Privacy policy
Last updated: October 25, 2026
This page explains what data is processed when you visit www.adpersonampuglia.it and when you get in touch with me, why, and for how long, under Regulation (EU) 2016/679 (“GDPR”) and the Italian Personal Data Protection Code (Legislative Decree 196/2003).
Who the data controller is
The data controller is Carlo Cassanelli, who runs Ad Personam Puglia. For any question about your data, write to me at info@adpersonampuglia.it or call me at +39 348 582 7546.
The website uses no cookies
The website sets no cookies, neither technical nor profiling ones, and uses no advertising or cross-site tracking tools. That’s why you won’t see a cookie banner. Fonts and images are served by the website itself, with no external services such as Google Fonts.
What data is processed
Technical browsing data. The website is hosted by Netlify, Inc. Like any server, Netlify’s automatically logs some technical data about each request (IP address, date and time, page requested, browser type) to run the website and protect it from abuse. This data is used only for that purpose and kept for the period set by the provider.
Anonymous statistics. To understand how the website is used I rely on Umami, an analytics service that uses no cookies and cannot identify you. Umami records aggregate data such as the page visited, the referring website, the type of device and browser, the language, the country and some clicks (for example on the buttons to contact me). The IP address is not stored: it is only used to derive the country and an anonymous visit code that changes periodically.
Data you give me when you get in touch. If you message me on WhatsApp, send me an email, call me or book a video call, I process the data you choose to share: your name, phone number or email address, and what you tell me about your trip (for example dates, who you’re traveling with, preferences).
Your answers to the questions in the contact section and the text of your message stay in your browser: the website neither stores nor sends them. They are sent only if you choose to send them from WhatsApp.
Why I process it and on what legal basis
- To answer your requests and prepare a trip proposal: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR) and, if you hire me to organize your trip, performance of the contract.
- To meet legal obligations, such as tax and accounting ones, if we start working together: legal obligation (Art. 6(1)(c)).
- To run the website, keep it secure and understand anonymously how it is used: legitimate interest in running a safe and useful website (Art. 6(1)(f)).
Giving me your data is optional, but without a way to reach you I can’t reply.
How long I keep it
I keep conversations and request data for as long as needed to follow them up and, if we don’t end up working together, for no more than 24 months after our last contact. If I organize your trip, I keep the documents for the period required by law (usually 10 years for tax records).
Who may receive the data
I don’t sell or hand over your data. To run the website and the contact channels I rely on these providers:
- Netlify, Inc. (website hosting);
- Umami Software, Inc. (anonymous statistics);
- Aruba S.p.A. (domain and email);
- WhatsApp Ireland Limited (WhatsApp messages);
- Google Ireland Limited (Google Calendar and Google Meet, to book and hold the video call).
When you use WhatsApp or Google’s booking page, their own privacy policies also apply. If I organize your trip, I share with the businesses involved (for example accommodation, transportation, guides) only the data they need for the bookings.
Some providers are based in, or have servers in, the United States. In those cases the transfer relies on the safeguards set out in the GDPR (Art. 44 and following): the EU-U.S. Data Privacy Framework adequacy decision for companies that take part in it, or the standard contractual clauses approved by the European Commission.
Your rights
At any time you can ask me to access, correct or delete your data, restrict its processing, receive it in a portable format, or object to processing based on legitimate interest (Arts. 15-22 GDPR). Just write to me at info@adpersonampuglia.it: I’ll reply within one month.
If you believe your data is not being handled correctly, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority in the country where you live.
Automated decisions and minors
I make no automated decisions and do no profiling. The website is not meant for children under 14: if a minor contacts me, I’ll ask them to do so together with a parent.
Changes to this policy
If the services I use or the rules change, I’ll update this page and the date at the top.
This is a translation: in case of doubt, the Italian version prevails.