Privacy Policy and Accessibility Act

PRIVACY POLICY

WEBSITE PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF EUROPEAN REGULATION 2016/679 (GDPR)

Specific summary notices are progressively set out or displayed on the pages of the website designed for particular on-demand services that involve forms for the collection of data. We also inform You that, in order to provide a complete service, our website may contain links to other websites that are not managed by BLUVACANZE SPA. BLUVACANZE SPA is not responsible for errors, content, cookies, the publication of content that is unlawful on moral grounds, advertising, banners or files that do not comply with the applicable legal provisions, or for compliance with privacy legislation by sites not managed by the Data Controller.

BLUVACANZE SPA, as Data Controller of Your personal data pursuant to and for the purposes of Article 13 of European Regulation 2016/679, hereby informs You that the aforementioned legislation provides for the protection of data subjects with regard to the processing of personal data, and that such processing will be based on the principles of fairness, lawfulness and transparency and on the protection of Your confidentiality and Your rights. The information and personal data provided by You or otherwise acquired in the course of using the website will be processed in accordance with the legislative provisions of the aforementioned legislation and the confidentiality obligations provided for therein.

DATA SUBJECTS AND RETENTION PERIOD

1. A) users (visitors) of the website bluvacanze.it and of the domains linked to it
2. In the course of browsing, the computer systems and software procedures used to operate the Site acquire certain personal data whose transmission is implicit in the use of Internet communication protocols, such as, by way of example, the IP addresses or domain names of the computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the size of the file obtained and other parameters relating to the user’s operating system,

For further information, please consult the cookie policy available on the website.

B) open an agency

By completing the form accessible in the "open an agency" section, Your data will be used to manage any potential collaboration. The provision of data for such purposes is optional; however, any refusal will make it impossible to assess Your request. Your data will be retained for the time necessary for the provision of the service requested by You.

Your data will be retained until You decide to cancel Your subscription to the service or object to the processing.

C) users of the contacts section, request a quote, advertisements on social media and through landing pages

By completing the forms accessible in the "Contact us" and "Request a quote" sections, or those set up for the collection of data via landing pages or advertisements published on social media, Your data (e.g. first name, surname, email address, telephone number, etc.) will be used to respond to Your request for information, including the response to Your request for a quote. The provision of data for such purposes is the fulfilment of a request made by You. The legal basis for the processing is Article 6(1)(b) of the GDPR. The provision of data for such purpose is optional; however, any refusal will make it impossible to respond to Your requests. Your data will be retained for the time necessary for the provision of the service requested by You.

Subject to Your consent, given by ticking the relevant box, Your data will be used to keep You updated on Bluvacanze’s promotional news, which involves the sending of promotional and advertising communications consisting of informational and promotional messages by traditional means (e.g. telephone contact, paper mail, individual emails, etc.) or automated contact methods (e.g. automated campaigns for sending emails, SMS, automated telephone contact, instant messaging, social networks, etc.), including by entering them in the Data Controller’s company CRM, in full compliance with the principles of lawfulness and fairness and with the provisions of law. You may object to the processing at any time by using the "CANCEL SUBSCRIPTION" link in the footer of the email or by sending a request to the Data Controller at the contact details indicated in this notice. By means of the same box, You also give Your consent to the use of the communications tracking pixel as indicated in point E). This is a single expression of will, informed and revocable at any time, even only in part. Refusal to give consent has no consequences for any other existing relationships with the Data Controller.

You may withdraw consent:

• in full, by clicking on the "Cancel subscription" link in each newsletter: in that case You will no longer receive communications;
• for tracking only, by clicking on the dedicated link in each newsletter or by writing to rpdblu@bluvacanze.it. In that case You will continue to receive communications without any individual tracking.

Withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal. You may also object to the processing at any time by clicking on the relevant link in the footer of the emails or by writing to rpdblu@bluvacanze.it

The provision of Your data in order to stay updated on Bluvacanze’s promotional news, which involves promotional and advertising purposes, remains optional, and Your refusal will have no consequences with regard to the response to Your requests, but will prevent Bluvacanze from keeping You updated on its further initiatives, events and packages. Your data will be retained until You decide to withdraw Your consent or to object to the continuation of the processing in the manner indicated above.

