Privacy Policy

Controller and contact

The data controller is Andrea Bellati, Milan, Italy. For questions about personal data, withdrawal of consent and data-rights requests, use the privacy form linked on this page. This is the operational channel dedicated to these requests and does not require consent to follow-up or promotional communications.

Contact requests

The contact form collects your name and at least one contact, email or phone. You may provide both. Topic and message are optional. Language, source page, request timestamp and consent to follow-up are recorded. The data is used to review your request and reply; leaving contact details does not subscribe you to promotional lists.

The legal basis for follow-up is consent, Article 6(1)(a) GDPR. Providing data is voluntary, but the ordinary form cannot submit a request without a name, contact and consent. Avoid health data, other special categories of personal data or unnecessary information about other people.

Africa travel enquiries

The optional travel enquiry form collects your name, at least one contact method and preferred channel, along with the travel preferences you choose to share: destination, dates, duration, travellers, accommodation, activities and notes. Your name and contact details are needed for a reply; preferences may remain undecided. We record an identifier, timestamp, language, source page, privacy notice version and acknowledgement. The purpose is to discuss and respond to your enquiry as steps taken at your request before entering into a contract, Article 6(1)(b) GDPR. This does not subscribe you to promotional communications or trigger automated commercial messages.

Enquiries are saved in the database even if the controller’s email notification fails. Access is restricted to the controller and authorised administrators; technical providers handle the database, hosting and notifications. Details are not automatically shared with travel operators: any necessary disclosure will be explained first. Enquiries are retained for up to 12 months after the last interaction, subject to ongoing relationships or applicable obligations. The form draft stays in your browser session for up to 24 hours and is deleted after successful submission. To prevent abuse, a technical identifier derived from the connection address and changing daily is stored with enquiry records, solely to limit submissions. Do not include health information or documents.

Choosing WhatsApp opens the WhatsApp service, which applies its own privacy notice. Andrea will respond personally through the indicated channel. Use the privacy form on this page to exercise your rights. Notice version for this collection: africa-travel-2026-10-21.

Africa travel updates

The Africa form collects email, language, source page and consent timestamp to contact you and send updates about Africa trips. This purpose is separate from ordinary contact requests and is based on consent, Article 6(1)(a) GDPR. You may withdraw it at any time through the privacy form. Withdrawal does not affect the lawfulness of prior processing. Consent is not extended to campaigns on other subjects.

Browsing, security and statistics

Browsing involves technical processing of connection data, such as IP address, time, requested URLs and browser information. These are used to deliver pages, protect the website against abuse and diagnose errors. The legal basis is the legitimate interest in operating and securing the service, Article 6(1)(f) GDPR.

The website uses browsing and performance statistics without analytics cookies, persistent identifiers or fingerprints to follow people over time. Statistics help understand page performance and improve the website. Advertising and remarketing tools are not active. More information is provided in the Cookie Policy.

Recipients and technical services

Data may be processed by specialist providers of hosting and content delivery, security and analytics, database and storage management, email notifications and correspondence management. Request notifications may contain the name, contact details and submitted text. The controller and people authorised for necessary tasks may access the data. Form submissions are not published on the website or sold to third parties.

Services from international technology providers, including providers based in the United States or Singapore, are used. Their use may involve processing or access outside the European Economic Area. Service agreements provide international-transfer mechanisms, including European Commission standard contractual clauses where applicable. You may ask the controller for information about recipients, destinations and safeguards applicable to your data.

Retention periods

Contact requests are retained for up to 12 months after the last interaction, subject to ongoing relationships, legal obligations or documented needs to protect rights. Africa update data is retained until consent is withdrawn; after 24 months without interaction, the need to retain it is reviewed and processing is discontinued if no longer necessary.

Data-rights requests and consent records may be retained to the extent necessary to demonstrate handling of a request or compliance with obligations. Reviews also cover correspondence copies. Any technical copies and backups are handled according to service retention cycles and applicable obligations.

Rights and withdrawal of consent

Where the GDPR applies, you may request access, rectification, erasure, restriction and portability, object to processing based on legitimate interest, and withdraw consent. Privacy requests are processed to meet the controller’s obligations, Article 6(1)(c) GDPR, without requiring new consent. Identity verification may be necessary to prevent disclosure or deletion by unauthorised persons.

Requests are answered within the statutory time limits, generally within one month, with a reasoned extension where permitted. You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority. No automated decisions producing legal or similarly significant effects, or advertising profiling, are provided for.

External links and changes

Linked external websites apply their own privacy notices when you choose to visit them. This website does not embed social chats or external video-platform players: photos and videos are provided as files. New tools or purposes will be reflected in updated notices and any required consent choices before activation.