Privacy Policy – Iconic Guided Tours

Last updated: [08/08/2025]

1. Introduction

Your privacy is very important to us. This Privacy Policy explains how we collect, use, and protect your personal data in compliance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws.

2. Data Controller

The data controller is:

Rome Iconic Tours
Email: info@iconicguidedtours.com
Legal Address: Not applicable (no physical address).

For any questions regarding the processing of your personal data, or to exercise your rights, you can contact us at info@iconicguidedtours.com

3. Types of Data Collected

We collect several categories of personal data to provide our services, improve the user experience, and comply with legal obligations:

• Identifying Information: First name, last name, date of birth.

• Contact Information: Email address, phone number.

• Booking Details: Information related to the tours and services booked (e.g., date, time).

• Geolocation and IP: We collect information about your geographic location and IP address via tools like Google Analytics.

• Other Usage Data: Interactions with our website (e.g., time spent on pages, actions taken).

• Cookies and Similar Technologies: We use cookies to collect browsing information and improve your site experience.

4. Purpose of Data Processing

We process personal data for the following purposes:

• Contract Execution: To manage bookings and provide the requested services.

• Direct Marketing: To send you promotional communications, offers, and newsletters. We will only send you such communications if you have given your explicit consent.

• Website Analysis and Improvement: To monitor and analyze website usage and improve your experience, using tools like Google Analytics.

• Security: To ensure the security of the website and protect your data from unauthorized access.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contractual Necessity: When the data is necessary to fulfill a contract with you (e.g., managing bookings).

• Consent: For sending promotional communications and newsletters, we collect your explicit consent.

• Legitimate Interests: For analyzing and improving the website and ensuring security.

6. Data Retention

We retain your data for the time necessary to fulfill the purposes for which it was collected, and in any case, no longer than the following periods:

• Bookings: Data related to bookings will be kept for legal and business purposes.

• Marketing: Data for marketing purposes (e.g., newsletters) will be kept until you withdraw your consent.

7. Sharing of Data with Third Parties

We may share your data with:

• Analytics Service Providers (e.g., Google Analytics) to monitor website usage.

• Hosting Providers (e.g., IONOS) for data hosting and management.

We do not sell or share your personal data with third parties without your consent.

8. User Rights

In compliance with the GDPR and CCPA, you have the following rights:

• Access to your personal data.

• Correction of inaccurate or incomplete data.

• Deletion of personal data (right to be forgotten), unless required for legal obligations.

• Restriction of Processing in certain circumstances.

• Data Portability: The ability to transfer your data to another service provider.

• Opt-out of Marketing: You can withdraw your consent to receive marketing communications at any time.

• Opt-out of the “sale” of data (as per CCPA) if you have concerns about data sharing for advertising purposes.

To exercise these rights, you can contact us at info@iconicguidedtours.com.

9. International Data Transfers

Your data may be transferred to countries outside the European Union, for example, when we use Google Analytics or other third-party platforms. We take appropriate measures to protect your data, such as implementing standard contractual clauses approved by the European Commission.

10. Data Security

We implement technical and organizational measures to protect your personal data, including encryption, firewalls, and protection against unauthorized access.

11. Policy Changes

We may update this Privacy Policy periodically. In case of significant changes, we will inform you via a prominent notice on our website and update the revision date at the top of the page.