Privacy policy
Last updated: 8 September 2026
Working draft: to be validated with the data controller before final publication (hosting and analytics tools being finalised).
This notice describes how personal data of website users and tour customers is processed, pursuant to Regulation (EU) 2016/679 (GDPR).
1. Data controller
Daniele Emmi — Etna Guide Project, sole trader, Piano Provenzana, Etna Nord — Linguaglossa (CT), Italy. VAT 06179350878. Volcanological guide listed in the regional register under no. IT82D00081. Email: info@etnaguideproject.com. Phone: +39 375 621 9075.
2. Data collected
Data sent through the site's booking form: full name, phone number (required), email address (optional), chosen tour, preferred date, number of participants and any notes, together with the date and time of consent and, if given, of the separate consent to the publication of images. They are stored in a management archive on the site's server and emailed to the guide; if the user wishes, the site prepares a WhatsApp message with the summary, which the user then sends.
Data voluntarily provided through direct contact (WhatsApp, email, phone): the same information, when the request arrives through those channels rather than the form.
Origin of the request. If you reach the site from a Google ad, the page address carries a click identifier (gclid) and the campaign parameters: they stay in your browser for the visit and, if you send a booking request, they are stored with the request together with your choice in the ad measurement banner. They tell us which ad brought the request and whether advertising pays for itself. The identifier is shared with Google, together with the value of the completed tour, only if you accepted measurement in the banner.
Technical browsing data recorded by the web server: IP address, requested page, date and time, browser type. The IP address is personal data. These logs serve security and site operation, stay on the machine hosting the site and rotate automatically (five files of 20 MB each), without being linked to booking requests.
Technical browsing data strictly necessary to serve the website. This site uses no profiling cookies and no third-party trackers without consent: ad campaign measurement, active only while a campaign runs and only after your consent, is described in the cookie policy.
3. Purposes and legal basis
Data is processed to: answer information requests and manage bookings (pre-contractual and contractual measures, art. 6.1.b GDPR); comply with legal obligations, in particular tax obligations (art. 6.1.c); protect participants' safety during tours (legitimate interest, art. 6.1.f); know which ad or campaign brought a request, to assess advertising spend (legitimate interest, art. 6.1.f); report the outcome of an ad click to Google and publish photos and videos of the tours, but only for those who gave the corresponding consent (consent, art. 6.1.a). Each consent is optional, does not affect the booking and can be withdrawn at any time by writing to the address in section 6, or from the «Cookie» link in the footer for ad measurement.
4. Processing and retention
Processing is carried out with electronic tools and appropriate security measures. Data related to simple information requests is kept for the time needed to answer them; booking requests sent from the website (name, email, phone, date and number of participants, notes, origin) are recorded in an internal management archive and kept for 24 months from the last contact; data related to invoiced services is kept for 10 years as required by tax law.
5. Sharing and transfer
Data is neither sold nor shared with third parties for marketing. It stays on the server hosting the site, a dedicated server registered to the controller and located in the European Union.
The following may access the data, each for their own part: the provider of the infrastructure hosting the site; the mail provider used to send booking notifications, and a second mail provider used only as a fallback when the first is unreachable; the provider that built and maintains the site, for technical maintenance only; the messaging service chosen by the user (WhatsApp — Meta Platforms Ireland Ltd.), when it is the user who sends the message; Google Ireland Limited, which receives the ad click identifier and the value of the completed tour only for those who accepted measurement in the banner.
The site transfers no data outside the European Economic Area. WhatsApp is an independent service, with its own privacy notice, that the user chooses to use.
6. Your rights
You can exercise the rights set out in articles 15–22 GDPR at any time: access, rectification, erasure, restriction, portability and objection, by writing to info@etnaguideproject.com. You may also lodge a complaint with the Italian Data Protection Authority (Garante).