Privacy and cookie notice

Data controller

The data controller is Combriccola Marchetti S.r.l., registered office Piazza C.L.N. 248, 10121 Torino (TO), VAT 13009950018. Contact: esperienze@cocconatobellebuono.it, tel. 0141 1656565.

Data we process

To manage bookings we process: name, email address, phone number, booking details (activity, date, time, party size) and payment status.

Card data never reaches our systems: payment happens on Stripe's secure pages.

Purposes and legal bases

Managing the booking and sending the confirmation email: performance of a contract (art. 6(1)(b) GDPR).

Keeping records with accounting and tax relevance: legal obligation (art. 6(1)(c) GDPR).

Service security and technical logs: legitimate interest (art. 6(1)(f) GDPR).

We do no marketing, and no consent is required for the purposes above.

Recipients

The venue or operator you book receives the data needed to handle the booking (name, contact details, party size).

Providers processing data on our behalf under art. 28 GDPR agreements: Orbyta S.r.l. (VAT 12270430015; platform development and operation), Stripe Payments Europe Ltd (payments; an independent controller for its own anti-fraud purposes), Railway Corp (hosting), Google (booking calendar), our email provider.

Transfers outside the EU

Some providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses (art. 46 GDPR).

Retention

Bookings with accounting relevance are kept for 10 years (art. 2220 of the Italian Civil Code).

Cancelled or abandoned bookings are anonymized after 30 days.

Your rights

You can exercise your rights of access, rectification, erasure, restriction, objection and portability (arts. 15-22 GDPR) by writing to esperienze@cocconatobellebuono.it.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Cookies

This site uses a single, technical cookie: NEXT_LOCALE (first-party, session), which stores your language choice.

We use no profiling, analytics or third-party cookies: for this reason, under the Italian DPA's guidelines of 10 June 2021, no consent banner is shown.

Payments happen on Stripe's own domain (stripe.com), which applies its own cookie notice.