Galleriaborghese.com ("we," "the site") is an independent affiliate guide that facilitates booking tickets and guided tours for Rome's Borghese Gallery through authorized commercial partners. This policy explains what data we collect, how we use it, and what your rights are.

1. Data controller

The data controller is the owner of galleriaborghese.com. For any privacy-related request, you can write to [contact-email-placeholder].

2. Data collected

We don't directly collect identifying personal data through forms on the site. Data we may collect indirectly includes: server logs (IP address, user agent, page visited, timestamp) managed by our hosting provider Netlify for security and diagnostic purposes; technical cookies from third-party widgets (see next section); browsing data through our booking partner's analytics tools.

3. Third-party widgets

The site's pages include booking widgets provided by GetYourGuide GmbH (Berlin, Germany). These widgets may set their own cookies on your device to manage calendar functionality, remember your preferences, and track conversions. Processing of this data is governed by GetYourGuide's privacy policy: getyourguide.com/privacy_policy.

4. Legal basis

Processing of server logs: legitimate interest in site security and diagnostics (Art. 6.1.f GDPR). Technical widget cookies: legitimate interest in the functioning of the requested service. We don't use direct profiling cookies.

5. Data transfer

Our hosting provider Netlify is based in the United States. Log data is transferred to the United States under Standard Contractual Clauses approved by the European Commission (SCCs).

6. Your rights

Under the GDPR (EU Regulation 2016/679), you have the right to access your data, rectify it, erase it, restrict its processing, and object to processing. To exercise these rights, write to [contact-email-placeholder]. You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or your local supervisory authority.

7. Changes

We may update this policy periodically. The current version is always available on this page, with the last-updated date shown above.