Privacy notice

Privacy Notice
This Privacy Notice explains how personal data is collected and processed when you use maxeltour.com, contact Maxel Tour or make a booking.
1. Data controller

The data controller is:

Legal entity: MAXEL TOUR SRL
Registered address: 00186 Roma RM
VAT / Tax number: 18093591008
Email: info@maxeltour.com
Telephone: +39 06 89812777

2. Information we collect

Depending on how you interact with Maxel Tour, we may process:

Booking information

name and surname;
email address;
telephone number;
booking reference;
travel date and time;
number and type of participants;
participant names;
age or ticket category;
accessibility or booking requirements voluntarily provided by you.
Payment information
Payments may be handled by third-party payment providers.
Maxel Tour may receive payment status, transaction reference, payment method and limited transaction information but does not necessarily receive or store your complete payment-card details.
Communications
We may process messages, emails, customer-service requests, complaints and other communications exchanged with you.
Technical information
When you use the website, certain technical information may be collected, including:
IP address;
browser and device information;
operating system;
pages accessed;
date and time of access;
security logs;
cookie identifiers where applicable.
3. Why we process personal data
Personal information may be processed in order to:
process and administer bookings;
issue tickets and vouchers;
communicate booking instructions;
provide customer support;
process payments and refunds;
manage changes and cancellations;
send participant information to attractions or operating providers where necessary;
prevent fraud and protect the security of the website;
comply with accounting, tax and legal obligations;
establish, exercise or defend legal claims;
improve website functionality and services;
send marketing communications where legally permitted or where consent has been obtained.
4. Legal bases
Depending on the processing activity, personal data may be processed because:
processing is necessary to perform a contract or take steps requested before entering into a contract;
processing is necessary to comply with a legal obligation;
processing is necessary for a legitimate interest pursued by Maxel Tour or another party, where those interests do not override your rights;
you have provided consent.
Where processing is based on consent, consent may be withdrawn at any time without affecting processing already lawfully carried out.
5. Sharing personal data
Where necessary for the booking or operation of the website, information may be shared with:
attractions and museums;
tour guides and operating providers;
ticket suppliers;
booking and reservation technology providers;
hosting and IT providers;
payment processors;
email and customer-support providers;
analytics or technology providers where permitted;
accountants, advisers and professional service providers;
public authorities where disclosure is legally required.
Only information reasonably necessary for the relevant purpose should be shared.
6. International transfers
Some service providers may process information outside the European Economic Area.
Where personal data is transferred internationally, Maxel Tour will use a transfer mechanism required by applicable data-protection law where necessary, such as an adequacy decision or appropriate contractual safeguards.

7. Retention
Personal information is retained only for as long as reasonably necessary for the purposes for which it was collected and for applicable accounting, tax, contractual and legal requirements.
Different categories of information may therefore have different retention periods.
When information is no longer required, it will be deleted or anonymised where reasonably practicable.
8. Your rights
Subject to the conditions established by applicable data-protection law, you may have the right to:
obtain confirmation that your personal data is being processed;
access your personal data;
correct inaccurate information;
request deletion;
request restriction of processing;
object to certain processing;
receive certain information in a portable format;
withdraw consent where processing relies on consent.
Requests may be sent to:
info@maxeltour.com
Identity verification may be requested where reasonably necessary to protect personal information.

9. Complaints
You also have the right to lodge a complaint with the competent data-protection supervisory authority.
In Italy, the supervisory authority is the Garante per la protezione dei dati personali.
10. Security
Maxel Tour uses appropriate technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, destruction or loss.
No internet-based system can nevertheless be guaranteed to be completely secure.
11. Children's data

Maxel Tour's services are generally booked by adults.
Information concerning minors may nevertheless be processed where necessary to issue child or youth tickets or provide a booked service.
The person making the booking is responsible for providing such information lawfully.
12. Cookies
The website uses cookies and similar technologies as described in the Maxel Tour Cookie Policy.
Where legally required, non-essential technologies are activated only after the relevant consent has been obtained.
13. Updates
This Privacy Notice may be updated periodically to reflect changes in services, technology or legal requirements.
The latest version will be published on maxeltour.com with its revision date.
14. Contact
Privacy enquiries may be sent to:
Maxel Tour
Email: info@maxeltour.com
Website: maxeltour.com