1. Who We Are

Italy Entry Pass (“we”, “us”, “our”) operates the website italyentrypass.it. We help travelers discover and book tickets and tours in Italy through trusted third-party platforms. We are not the official operator of any attraction and we do not process payments on our website.

Data Controller: Italy Entry Pass (website operator). For any questions about this Policy or your data, please contact us via the contact page on our website.

2. What Data We Collect

Technical and usage data: IP address, device and browser information, pages viewed, referring URLs, date/time, and general location (city/region) collected via cookies or similar technologies.
Contact data: your name, email address, and message content if you reach out via our contact form or email.
Affiliate and outbound click data: pseudonymized/aggregated information about which partner links you click, to attribute bookings and improve our content.

We do not create user accounts and do not collect payment information on our website. All purchases are completed on partner platforms (e.g., Tiqets.com). Their privacy policies apply to your checkout data.

3. How We Use Your Data (Legal Bases)

To operate and secure the website (legitimate interests).
To respond to your inquiries (performance of a contract or legitimate interests).
To measure and improve content and usability (consent for analytics cookies where required).
To attribute affiliate commissions when you book via our links (legitimate interests and/or consent where required).
To comply with legal obligations (legal obligation).

4. Cookies and Similar Technologies

We use cookies and similar technologies to run the site, understand performance, and attribute affiliate bookings.

Strictly necessary: required for core functionality (cannot be switched off).
Analytics: help us understand visits and improve the site (set only with your consent where required).
Affiliate/attribution: record that you clicked a partner link so the booking can be attributed correctly to Tiqets.

You can manage or withdraw consent at any time via the cookie banner/settings on our site or by adjusting your browser settings. Disabling certain cookies may affect functionality.

5. Third-Party Platforms and Links

When you click to book, you will be redirected to our ticketing partner Tiqets. Your purchase and payment details are handled by Tiqets.com under their own terms and privacy policy. We may also link to other external websites. We are not responsible for third-party practices; please review their policies.

6. Data Sharing

Service providers: hosting, security, performance, and analytics vendors who process data on our behalf under confidentiality agreements.
Affiliate partner (Tiqets): we share minimal, pseudonymized attribution data (e.g., click/session identifiers) so bookings can be credited correctly.
Legal reasons: we may disclose information if required by law or to protect our rights, users, or the public.

We do not sell your personal data.

7. International Transfers

Your data may be processed outside the EEA. Where applicable, we rely on appropriate safeguards such as European Commission Standard Contractual Clauses, or transfers to countries with adequacy decisions.

8. Data Retention

Contact messages: retained as long as needed to handle your request and for a reasonable period thereafter.
Analytics/attribution data: typically retained up to 14 months, unless a longer period is required for security, troubleshooting, or legal reasons.

9. Your Rights (EU/EEA)

Where the GDPR applies, you have the right to request access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw consent at any time without affecting prior lawful processing. You also have the right to lodge a complaint with your local supervisory authority.

10. Security

We use reasonable technical and organizational measures to protect your data. However, no transmission or storage system is 100% secure.

11. Children’s Privacy

Our website is not intended for children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date above. Your continued use of the website after changes means you accept the updated Policy.