PRIVACY POLICY

Last updated: November 3, 2026

1. Who we are

Ciao Vino Touring Company ("Ciao Vino", "we", "us") is a travel project personally run by Antonio Race. For the purposes of applicable data protection laws, the data controller is:

Antonio Race
Ciao Vino Touring Company
3536 Silverleaf Ct
Fort Collins, CO 80526, United States
Email: vinomaresole@gmail.com

2. What information we collect

When you contact us through the inquiry form on our website, we collect the information you send us:

  • First name and last name (required)
  • Email address (required)
  • Number of travelers (required)
  • The experience you are interested in (required)
  • Your message (required)
  • Phone number (optional)
  • City and country (optional)
  • Preferred travel dates or season (optional)
  • Whether you have visited Italy before (optional)

We also process limited technical information, described in sections 5 and 6.

3. How we use your information and on what legal basis

  • Responding to your inquiry and communicating with you about the travel experience you asked about. Basis: Article 6(1)(b) GDPR (steps at your request before entering into a contract).
  • Measuring how visitors use the site through Squarespace Analytics cookies, only if you accept them. Basis: Article 6(1)(a) GDPR (your consent), which you can withdraw at any time (see section 6).

We use the information you send us only to respond to your inquiry and to communicate with you about the travel experience you asked about. We do not add you to any newsletter or marketing list.

4. Where your information is stored and for how long

Our website is hosted on Squarespace. When you submit the contact form, your message is:

  • delivered by email to our mailbox at vinomaresole@gmail.com (a Google Gmail mailbox), and
  • stored in the Contacts panel of our Squarespace website.

Both copies stay under our control: we can delete a contact (and its submissions) from Squarespace at any time, and we can delete emails from the mailbox.

We keep inquiry correspondence for up to 12 months after our last exchange with you, and then delete it from both our Squarespace Contacts panel and our email mailbox. Deleted inquiry emails may remain in Gmail Trash for up to 30 days. If you book a journey with us, the records related to your booking are kept for the time required by our contractual and legal obligations.

5. Third-party services

We rely on a few third-party services to run this website:

  • Squarespace, Inc. hosts our website, stores form submissions in the website's Contacts panel, and provides Squarespace Analytics (see section 6). Squarespace states that it processes form submissions on our behalf under its Data Processing Addendum.
  • Google (Gmail) provides the mailbox that receives inquiry emails, and processes their content to provide that service under its own terms.

We do not use map embeds or social media embeds on this website, and we do not sell your personal information to anyone.

6. Cookies and your choices

You can use our website whether or not you accept optional cookies. The choice is yours, and you can change it at any time.

Strictly necessary cookies, set by Squarespace, are always active because the site cannot work without them. They include the cookie that protects forms from forged requests and, while our site is password-protected, the cookie that remembers that you entered the site password.

When you first visit, a cookie banner lets you accept or decline optional cookies; both choices are one click, with equal prominence. If you accept, Squarespace Analytics cookies (which identify unique visitors and measure visits) are placed on your device. If you decline, they are not placed. Your choice is remembered for 30 days, and you can change it at any time through the "Cookie Preferences" link on our site; if you withdraw consent, the analytics cookies previously set are deleted from your device.

Activity log: our Squarespace settings include an activity log, currently turned on. Squarespace describes it as a record of individual page visits from the past seven days, including each visitor's IP address, approximate location, browser, and the page that referred them. Older entries drop off after seven days. Turning it off removes this data from our analytics panel.

Separately, on full page loads your browser sends a page-view request to Squarespace's systems, regardless of your cookie choice. Squarespace's privacy policy states that it collects technical visit information from visitors to customer websites and acts as an independent controller for some of that information, including for the security and integrity of its services: <https: data-preserve-html-node="true"//www.squarespace.com/privacy>

7. International data transfers

Our providers are established in the United States, so personal data collected through this website may be transferred to and processed in the United States.

What our providers state:

  • Squarespace states in its Data Processing Addendum that Squarespace, Inc. is certified under the EU-U.S., Swiss-U.S., and UK Extension Data Privacy Frameworks and relies on the applicable framework for transfers from the EEA, Switzerland, and the UK, with the European Commission's Standard Contractual Clauses (Decision 2021/914) and the UK Addendum applying where the frameworks do not cover a transfer. Squarespace, Inc.'s certification is currently listed as active on the official Data Privacy Framework register (<https: data-preserve-html-node="true"//www.dataprivacyframework.gov/participant/4774>).
  • Google LLC is likewise listed as an active participant (<https: data-preserve-html-node="true"//www.dataprivacyframework.gov/participant/5780>), covering Google LLC and its wholly-owned U.S. subsidiaries.

8. Your rights

Depending on where you live, and subject to the conditions and limits of applicable law, you may have the right to:

  • access the personal information we hold about you;
  • ask us to correct or update it;
  • ask us to delete it;
  • object to or limit how we use it;
  • receive a copy of it in a portable format;
  • withdraw consent at any time, where processing is based on consent (for example, analytics cookies). Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal (Article 7(3) GDPR), and changing your cookie preference on our site withdraws it.

To exercise any of these rights, write to vinomaresole@gmail.com. We will respond without undue delay and in any event within one month of receiving your request; that period may be extended by two further months where necessary, taking into account the complexity and number of requests, and we will inform you of any such extension within one month (Article 12(3) GDPR).

If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

9. Changes to this policy

We may update this policy from time to time. The latest version will always be posted on this page with its revision date.

10. Contact

Questions about this policy or about how we handle your information? Write to vinomaresole@gmail.com - we are happy to help.