We may also allow certain third-party companies to help us tailor advertising that we believe may interest users and to collect and use other data about user activities on the Services. These companies may deliver ads that may place cookies and track user behavior.

Social Media Features

Our Services may include social media features, such as Facebook and X (Twitter) buttons, “Share” buttons, etc. (collectively referred to as “Social Media Features”). These Social Media Features may collect your IP address, the page you are visiting on our Services, and may set a cookie to enable the Social Media Features to function properly. Social Media Features are either hosted by their respective providers or directly on our Services. Your interactions with these Social Media Features are governed by the privacy policy of their respective providers.

Email Marketing

We may offer newsletters to which you may voluntarily subscribe at any time. We are committed to keeping your email address confidential and will not disclose it to any third parties, except as permitted in the information use and processing section or for the purpose of utilizing a third-party provider to send such emails. We will retain information sent via email in accordance with applicable laws and regulations.

In compliance with the CAN-SPAM Act, all emails sent from us will clearly state the sender of the email and provide clear information on how to contact the sender. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or by contacting us. However, you will continue to receive essential transactional emails.

Affiliate Links

We may participate in affiliate marketing and have affiliate links on the Services in order to offer you related or additional products and services. If you click on an affiliate link, a cookie will be placed on your browser to track sales for commission purposes.

Links to Other Resources

The Services contain links to other resources that are neither owned nor controlled by us. Please note that we are not responsible for the privacy practices of these other resources or third parties. We encourage you to be aware when you leave the Services and to read the privacy statements of each resource that may collect personal information.

Information Security

We secure the information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, or disclosure of personal information under our control and custody. However, no data transmission over the Internet or wireless network can be guaranteed.

Therefore, while we strive to protect your personal information, you acknowledge (i) that there are security and privacy limitations of the Internet which are beyond our control; (ii) that the security, integrity, and confidentiality of all information and data exchanged between you and the Services cannot be guaranteed; and (iii) that any such information and data may be viewed or tampered with in transit by a third party, despite best efforts.

Data Breach Event

In the event we become aware that the security of the Services has been compromised or that users’ personal information has been disclosed to unrelated third parties due to external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities. In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe there is a reasonable risk of harm to the user as a result of the breach or if otherwise required by law.

Modifications and Amendments

We reserve the right to modify this Policy or its terms relating to the Services at any time at our discretion. When we do, we will revise the updated date at the bottom of this page. We may also notify you in other ways at our discretion, such as through the contact information you have provided.

An updated version of this Policy will be effective immediately upon the posting of the revised Policy unless otherwise specified. Your continued use of the Services after the effective date of the revised Policy (or any other act specified at that time) will constitute your consent to those changes. However, we will not use your personal information in a materially different manner than what was stated at the time your personal information was collected without your consent.

Acceptance of this Policy

You acknowledge that you have read this Policy and agree to all its terms and conditions. By accessing and using the Services and submitting your information, you agree to be bound by this Policy. If you do not agree to abide by the terms of this Policy, you are not authorized to access or use the Services.

Contact Us

If you have any questions, especially regarding the information we may hold about you or if you wish to exercise your rights, you may contact us at the following address:

https://Rome-Tourism.org/en/contact-2/

Please note that the Privacy Policy was last revised on January 01, 2024.