Privacy policy.

Rome Holy Tours S.r.l., with registered office at Piazza Albania, 35, 00153, Rome (Italy) (hereinafter, “Controller” or “RHT”), is constantly committed to protecting the online privacy of users of its website www.romeholytours.com (hereinafter, unless otherwise indicated, the “Site”). This document (hereinafter, the “Privacy Notice”) is drafted to allow you to understand how your Personal Data, as defined below, will be processed in connection with use of the Site.

This privacy Notice is provided in accordance with the provisions of article 13 of the EU Regulation n. 679/2016 (hereinafter, the “Data Protection Regulation”), and subsequent modifications and integrations, and Italian Law Decree n. 196 dated June 30, 2003, as amended by Italian Law Decree n. 101 dated August 10, 2018 (hereinafter, the “Privacy Code”).

The Notice aims to provide you with the information necessary so that you can give informed and explicit consent to the processing carried out through the Site, if you deem it appropriate. In general, any information or Personal Data you provide to RHT through the Site, or that is collected otherwise through the Site in connection with the purposes set out in Paragraph 3 below, will be processed in accordance with principles internationally recognized: lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity and confidentiality.

1. Data Controller

Rome Holy Tours S.r.l. is the Data Controller of the processing of all Personal Data processed through the Site.

2. Personal Data subject to processing

When you browse the Site, you may provide or we may collect some of your Personal Data — depending on circumstances — consisting of an identifier such as your name, an identification number, an online identifier, or one or more features of your physical identity sufficient to identify or make you identifiable (hereinafter, the "Personal Data").

Your Personal Data may be collected because you voluntarily provide them (for example, when requesting information via email or phone, when purchasing a Product or filling in a form on the Site, or when subscribing to the newsletter), or through analysis of your behaviour on the Site.

The Personal Data processed through the Site include:

  • Name, contact details, and other Personal Data.

  • Data you submit via forms.

  • Automatically collected data, such as navigation data (IP address, domain name, time of access, pages visited, browser type, operating system).

  • Cookies (technical, analytical, profiling, third-party cookies).

3. Purposes of processing

RHT uses your Personal Data collected through the Site for the following purposes:

  • To handle contact requests or requests for information/material.

  • To manage the contractual relationship (orders, services, payments, assistance).

  • To fulfill specific duties prescribed by law, regulation or EU norms;

  • To detect and prevent fraud, abuses, or other illicit use of the Site.

4. Legal Basis & Voluntary Nature

  • For contact requests, performance of services, contractual management and fulfillment of specific duties prescribed by law, regulation or EU norms: processing is lawful under “performance of a contract” or legal obligations (respectively, pursuant to article 6, paragraph 1, letter b) and article 6, paragraph 1, letter c) of the Data Protection Regulation). Providing data is optional, but refusal may make it impossible to provide the requested service.

  • For fraud prevention: lawful interest justified by balancing rights (pursuant to article 6, paragraph 1, letter f) of the Data Protection Regulation).

5. Recipients of data

Your Personal Data may be disclosed to:

  • Entities assisting RHT (accounting, administrative, legal, IT).

  • Parties to whom disclosure is necessary for service delivery (hosting providers, technical maintenance).

  • Authorities in case of legal obligations.

  • Persons authorized by RHT under confidentiality obligations (employees, contractors).

6. Transfers of data

Some of your Personal Data may be transferred to recipients outside the European Economic Area (EEA).

Should the personal data of the Data Subject be transferred to countries outside the EEA for the pursuit of the aforementioned purposes, such transfer will only take place against the existence of international agreements or adequacy decisions by the Commission (pursuant to article 45 of the Data Protection Regulation) or agreements containing the so-called "standard contractual clauses" (pursuant to article 46 of the Privacy Regulation and pursuant to EU Commission Decision no. 2021/914 of 4 June 2021) or in the presence of binding corporate rules (pursuant to article 47 of the Data Protection Regulation), and in any case on the basis of appropriate safeguards ensuring that personal data is adequately protected in accordance with the principles of the Privacy Regulation. In the absence of an adequacy decision pursuant to article 45 of the Data Protection Regulation or of adequate safeguards pursuant to article 46 (standard contractual clauses) or article 47 (binding corporate rules), the transfer of personal data to a third country outside the EEA may only take place if one of the conditions set out in article 49 of the Data Protection Regulation is met.

7. Data retention

Personal Data for contact, information requests, contractual management will be kept only as long as necessary for those purposes (and to protect against legal claims). Data used for fraud prevention will be retained as needed, possibly longer under legal safeguards.

Notwithstanding the above, RHT may conserve some of your Personal Data also after the termination of processing, exclusively for the scope of defendingor safeguarding its rights, or in those cased as defined by law or by order of a judicial or government authority.

8. Rights of the data subject

Pursuant to article 15 and following of the Data Protection Regulation, you have the right to:

  • Access your Personal Data, request a copy.

  • Rectify or update incomplete or inaccurate Personal Data.

  • Delete your Personal Data (right to erasure).

  • Restrict processing.

  • Receive your data in a structured, commonly used, machine-readable format (data portability).

  • Lodge a complaint with the Italian Data Protection Authority (Garante privacy).

In order to exercise the rights granted by the article 15 and following of the Data Protection Regulation, in accordance with the article 12 of Data Protection Regulation and within the limits of the article 2-undecies of the Privacy Code, you may contact the Data Processing Controller at the following e-mail: dpo@romeholytours.com

9. Changes

This Privacy Notice is effective from October 14, 2025. RHT reserves the right to modify or update its contents at any time. You will be notified of changes, which become binding once published on the Site. You are encouraged to revisit this page regularly to stay informed of the latest version.