D) careers

By completing the form accessible in the "careers" section, Your data will be used to manage any employment relationship. The provision of data for such purposes is optional; however, any refusal will make it impossible to accept Your curriculum vitae. The Curriculum Vitae must contain only identification data, which will be processed within the limits strictly pertinent to the obligations, tasks and purposes indicated. Please note that, unless strictly necessary, You are requested not to provide special category data under Article 9 of the GDPR (e.g. state of health, racial and/or ethnic origin, trade union membership, religious beliefs). Should such data be provided, the Data Controller shall have the discretion to decide which to retain and which to delete. Your data will be retained for the time necessary for the provision of the service requested by You. Your data will be retained for a period not exceeding 2 years.

E) TRACKING PIXEL

Promotional communications contain a tracking pixel. The pixel is a small invisible image which, when You open the email, communicates to the sending system information such as the date and time of opening, the type of device and email client, the IP address and clicks on links.

This information, including when combined with data from other company systems, is used to:

• measure the effectiveness of campaigns;
• analyse Your interests and preferences with respect to the products and services presented;
• create a commercial profile (profiling);
• personalise the content and frequency of subsequent mailings.

The legal basis is Your consent (Article 6(1)(a) GDPR and Article 122(1) of the Privacy Code). No solely automated decision-making process producing legal effects concerning You or similarly significantly affecting You is carried out.

Withdrawal, including partial withdrawal. You may withdraw Your consent at any time, in whole or in part:

• via the "Cancel subscription" link in each email, in order to withdraw everything and no longer receive communications;
• by writing to rpdblu@bluvacanze.it, in order to deactivate only tracking and profiling and continue to receive the newsletter without the pixel;
• via a dedicated link in the footer of the emails.

Withdrawal of consent does not affect the lawfulness of the processing carried out prior to the withdrawal. The Data Controller shall act on a request for partial withdrawal within a short time.

METHODS OF PROCESSING OF PERSONAL DATA

Your personal data will be processed by manual, electronic and/or telematic means, through the use of cookies (as indicated in the cookie policy available on the website), by means of electronic computers using third-party software and automated contact methods (e.g. automated campaigns for sending emails, SMS, automated telephone contact, instant messaging, social networks, etc.), in compliance with the procedures referred to in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures provided for.

For the sending of communications, the Data Controller uses a platform that produces reports. Depending on the consent given, the reports indicate, for example:

• the identity of the recipients who have opened the email;
• clicks on individual links (link tracking);
• the device and client used;
• emails delivered, undelivered or forwarded;
• date and time of sending;
• the list of those who have unsubscribed.

If You have withdrawn Your consent to tracking only, the Data Controller uses with regard to You only aggregated and anonymous data, without any individual references.

In order to compare and, where appropriate, improve the results of communications, the Data Controller uses systems for sending newsletters and promotional communications with reporting. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, opens, unique "clickers" and clicks; the detail of the emails sent by date/time/minute; the detail of the emails delivered and not delivered and of those forwarded; the list of those who have unsubscribed from the newsletter; users with problems displaying the message; link tracking (i.e. the number of clicks made on the links in the message); click tracking (which links have been clicked and by whom). All these data are used for the purpose of comparing and, where appropriate, improving the results of communications.

USE OF SOCIAL MEDIA PLATFORMS

BLUVACANZE SPA may provide links to external social media platforms managed by third parties. The company is not responsible for the accuracy or content of such external platforms and encourages users to consult their respective privacy policies.

RECIPIENTS OF PERSONAL DATA AND DISSEMINATION OF DATA

Your data will be processed by duly authorised personnel and may be processed by third parties belonging, by way of example, to the following categories:

• external parties providing cloud services;
• platform for sending communications;
• companies providing services for the management of the IT system, including server hosting and backup services;

The parties belonging to the above categories operate, in some cases, as data processors specifically appointed by the Data Controller in compliance with Article 28 of the GDPR, and in other cases in complete autonomy as separate data controllers, it being understood that, in the latter case, the disclosure of Your personal data to such independent controllers is carried out solely for the purpose of pursuing the purposes indicated in this notice.

The complete list may be requested by writing to the Data Controller at the contact details provided.

Your data will not be disseminated.

