Privacy – Travel & Resort

Last updated: 3 November 2026. This notice covers the public Travel & Resort website on travelresort.it, in Italian and English, its internal search and published contact addresses. It describes the current configuration and hosting matters still being verified.

Controller and contact details

The data controller is Bond Società a Responsabilità Limitata Semplificata, Via Adelmo Canini 91, 06081 Torchiagina – Assisi (PG), Italy, VAT and tax number 03636610549.

For information about your data and to exercise your rights, write to bond.srls2018@gmail.com or certified email (PEC) bond.srls@pec.it. For editorial enquiries, corrections and advertising proposals, use direttore@travelresort.it.

Data, purposes and legal bases

Browsing, search and security. To deliver pages and protect the service, the server processes IP addresses, time, requested resources, request outcomes and technical browser information; it may also record the referring address sent by the browser. Search submits terms in the page address without creating a reader profile. Processing rests on the legitimate interest in delivering and securing the editorial service (Article 6(1)(f) GDPR). Do not enter confidential information in search.

Language and administration. IT/EN links select the language in the URL; Polylang’s language cookie is disabled. WordPress administration is restricted to authorised staff and uses technical authentication to protect the website. Processing rests on legitimate interests in security and site management (Article 6(1)(f) GDPR).

Voluntary messages. Writing to the publisher provides your address, any name and the data in the message and attachments. They are used to reply, assess reports and manage editorial or business relationships. Article 6(1)(b) GDPR applies to steps requested by the individual before entering into a contract and to their contract; other enquiries and company representatives’ details are processed under the legitimate interest in handling correspondence and professional relationships (point (f)). Health or other special-category data are not required for an ordinary enquiry.

Rights and obligations. Data strictly necessary to respond to rights requests are processed to comply with Articles 12–22 GDPR (Article 6(1)(c)). Any retention necessary to establish, exercise or defend a legal claim rests on the corresponding legitimate interest (point (f)), limited to relevant data and time.

Available functions and providing data

Essential technical data are required to receive pages; search and sending messages are optional. Without a contact address and necessary information we cannot reply. Contact forms, public comments and reader account registration are not active. Newsletter signup is described in its dedicated section. Email links open your email application rather than sending messages through WordPress. There is no reader profiling or solely automated decision-making producing legal or similarly significant effects.

Hosting, recipients and transfers

The hosting provider is Register S.p.A., Viale della Giovine Italia 17, 50122 Florence, Italy, tax/VAT number 04628270482. Its WordPress service terms locate the infrastructure in Brussels, Belgium. This is the provider’s contractual information, not a location inferred from an IP address.

The data processing agreement (DPA) governs Register’s processor role for customer data. Contractual coverage for controller Bond and the actual sub-processors involved are being confirmed. European server locations alone do not rule out other access or processing: any transfers outside the EEA require applicable GDPR safeguards for the service and recipient.

Data may be accessed by the controller, authorised editorial and technical staff and necessary service providers within their respective tasks. Authorities may receive data where required by law, and advisers where necessary for a matter or legal claim. Browsing data are not sold to advertisers.

Register provides email for direttore@travelresort.it and redazione@travelresort.it; the Gmail and certified email (PEC) addresses use their respective email services. Messages sent to these addresses also pass through email providers, separately from the website. Google publishes its privacy information and transfer safeguards. Ask the controller for details and copies of applicable safeguards.

Retention

Technical logs. The new hosting has access and error logs for service delivery, security and diagnosis; search terms and requested paths may appear in them. Any provider-side system statistics and Register’s actual log retention and rotation periods remain to be confirmed; no unverified duration is asserted. The controller is checking applicable periods and criteria with the provider and will update this notice when confirmed.

Backups. The WordPress Premium offer specifies daily copies retained for up to 28 days and hourly copies for up to 24 hours. These are not log-retention periods; the availability of actual copies must be checked in the service panel. Separate Mac working copies have no verified automatic rotation; they will be kept only as needed for recovery or the relevant matter, with restricted access and limited duplication.

For correspondence, the criterion is the duration of the matter: until the reply and any follow-up are completed, then only those parts needed for an ongoing relationship, an applicable legal obligation or a concrete need to protect a legal right. A single enquiry does not justify permanent archiving or adding someone to a promotional list.

Cookies, browser storage and external services

The verified browser-facing website has no active in-page analytics tools, tracking pixels, behavioural advertising or embedded external content. Fonts and images load from the website. A clean browser showed no reading cookies, localStorage or sessionStorage on the IT/EN homepages; the language cookie is now expressly disabled. Administrative access may use technical cookies, separately from reading articles. The Cookies page describes the audit scope.

Linked external websites open only when you choose the link and apply their own notices. A link alone is not embedded content. Cookies caused by other paths on the same domain or browser extensions are not evidence that this website installed them.

Editorial content

Names, statements and photographs in articles are distinct from readers’ technical data. Journalism is subject to Article 85 GDPR, Articles 136–139 of the Italian Privacy Code and the relevant professional rules, respecting the essential nature of information, human dignity and source protection. Requests about content may be sent to the controller; erasure and retention in the editorial archive are assessed alongside freedom of information.

Your rights

You may request access, rectification, erasure and restriction where the GDPR provides. You may object on grounds relating to your particular situation to processing based on legitimate interests. Portability applies to automated processing based on contract or consent where its conditions are met. Reading the website requires no generic consent; any consent-based processing remains subject to withdrawal.

Write to the privacy contact addresses above. Requests are normally answered within one month; statutory extensions may apply, with reasons communicated to you. Only information necessary to verify identity may be requested where reasonable doubts exist. You may also lodge a complaint with the Italian Data Protection Authority without first contacting the publisher.

Updates

The website configuration and this notice will be checked when processing changes. Any later statistics or advertising service requires assessment and updated information and, where required, valid consent and prior blocking. Newsletter signup is described in its dedicated section; no analytics or advertising service is activated. Log periods, contractual details and actual backup availability identified as under verification will be updated once confirmed.

With your specific, optional consent (Article 6(1)(a) GDPR), we use your email address to send the Travel & Resort editorial newsletter in your chosen language. Subscription requires an unchecked consent box and confirmation through the link emailed to you. Editorial editions will start later; during signup you receive only the necessary service messages. You can withdraw consent free of charge through the Unsubscribe link in our emails, without affecting the lawfulness of earlier processing. We do not use your address for third-party campaigns.

We keep your email, language, subscription status, request, confirmation and withdrawal dates, consent wording and the notice version/hash. These records are restricted to editorial management and stored in the WordPress database on Register hosting; messages use the hosting email service with sender redazione@travelresort.it. The Newsletter component does not transfer the mailing list to its own external service. We do not track email opens or clicks.

The daily automatic check removes unconfirmed requests once seven days have elapsed. Confirmed addresses remain subscribed until withdrawal and are no longer used for editorial emails afterwards. The minimum request, consent and withdrawal record is kept privately for no more than twelve months to document consent and request handling, then removed from the active system. Backup copies follow the backup service rotation described above. Abuse-prevention counters use non-reversible hashes of IP and email addresses, expire within one hour and are cleaned periodically; we do not store IP addresses in newsletter profiles. These checks do not profile readers.