PRIVACY POLICY

Last updated: July 31, 2026

1. Data Controller

This website ("Website") is owned and operated by:

Exclusive Connection
Via Pellicceria 10, 50125 Florence (FI) – Italy

VAT No. 04652100480 | Email: info@exclusiveconnection.it

Exclusive Connection ("we", "our", "us") is committed to protecting the privacy of visitors to this Website in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable Italian data protection laws.

2. Personal Data We Collect

Depending on how you interact with our Website, we may collect the following categories of personal data:

• Name and surname

• Email address

• Telephone number

• Country of residence

• Information voluntarily provided through contact or inquiry forms

• Information related to travel requests and bespoke itineraries

• Technical information (IP address, browser type, operating system, referring pages)

• Cookie and device information

We do not intentionally collect special categories of personal data unless voluntarily provided by you when necessary for the organization of your travel experience.

3. Purposes of Processing

Your personal data may be processed for the following purposes:

Responding to enquiries: To reply to requests submitted through our contact forms or by email.

Legal basis:
Article 6(1)(b) GDPR – performance of pre-contractual measures.

Preparation of travel proposals: To prepare customized itineraries, quotations and luxury travel experiences.

Legal basis:
Article 6(1)(b) GDPR.

Customer relationship management: To communicate regarding booked services and provide customer assistance.

Legal basis:
Article 6(1)(b) GDPR.

Compliance with legal obligations: To comply with tax, accounting and legal obligations.

Legal basis:
Article 6(1)(c) GDPR.

Website security: To protect the Website against unauthorized access, fraud and cyberattacks.

Legal basis:
Article 6(1)(f) GDPR (legitimate interest).

Marketing communications: Where you have expressly consented, we may send newsletters, travel inspiration and information about our services.

Legal basis:
Article 6(1)(a) GDPR.

Consent may be withdrawn at any time.

4. How We Collect Your Data

Personal data may be collected when you:

• complete a contact form;

• request a quotation;

• communicate with us by email;

• subscribe to newsletters (if available);

• browse the Website through cookies and similar technologies.

5. Data Retention

Personal data are retained only for the time necessary to fulfil the purposes for which they were collected. Generally:

• enquiries: up to 24 months;

• contractual documentation: up to 10 years as required by Italian law;

• marketing data: until consent is withdrawn or no longer than 24 months where applicable;

• technical logs: according to applicable security requirements.

6. Disclosure of Personal Data

Your data may be shared with:

• IT service providers;

• website hosting providers;

• professional advisors;

• accounting and legal consultants;

• payment providers (where applicable);

• suppliers involved in the organization of your travel experience.

All processors act under Article 28 GDPR where applicable.

7. International Data Transfers

Some service providers may process personal data outside the European Economic Area. Where this occurs, transfers take place only in accordance with Chapter V GDPR through:

• European Commission Adequacy Decisions;

• Standard Contractual Clauses (SCCs);

• other safeguards provided by GDPR.

8. Your Rights

Under Articles 15–22 GDPR you have the right to:

• access your personal data;

• request rectification;

• request erasure ("right to be forgotten");

• restrict processing;

• object to processing;

• receive your data in a portable format;

• withdraw consent at any time;

• lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Requests may be sent to: info@exclusiveconnection.it

9. Data Security

We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.

10. Third-Party Websites

This Website may contain links to third-party websites. We are not responsible for their privacy practices. Users are encouraged to read their respective privacy policies.

11. Changes to this Privacy Policy

We reserve the right to amend this Privacy Policy at any time. The updated version will always be published on this page together with the revision date.