1. Data Controller Identification

This Privacy Policy regulates the processing of personal information collected by Wondercrewpicnic.site ("the Website"), operated by Wondercrew Media Ltd ("the Company", "we", "us", or "our"). The Company is registered under entity number 14892014, with operational offices at Via Vittorio Emanuele Orlando 3, 00185 Roma, Italy.

For all inquiries regarding personal data processing, rights requests, or supervisory matters, our Data Protection Officer (DPO) can be reached directly via electronic mail at [email protected].

2. Categories of Information Collected

In operating this independent editorial travel guide, we collect and process information through two primary mechanisms:

  • Voluntary Disclosures: When you complete our contact forms, request editorial dossiers, or correspond with our team, we collect your name, email address, message contents, and any travel parameters you voluntarily submit.
  • Technical and Telemetry Data: When navigating our pages, our servers automatically log non-identifying technical metadata including your browser type, device operating system, internet protocol (IP) address (anonymized prior to storage), referral uniform resource locators (URLs), and timestamp records.

3. Legal Basis for Processing (GDPR Article 6)

Under Regulation (EU) 2016/679 (General Data Protection Regulation) and UK Data Protection Act 2018, all processing of personal data must be founded on a recognized legal basis:

  • Consent (Art. 6(1)(a)): Explicit consent provided by you when subscribing to newsletters or opting into non-essential analytical cookies via our banner.
  • Contractual Performance (Art. 6(1)(b)): Responding to direct inquiries, research requests, or editorial commissions initiated by you.
  • Legitimate Interests (Art. 6(1)(f)): Protecting our digital infrastructure from malicious denial-of-service attempts, preventing fraud, and optimizing content delivery to readers worldwide.
  • Legal Obligations (Art. 6(1)(c)): Maintaining audit trails and financial accounting records required under applicable Italian and European corporate laws.

4. Cookies and Analytical Trackers

Our website utilizes technical cookies essential for site navigation, security token verification, and persistent recording of your cookie consent state. Optional analytical cookies are only activated following your affirmative opt-in via our cookie banner. For a complete inventory of cookie identifiers, lifespans, and browser-level opt-out methods, please consult our dedicated Cookie Policy.

5. Third-Party Processors & International Transfers

We do not sell, license, or barter your personal information to marketing syndicates or behavioral advertising platforms. Personal data is shared strictly with essential service processors under binding Data Processing Agreements (DPAs):

  • Cloud hosting providers and content delivery networks (CDNs) operating within the European Economic Area (EEA) and the United Kingdom.
  • Transactional email relay systems bound by standard contractual clauses (SCCs) ensuring privacy protections equivalent to GDPR standards.
  • Auditing and legal counsel when strictly necessitated by judicial subpoena or statutory compliance obligations.

6. Data Retention Schedules

Personal data collected via inquiry forms is retained for a maximum duration of twenty-four (24) months following the resolution of your inquiry, after which records are permanently expunged or irreversibly anonymized. Technical server logs are purged on a rolling thirty-day cycle. You maintain the right to request premature deletion at any time.

7. Rights of Data Subjects (GDPR & CCPA/CPRA)

Under European data protection statutes and California privacy regulations (CCPA/CPRA), visitors enjoy comprehensive rights concerning their personal records:

  • Right of Access: You may request confirmation of whether personal data concerning you is processed and receive a readable copy.
  • Right to Rectification: You may demand immediate correction of inaccurate or incomplete personal records.
  • Right to Erasure ("Right to be Forgotten"): You may request permanent deletion of your data when processing is no longer necessary.
  • Right to Restrict Processing: You may request suspension of processing while an accuracy objection is investigated.
  • Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object: You may object at any time to processing predicated on our legitimate interests.

To exercise any statutory right, transmit a formal request to our Data Protection Officer at [email protected]. We respond to all verified inquiries within thirty (30) calendar days without administrative fees.

8. Supervisory Authority Recourse

If you consider that our processing of your personal information infringes statutory privacy frameworks, you have the right to lodge a complaint with a competent supervisory authority. In Italy, complaints may be submitted to the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Roma; www.garanteprivacy.it).