Privacy Policy

Greetings, fellow adventurer. We are committed to protecting your privacy whenever you visit our website.

This Privacy Policy outlines how we collect, process, and protect your personal data when you use our website, explains our use of cookies, and details your privacy rights.

This policy was last updated on September 01, 2024.

Summary

In short, your data is safe with us. We never sell your information, and we give you the tools to control the privacy of the data we collect. Our aim is to be transparent about the data we gather, how we use it, and the steps we take to safeguard it. We respect the trust you place in us when sharing your information and handle it with care.

You can adjust your privacy preferences through your account or our Cookie Preference Centre, accessible via our Cookies Policy. For any privacy-related queries, feel free to reach out via our data request form.

Looking for more details? Read on.

Comprehensive Overview

Climbing Sardinia and 40 Gradi Nord (‘We’, ‘Us’) are two brands used by Great Italian Outdoors Ltd.

As the data controller, we manage the collection, processing, use, and sharing of any information you provide while using all of our websites www.greatitalianoutdoors.com, www.climbingsardinia.com and www.40gradinord.com. We process your data solely for the purposes outlined below, ensuring compliance with the General Data Protection Regulation (GDPR) ((EU) 2016/679) and relevant laws.

What Information Do We Collect?

When you visit or interact with our Websites, we gather various types of data about you.

Data You Provide:

  • Identity Information: Includes your first name, last name, username, and title.
  • Contact Information: Includes your address, email, and phone numbers.
  • Profile and Traveller Information: Includes your booking history, preferences, essential details for trip arrangements (such as travel plans, dietary and medical needs, height, weight), feedback, reviews, and account credentials.
  • Marketing Preferences: Includes your preferences for receiving marketing communications.
  • Financial Information: Includes bank account and payment card details needed to process your payments. Third-party payment processors like Stripe or WooCommerce manage this data. We do not store your credit card details—this is handled securely by the payment processors per their privacy policies.

Data We Collect:

  • Technical Data: Includes your IP address, browser type and version, device type, and visit details (including pages viewed, clickstream data, page response times, and interaction details). We may record this data in both video and text formats to analyze how users interact with our platform.
  • Usage Data: Includes information on how you use our website, products, and services.

Data from Third Parties: We may receive non-personal information from third parties such as business partners, subcontractors, ad networks, analytics providers, and search information providers. This data does not personally identify you or any other individual.

How Do We Use Your Data?

We use your personal information only for the specific purposes and legal bases outlined below.

Essential Uses (Contractual):

  • To create and manage your customer account
  • To process and handle your inquiries and bookings
  • To provide you with booking-related information and updates
  • To deliver customer service and support

To fulfil our contractual obligations to you, we may need to share your essential information with the service providers (Suppliers) responsible for the services you’ve booked. We inform you of the supplier before confirming your booking and include this information in your confirmation email. By proceeding with the booking, you agree to share your data with the supplier so they can deliver the services you’ve requested.

While we guide our suppliers on handling your data, we cannot be held responsible for their privacy practices. However, our contracts require them to treat your data confidentially and in compliance with GDPR and other data protection laws.

Uses Requiring Your Consent:

With your permission, we may:

  • Share information about trips, special offers, and products that may interest you.
  • Provide details on relevant additional products or services.
  • Conduct market research and collect your feedback.
  • Help us identify potential audiences on platforms like Facebook.

We may also ask for your consent to publish any reviews you provide about trips you’ve taken. You can withdraw this consent and request that we remove your review at any time through a data request.

Legitimate Interests:

We may process your personal data based on our legitimate interests in offering a high-quality service, provided these interests do not override your rights. These activities include:

  • Managing and improving our website and services
  • Ensuring our content is presented effectively and securely
  • Administering our website, including troubleshooting, data analysis, testing, research, statistical, and survey purposes
  • Enabling you to participate in interactive website features
  • Assessing the effectiveness of our marketing efforts
  • Supporting your participation in features and services you select
  • Providing exceptional customer care
  • Notifying you about significant changes to our services, including updates to this Privacy Policy

When you book a trip with us, you can opt out of receiving non-personalized marketing emails and updates about future trip ideas and special offers. We think it’s reasonable to offer you this option after you book with us, but you can opt out anytime.