TRANSFER OF PERSONAL DATA

Your data may be transferred to countries outside the European Union as indicated in the Cookie Policy of the companies providing the services relating to third-party cookies. For further information, write to rpdblu@bluvacanze.it.

For the sending of company communications, Your data are stored in States belonging to the European Union.

MINORS

The website is not intended for use by minors, and data from minors is not knowingly collected. If collected, such data will be promptly deleted. Parental consent is required for any data processing involving minors.

DATA CONTROLLER

The Data Controller is BLUVACANZE SPA, with registered office at Piazzale Lorenzo Lotto, 2 – 20148 Milan (MI), in the person of its legal representative pro tempore. The Data Controller has appointed the Data Protection Officer, who can be reached at the email address rpdblu@bluvacanze.it.

You have the right to obtain from the Data Controller the erasure (right to be forgotten), restriction, updating, rectification and portability of, and to object to the processing of, the personal data concerning You, and more generally You may exercise all the rights provided for by Articles 15 et seq. of European Regulation 2016/679 by writing to rpdblu@bluvacanze.it.

APPLICATION OF THIS NOTICE

If you have questions about this privacy notice, contact BLUVACANZE SPA at rpdblu@bluvacanze.it or through the contact details provided.

CHANGES TO THIS POLICY

BLUVACANZE SPA reserves the right to update this policy in compliance with legal developments and user feedback. Updates will be published promptly on the privacy page.

RIGHTS OF DATA SUBJECTS

EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject

1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning him or her, even if not yet recorded, and their communication in intelligible form, as well as the possibility of lodging a complaint with the Supervisory Authority.
2. The data subject has the right to obtain an indication of:

• the origin of the personal data;
• the purposes and methods of the processing;
• the logic applied in the case of processing carried out with the aid of electronic instruments;
• the identity of the parties or categories of parties to whom the personal data may be disclosed or who may become aware of them in their capacity as representative designated in the territory of the State, as processors or as persons authorised to process personal data.

1. The data subject has the right to obtain:

• the updating, rectification or, where there is an interest, the integration of the data;
• the erasure, anonymisation or blocking of data processed in breach of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• the attestation that the operations referred to in letters a) and b) have been brought to the attention, including as regards their content, of those to whom the data have been disclosed or disseminated, except where such fulfilment proves impossible or involves the use of means manifestly disproportionate to the right protected;
• data portability.

1. The data subject has the right to object, in whole or in part:
2. on legitimate grounds, to the processing of personal data concerning him or her, even if pertinent to the purpose of the collection;
3. to the processing of personal data concerning him or her for the purpose of sending advertising material or direct selling, or for carrying out market research or commercial communication.

Accessibility Statement

Our Commitment to Accessibility

At Bluvacanze S.p.A., we are deeply committed to ensuring an accessible and inclusive environment and experience for everyone who interacts with us. We strive to accommodate individuals with disabilities so that everyone can easily access our services, travel solutions, and opportunities.

Accessibility Solutions for Travelers

Bluvacanze removes access barriers through the following solutions:

• Alternative contact channels (high street agencies, call center)
• Expert travel consultants trained to engage with empathy

Website Accessibility Features

The website is compatible with all modern browsers and assistive technologies, including but not limited to Firefox, Chrome, Safari, and Edge.

Limitations

Please note:

• PDF files may not always be accessible
• Interactive maps are not accessible to users with visual impairments
• Some videos lack audio descriptions

Legal References

This website is committed to ensuring the accessibility of its digital content in compliance with:

• Law No. 4 of January 9, 2004 (known as the "Stanca Law")
• Legislative Decree 82/2022, which implements Directive (EU) 2019/882 – European Accessibility Act
• WCAG 2.1 Guidelines – Level AA
• UNI CEI EN 301549 Technical Standard

Compliance Status

This website is currently undergoing updates and is partially compliant with the required accessibility standards.

Alternative Contact Channel

If you experience difficulties using the website, please contact us at the following phone number: 

Reporting to AgID

If you do not receive a satisfactory response or receive no response at all, you may submit a report to the Agency for Digital Italy (AgID) via the official website: https://www.agid.gov.it

Date of the Statement: 23/09/2025

Accessibility Assessment

This statement is based on an internal self-assessment and will be periodically updated based on the progress of the accessibility improvement project.