Privacy Policy
Last updated: November 18, 2025
1. Data Controller
SKYLINE TRAVEL S.R.L.
Via Vitruvio 43, 20124 Milan, Italy
VAT Number: 04935870966
Company Registration (REA): MI-1785568
Certified Email (PEC): skylinetravel@pec.it
Email: info@skylinetravel.it
Phone: +39 02 66711143
2. Types of Data Collected
Skyline Travel collects and processes the following categories of personal data:
2.1 Data Provided Voluntarily
- Contact information: first name, last name, email, phone number
- Booking information: requested destinations, travel dates, number of passengers
- Payment information: data necessary for payment processing (handled through secure gateways)
- Travel documents: passport number, date of birth, nationality (when required for bookings)
- Travel preferences: dietary requirements, special requests, accommodation preferences
2.2 Automatically Collected Data
- Browsing data: IP address, browser type, operating system
- Cookies and similar technologies: see our separate Cookie Policy
- Usage data: pages visited, time spent on site, links clicked
3. Purpose of Processing
Personal data is processed for the following purposes:
3.1 Contractual Purposes (Legal Basis: Art. 6.1.b GDPR)
- Management and confirmation of travel bookings
- Provision of requested tourism services
- Communications related to booked travel
- Customer service and support during travel
3.2 Legal Obligations (Legal Basis: Art. 6.1.c GDPR)
- Compliance with tax and accounting obligations
- Mandatory communications to competent authorities
- Document retention according to regulations
3.3 Legitimate Interests (Legal Basis: Art. 6.1.f GDPR)
- Fraud prevention and system security
- Statistical analysis to improve services
- Complaint management and dispute resolution
3.4 Consent (Legal Basis: Art. 6.1.a GDPR)
- Sending promotional communications and newsletters
- Direct marketing via email and WhatsApp
- Profiling for personalized offers
4. Data Recipients
Personal data may be shared with:
- Tourism partners: airlines, hotels, tour operators, transportation services
- Service providers: payment systems, hosting services, email platforms
- Competent authorities: when required by law (e.g., law enforcement, tax authorities)
- Professional consultants: accountants, lawyers, IT consultants (under confidentiality obligation)
Data is not sold or transferred to third parties for commercial purposes.
5. Data Transfer Outside EU
Some data may be transferred to non-EU countries for the provision of tourism services (e.g., international hotel bookings). In such cases, we ensure:
- Use of standard contractual clauses approved by the European Commission
- Verification of adequate security measures by recipients
- Transfers only when necessary for contract execution
6. Retention Period
- Contractual data: 10 years from contract conclusion (tax obligations)
- Marketing data: until consent withdrawal or 24 months from last interaction
- Browsing data: 12 months
- Tax documentation: 10 years (Italian regulations)
7. Data Subject Rights (GDPR Art. 15-22)
As a data subject, you have the right to:
- Access (Art. 15): obtain confirmation of personal data existence and receive a copy
- Rectification (Art. 16): request correction of inaccurate or incomplete data
- Erasure (Art. 17): obtain data deletion (right to be forgotten)
- Restriction (Art. 18): request processing limitation
- Portability (Art. 20): receive data in structured format and transmit to another controller
- Objection (Art. 21): object to processing for legitimate reasons
- Withdraw consent: withdraw consent at any time (without affecting previous lawful processing)
- Complaint: lodge a complaint with the Data Protection Authority (www.garanteprivacy.it)
How to exercise your rights:
Send request via email to: privacy@skylinetravel.it
We will respond within 30 days of the request.
8. Cookies and Tracking Technologies
The site uses technical, analytical, and profiling cookies. Detailed information about cookies used is provided below.
Main Cookies Used:
- Technical cookies: essential for site functionality (session, language)
- Google Analytics: anonymous usage statistics
- Google reCAPTCHA: anti-spam protection
- Marketing cookies: only with prior consent (Google Ads, Facebook Pixel)
9. Security Measures
Skyline Travel implements appropriate technical and organizational measures to protect personal data:
- SSL/TLS encryption for communications (HTTPS)
- Firewall and protection systems against unauthorized access
- Regular data backups
- Data access limited to authorized personnel
- Staff training on privacy and security
- Strong password policy and two-factor authentication
10. Minors
Our services are not intended for individuals under 16 years of age. We do not knowingly collect data from minors without parental consent. For bookings involving minors, it is the parent/guardian's responsibility to provide necessary data.
11. Changes to Privacy Policy
This policy may be updated periodically. Substantial changes will be communicated through:
- Publication of new version on the website
- Email to registered users (for relevant changes)
- Notification during browsing (for significant changes)
Last modification date: November 18, 2025
12. Contact Information
For any questions regarding this privacy policy:
SKYLINE TRAVEL S.R.L.
Via Vitruvio 43, 20124 Milan, Italy
VAT Number: 04935870966
Company Registration (REA): MI-1785568
Certified Email (PEC): skylinetravel@pec.it
Privacy Email: privacy@skylinetravel.it
General email: info@skylinetravel.it
Phone: +39 02 66711143
WhatsApp: +39 329 561 6493
Supervisory Authority:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
Piazza di Monte Citorio n. 121, 00186 Rome
Website: www.garanteprivacy.it