Data Deletion Policy

1. Introduction

Veditalia respects users’ privacy rights and is committed to handling personal data in accordance with Regulation (EU) 2016/679 (“GDPR”).

Users have the right to request deletion of their personal data under the conditions established by applicable privacy laws.

This policy explains how deletion requests can be submitted and how they are managed by Veditalia.

2. How to Request Data Deletion

Users may request deletion of their personal data at any time by contacting:

[email protected]

Requests should include:

• full name
• email address used on the Website or during booking
• clear description of the request

Veditalia may contact the user for additional information where necessary to correctly process the request.

3. Identity Verification

To protect user privacy and prevent unauthorized deletion requests, Veditalia may request reasonable verification of identity before processing a data deletion request.

If sufficient verification cannot be provided, Veditalia reserves the right to deny or postpone the request until identity can be reasonably confirmed.

4. What Data May Be Deleted

Where the requirements of applicable data protection law are met, Veditalia will delete or, where appropriate, irreversibly anonymize the personal data concerned by the request. This may include:

• contact form submissions
• live chat communications
• newsletter and marketing data
• customer support communications
• analytics-related identifiers where technically feasible
• booking-related operational data no longer required for legal or administrative purposes

5. Data That May Be Retained

Certain information may be retained where required by applicable laws or legitimate business interests.

This may include:

• accounting records
• invoices
• payment transaction references
• fraud prevention records
• dispute or chargeback documentation
• legal compliance records

Such data will be retained only for the period strictly required by law or necessary for the protection of Veditalia’s legitimate interests.

6. Third-Party Providers

Veditalia works with selected third-party providers involved in website operations and service delivery, including:

• Stripe
• PayPal
• analytics providers such as Cloudflare, Google and Microsoft
• booking management systems
• hosting and IT providers

Deletion requests may also involve data processed by these providers on behalf of Veditalia, where applicable and technically feasible.

7. Processing Time

Veditalia will respond to requests without undue delay and, in any event, within one month of receipt of the request, in accordance with the GDPR.

Where necessary, taking into account the complexity and number of requests, this period may be extended by up to two additional months. In such cases, the user will be informed of the extension and the reasons for it within one month of receipt of the request.

Where Veditalia has reasonable doubts concerning the identity of the person making the request, it may request additional information reasonably necessary to confirm the user’s identity.

8. Marketing Communications

Users may unsubscribe from marketing communications at any time by:

• clicking the unsubscribe link included in emails
• contacting Veditalia directly

Please note that unsubscribing from marketing communications does not automatically result in complete deletion of personal data.

9. Security and Fraud Prevention

Veditalia reserves the right to retain information necessary to:

• prevent fraud
• manage disputes
• comply with legal obligations
• protect the security and integrity of the Website and services

This applies particularly in cases involving payment disputes, fraudulent activity or misuse of services.

10. Contact Information

For any request regarding personal data or deletion requests, users may contact:

ACS S.r.l. – Veditalia

Website: www.italyinaweek.com

Email: [email protected]