Legal Obligations:

We may process your data to comply with legal and regulatory requirements, including:

  • Preventing and detecting fraud, money laundering, or other criminal activities
  • Responding to a court order or legally binding request from a public authority

Unless you’re making a booking, providing personal data is not legally or contractually required. You can choose not to share this information, but it may limit your ability to use our services.

Children’s Privacy

Our website is not intended for children, and we do not accept bookings from individuals under 18 unless an adult accompanies them.

If a child is included in a booking, we will request their identity, profile, and traveller information solely to fulfil our services and not for marketing purposes.

If you are under 18, please do not attempt to register or provide any personal information on our website. If we learn that we have collected personal data from a child under 18, we will delete it promptly. If you believe we have collected unnecessary data from a child, please get in touch with us immediately.

Do We Share Your Personal Data?

We do not sell or rent your personal data. We share it with third parties only in limited situations, as described below.

In addition to sharing data with suppliers when you book with us, we may share your data with third parties to operate and manage our website, process bookings, and provide our services.

We rely on trusted external service providers for technical data analysis, processing, or storage. These providers are carefully selected to meet high data protection standards. We only share necessary information and require these providers to treat it confidentially and process personal data according to our instructions.

Third-party service Providers with whom we may share data include:

  • Payment processors such as Stripe and WooCommerce
  • Analytics and technology services like Google Analytics
  • Cloud-based accounting software providers, including Xero

We may also provide non-personal, aggregated data to third parties. This anonymized information may be used by our website design, data analysts, development, and hosting contractors.

Your personal data may be disclosed to the following recipients:

  • If Great Italian Outdoors Ltd or its assets are acquired by a third party, your personal data may be included in the transferred assets. Personal data may also be transferred during corporate reorganization, insolvency proceedings, or similar events, as permitted by law.
  • If we are legally required to disclose your data to comply with a court order or to enforce legal rights, protect our group or employees, or address fraud, security, or technical issues.

In certain cases, we may seek your explicit consent to share specific data with a particular party. We will always be transparent about who we are sharing with and why, allowing you full control over your data.

Data Storage and Security

Your data will be stored in the cloud and may be processed by staff outside the EEA who work for us or our service providers, including those involved in fulfilling your booking and providing support services.

By providing your personal data, you agree to this transfer, storage, or processing, including within any cloud service. We take reasonable steps to ensure your data is handled securely and in line with this Privacy Policy and data protection laws.

If you have a password to access certain parts of our site, it is your responsibility to keep it secure. Do not share your password with anyone.

While we strive to protect your data, we cannot guarantee its security during transmission to our site; any transmission is at your own risk. Once we receive your data, we implement strict security measures to prevent unauthorized access.

Data Retention

We retain your personal data as long as you are a customer and for up to seven years after you cease to be a customer. If you have never been a customer but have opted to receive updates or marketing communications, we may retain your data for up to three years after your last interaction with our platform.

We reserve the right to store or delete your data earlier or later than specified, depending on circumstances.

Links to External Websites

Occasionally, our Websites may include links to third-party websites. Please be aware that if you decide to visit any of these external sites, they have their own privacy policies, which we do not control or endorse. We encourage you to review these policies before providing any personal information on those websites.

Affiliate Links

Some of the links on our site are affiliate marketing links, meaning we may earn a small commission if you purchase the products or services we mention. However, our editorial content remains unbiased and is not influenced by advertisers or affiliate partnerships.

Affiliate software we may employ use cookies and device identifiers to collect data, but this information is primarily used to track purchases, such as:

  • Websites visited by users
  • Affiliate links clicked by users
  • Whether or not a user completes a purchase

They may also store users’ IP addresses to determine approximate geographical locations (e.g., country or region). This helps them optimize the links for the user’s location and provide aggregate reporting to publishers, merchants, and advertisers. Additionally, IP addresses aid in preventing fraud and identifying non-human browsing patterns.

