Privacy policy

Last updated: 9 September 2026

This policy explains how MyGayTour collects and uses personal data when you visit this website, ask about a trip or write to us. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679, the General Data Protection Regulation.

Who is responsible for your data

The data controller is:

Tempo di Viaggi S.r.l.s., trading as MyGayTour
Via Giacomo Matteotti 1/B, 53027 San Quirico d’Orcia (SI), Italy
VAT number IT 01584560526
Email: info@mygaytour.com
Certified email (PEC): tempodiviaggisrls@pec.it

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. Write to the address above for anything concerning your data.

What we collect, and why

When you ask about a trip

The request form collects your name, email address, telephone number, the number of travellers, your preferred month of travel and anything you choose to write in the message field.

Purpose: to answer your enquiry and prepare a quotation.
Legal basis: Article 6(1)(b) GDPR, steps taken at your request before entering into a contract.
Retention: 24 months from our last exchange, then deletion. If the enquiry becomes a booking, the retention period for contract and accounting records applies instead.

When you write to us

The contact form and our email address collect your name, email address and the content of your message.

Purpose: to reply to you.
Legal basis: Article 6(1)(f) GDPR, our legitimate interest in answering people who contact us.
Retention: 24 months from our last exchange.

When you sign up for the newsletter

The newsletter form collects your email address and a note of which page you signed up from.

Purpose: to send you offers, discounts and news about new tours.
Legal basis: Article 6(1)(a) GDPR, your consent. You give it by submitting the form and, where double opt-in is in use, by confirming the link we email you.
Retention: until you unsubscribe. Every email carries a one click unsubscribe link, and you can also write to us.
Processor: our mailing list is run on Brevo (Sendinblue SAS, France), acting as a data processor under Article 28 GDPR. Their servers are in the European Union.

Signing up for the newsletter is never a condition of booking anything, and we do not use your address for anything else.

When you book a trip

To organise travel we need identity and contact details, and sometimes passport details, dates of birth and information required by airlines, hotels and local partners.

Purpose: to perform the travel contract.
Legal basis: Article 6(1)(b) GDPR for the contract itself, and Article 6(1)(c) GDPR for the tax and accounting records we are obliged to keep.
Retention: 10 years for accounting records, as required by Italian law.

Special categories of data

MyGayTour organises travel for LGBTQIA+ people. The simple fact that you contact us is not treated by us as a declaration about your sexual orientation, and we do not ask for it, record it or infer it. If you choose to tell us something about your health, dietary needs or any other special category of data in order to make a trip work for you, we process it only on the basis of your explicit consent under Article 9(2)(a) GDPR, only for that trip, and only with the partners who need it to provide the service. You can withdraw that consent at any time.

When you browse the site

Our hosting provider records standard server logs, including your IP address, the time of the request, the pages requested and your browser type. These logs exist to keep the site running and secure.

Legal basis: Article 6(1)(f) GDPR, our legitimate interest in the security and availability of the site.
Retention: the retention period applied by our hosting provider for technical logs.

Who else sees your data

We do not sell your personal data, and we do not share it for anyone else’s marketing.

Your data is handled by the parties we need in order to do the work:

Our hosting provider, SiteGround, which operates the servers on which this site runs. Acting as a data processor under Article 28 GDPR.
Brevo (Sendinblue SAS), which delivers our newsletter, for the address you gave us for that purpose only.
Travel partners such as airlines, hotels, local agencies and guides, but only the details necessary for a trip you have actually asked us to arrange.
Our accountants and professional advisers, where required to meet legal obligations.
Public authorities, where the law obliges us to disclose.

Data transferred outside the European Economic Area

The servers hosting this website are located in Virginia, in the United States. This means personal data submitted through this site is transferred outside the EEA. The transfer is governed by the Standard Contractual Clauses adopted by the European Commission under Article 46(2)(c) GDPR, which our hosting provider has entered into.

Where a trip takes place outside the EEA, the details necessary for that trip are transferred to the local partners who deliver it, under Article 49(1)(b) GDPR, because that transfer is necessary to perform your contract.

Your rights

Under Articles 15 to 22 GDPR you have the right to:

ask what data we hold about you and receive a copy of it;
have inaccurate data corrected;
have your data deleted, where we have no overriding obligation to keep it;
ask us to restrict how we use it;
receive the data you gave us in a portable, machine readable format;
object to processing based on our legitimate interest;
withdraw any consent you have given, at any time, without affecting what was lawful before you withdrew it.

To exercise any of these, write to info@mygaytour.com. We answer within one month, as Article 12(3) GDPR requires.

If you are not satisfied

You can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, www.garanteprivacy.it, or with the authority in the EU country where you live or work.

Is any of this required?

Providing your data is never a legal obligation, but without the details marked as required on our forms we cannot answer your enquiry or organise a trip for you.

Automated decisions

We do not make decisions about you by automated means, and we do not profile you.

Changes to this policy

If we change how we handle personal data we will update this page and change the date at the top. Material changes will be brought to your attention.