Privacy Policy on the processing of personal data pursuant to art. 13 EU Reg. 2016/679 (GDPR)

This page contains information on the processing of personal data of users who visit this website (hereinafter the “Website“) and/or who send questions and requests to the contacts indicated therein.

This information is also provided pursuant to Article 13 of Regulation (EU) 679/2016 (hereinafter the “Regulation“).

The Website uses cookies. At this link you can find all the information on the cookies installed on this Website and the necessary information on how to manage your preferences in this regard.

DATA CONTROLLER

Data Controller is Lorenzo Capraro (VAT Number 02666350844; hereinafter the “Controller“), tourist guide registered in the National List of Tourist Guides (card number 19000518).

PERSONAL DATA RELATING TO WEBSITE NAVIGATION

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could allow users to be identified, through processing and association with data held by third parties, carried out only upon explicit request by the judicial authority.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the Website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, successful, successful, error, etc.) and other parameters related to the user’s operating system and computer environment.

These data are used by the Controller for the sole purpose of allowing navigation of the Website. This processing is carried out pursuant to art. 6, paragraph 1, letter b) of the Regulation. The processing of this data for this purpose is not mandatory; if the User does not intend to provide them, however, he will not be able to access the Website.

The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Website: except for this eventuality, at present the data on web contacts do not persist for more than thirty days.

REQUESTS SENT TO THE CONTROLLER

Users may submit requests for information and/or reservations to the Controller via the contact information provided and/or social media profiles.

The personal data provided in this way will be processed by the Controller for the sole purpose of managing the requests and, in the case of a service booking, to provide the service. This processing is carried out pursuant to art. 6, paragraph 1, letter b) of the Regulation. The provision of these personal data is optional; however, if the data subject does not intend to provide his/her data for this purpose, the Controller will not be able to manage the request.

The data collected for this purpose will be stored only for the time necessary to manage the request, except in the case where the management of the request involves the booking of a service, in which case the data will be stored for a period of 1 year from the date the service is provided, as well as without prejudice to any obligations provided for by law or needs to protect the rights of the Controller.

Contact channels such as Whatsapp, Messenger (Facebook) and Instagram Direct Messenger are hosted on platforms owned by the Meta group that are not managed or controlled by the Controller. For information on accessing these platforms and their use of your personal data, please consult the privacy policies and terms of use of each platforms.

REVIEWS

Users may post a review regarding the services provided by the Controller on one or more third-party platforms that offer this feature to their users (for example, Google Maps and TripAdvisor).

In such cases, the Controller will process the data provided solely for the purpose of replying to the review left by the user.

This processing of personal data is based, pursuant to Article 6(f) of EU Regulation 679/2016, on the Controller’s legitimate interest in cultivating customer engagement and improving products and services. Users may always object to processing based on legitimate interest by writing to the following email address: info@agrigentoexperience.com.

The platforms on which you may leave reviews are managed by third-party companies acting as independent Data Controllers in providing their services to you and in processing your personal data; you may therefore refer to the information provided by these companies to learn how they process your personal data.

Your personal data will be retained for the time necessary to respond to your review, in addition to any period required by law or for legal proceedings; after that, it will be deleted or anonymized.

METHODS OF PROCESSING

Personal data are processed with automated tools.

Specific security measures are observed to prevent loss, illicit or incorrect use of data and unauthorized access.

However, communications via the Internet such as e-mail or webmail may transit through different countries, before being delivered to the recipients. The Controller cannot be held responsible for any unauthorized access or loss of personal information beyond its control.

RIGHTS OF THE DATA SUBJECTS

At any time, Data Subjects may exercise the rights referred to in art. 15 et seq. of the Regulation, including the right to obtain from the Controller confirmation of the existence or otherwise of personal data concerning them and to know their content and origin, verify their accuracy or request their integration, updating, or correction; they have the right to request the deletion of their personal data, the transformation into anonymous form or the blocking of data processed in violation of the law, as well as to object to their processing.

Requests to exercise the above rights may be sent to the Controller at the following e-mail address: info@agrigentoexperience.com.

If the User notices a violation of his rights, he may contact the Data Protection Authority competent pursuant to art. 77 of the Regulation. This is without prejudice to the possibility of turning to the judicial authority.

CHANGES AND UPDATES

This Privacy Policy is effective from the date indicated in its heading. However, the Controller may make changes and/or additions to the same, also as a consequence of any subsequent amendments and/or additions to the regulations. The updated text will always be available on the Website; users are invited to consult it regularly.

Last updated 09 April 2026