Information about the device and browser type used by a user is also collected to ensure service optimization and to provide aggregate reporting. Some software stores details from standard web logs, such as the affiliate page a user clicks on and collects data about visits and purchases on the linked page, including order value, items bought, and order IDs. This data assists publishers, merchants, and advertisers in making better marketing and content decisions.

Importantly, none of these software attempt to identify users at any point.

If you prefer not to have any software tracking any data about your website visits, you can opt-out at any time.

 

Your Rights

Great Italian Outdoors is committed to ensuring you have control over your personal data. Below is a summary of your rights and our additional commitments. You may exercise these rights by contacting us via our data request form.

Access and Correction

You can access and modify much of your personal data through your account. Additionally, you can review and update any consents you have given.

You also have the right to request a copy of all personal data we hold about you, and to request corrections to any inaccuracies or completion of incomplete data.

It is your responsibility to ensure that the information you provide is accurate and up-to-date.

 
Right to Deletion (‘Right to be Forgotten’)
You may request the deletion of your account via your account profile. Once your account is deleted, you will no longer be able to access our website. Note that we are required to retain data related to past bookings for seven years.

If you need to delete your account but have an upcoming trip with us, you will need to wait until after the trip. You can request deletion of your data under certain conditions, such as:

  • When the data is no longer needed for its original purpose.
  • When you withdraw consent (if the processing was based on consent).
  • When you object to processing and there are no overriding legitimate reasons for us to continue.
  • When the data was processed unlawfully.
  • To comply with legal obligations.

This right does not apply if processing is necessary for legal compliance or for establishing, exercising, or defending legal claims.

 
Restriction of Processing
You can request that we restrict the use of your personal data (i.e., keep it but not process it) if:

  • You contest the accuracy of the data.
  • The processing is unlawful but you do not want it erased.
  • We no longer need the data, but you require it for legal claims.
  • You have objected to the processing and we are still verifying our legitimate grounds.

We may continue to process your data if:

  • You have given consent.
  • It is necessary for legal claims.
  • It is required to protect someone else’s rights.
  • It is needed for important public interests.

 

Data Portability

If you have provided personal data to us, you have the right to receive it back in a structured, commonly-used, and machine-readable format and to have it transferred to another data controller, provided that:

  • The processing is carried out automatically.
  • The processing is based on your consent or a contract with you.

 

Right to Object

You can object to the processing of your personal data if it is based on our legitimate interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that outweigh your interests. You can also object to processing for direct marketing purposes. Manage your consent settings in your account.

 

Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing, including profiling, that significantly affect you, unless:

  • It is necessary for a contract with you.
  • It is based on your explicit consent, which you can withdraw at any time.
  • It is authorized by EU or Member State law.

If decisions are based solely on automated processes, you have the right to have a person review the decision and present your case.

 

Right to Complain

If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Data Protection Authority in your area of residence, work, or where the alleged issue occurred.

We will respond to your request in writing, or orally if requested, as soon as possible and within one month of receipt. If needed, this period may be extended by two months due to the complexity or number of requests. We will inform you of any extension within one month of receiving your request. Proof of identification may be required. Please submit all requests via our data request form.

 

Updates to Our Privacy and Cookies Policies

We reserve the right to revise our Privacy and Cookies Policies at our discretion. Any changes will be posted here, and the “Last revised” date will be updated. Continued use of our website after changes signifies acceptance of the updated policies, so please review them periodically. For significant changes, we will provide more prominent notifications, including email updates for certain services. Previous versions of the Privacy and Cookies Policies will be archived for your review.

 

Contact Us

For any questions, comments, requests, or concerns about our Privacy and Cookies Policies or the information we hold, please email us at info@greatitalianoutdoors.com.