Facebook Instagram Linkedin Tripadvisor

Privacy Policy

A comprehensive guide about our privacy policies

Data Controller

The data controller is AGK SRL (LuxTaly)

Registered office: Via Redipuglia 13/A – 00054 Fiumicino (RM) – Italy

VAT number 17703511000 – PEC: agksrl2024@legalmail.it – Unique Code: KRRH6B9

Types of Data Collected

  1. We collect and process the following personal data:
    • Identification and contact data: name, surname, email address, telephone, residence/billing address.
    • Booking data: travel preferences, logistical information, special needs (food allergies, transport requests).
    • Payment data: managed exclusively by third-party providers (Stripe, banks). LuxTaly does not store any sensitive data relating to credit cards.
    • Navigation data: IP address, access logs, technical and profiling cookies (see Cookie Policy).

Purpose of Processing

  1. Data is processed for the following purposes:
    • Management of bookings, service confirmation, customer assistance.
    • Sending travel-related communications (changes, updates, confirmations).
    • Fulfillment of legal, tax and accounting obligations.
    • Marketing and newsletter (with explicit consent).
    • Anonymous statistical analysis of website and service usage.

Legal Basis

  1. Processing is based on:
    • Contract: execution of services requested by the client.
    • Legal obligation: tax and administrative fulfillments.
    • Consent: newsletter subscription and promotional communications.
    • Legitimate interest: improvement of services offered and platform security.

Data Sharing

  1. Data may be shared exclusively with:
    • Tourism service providers (guides, restaurants, NCC, hotels) if necessary for the provision of the service.
    • Payment providers and banks.
    • Technological partners (Bokun, Viator, GetYourGuide, etc.) for booking management.
    • Legal and tax consultants, if required.
  2. Under no circumstances will data be sold or transferred to third parties for commercial purposes.

Data Retention

  • Booking data is kept for the time strictly necessary for the provision of the service and for a maximum of 10 years for tax purposes.
  • Data collected for marketing purposes is kept until consent is revoked.

Rights of the Data Subject

  1. Users can at any time exercise their rights under the GDPR (EU Reg. 679/2016):
    • access to data,
    • rectification and updating,
    • cancellation (“right to be forgotten”),
    • limitation of processing,
    • data portability,
    • opposition to processing for marketing purposes.
  2. Requests should be sent to privacy@luxtaly.com

Data Security

  1. LuxTaly adopts technical and organizational measures to protect data (SSL, PCI-DSS protocols, secure servers, controlled access).

Complaints

  1. In case of personal data breach, it is possible to file a complaint with the Garante per la Protezione dei Dati Personali www.garanteprivacy.it