Privacy Policy

Last updated: July 2026

This notice describes how GiroMunna collects, uses and protects the personal data of users who visit the website giromunna.com or who request our services, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.

1. Data we collect

GiroMunna collects the following personal data, only when voluntarily provided by the user:

• Identification data: first and last name
• Contact data: email address, phone number/WhatsApp
• Service-related data: travel dates, route, number of passengers, specific notes
• Company data (optional): company name, for B2B invoicing

With your consent, the website uses Google Analytics 4 (provided by Google Ireland Ltd.) to collect aggregated, IP-anonymised statistics on how the pages are used (e.g. pages visited, traffic source, device type). No advertising or profiling cookies are installed. If you do not give consent, no analytics cookies are activated.

2. Purposes and legal basis of processing

Data is processed for the following purposes:

• Responding to quote requests (legal basis: performance of pre-contractual measures — Art. 6(1)(b) GDPR)
• Management and provision of the transport service (legal basis: performance of a contract — Art. 6(1)(b) GDPR)
• Tax and accounting obligations (legal basis: legal obligation — Art. 6(1)(c) GDPR)
• Marketing communications about similar services, only with explicit consent (legal basis: consent — Art. 6(1)(a) GDPR)

3. How data is processed

Data is processed using electronic tools and on paper, adopting security measures appropriate to prevent unauthorized access, loss or disclosure. Processing is carried out by the data controller or by authorized parties operating under its direction.

Submitting the quote request form on the website involves two simultaneous processing operations:

• the data you enter is recorded in an internal log hosted on the website's server and sent by email to the controller's mailboxes. The log is not publicly reachable and is accessible only to the controller;
• if you choose to continue via WhatsApp (a service of Meta Platforms Ireland Ltd.), the same data is also transmitted through that channel: in that case WhatsApp's terms and privacy policy apply as well.

If you prefer not to use WhatsApp you can use the "Send by email" button below the form, or write to us directly at the addresses given in section 9.

4. Disclosure to third parties

Personal data is not sold or transferred to third parties for commercial purposes. It may only be disclosed to:

• Parties to whom disclosure is required by law (e.g. the Italian Revenue Agency)
• Collaborators and subcontractors strictly necessary for performing the service, bound by confidentiality agreements
• The website's hosting provider (IONOS SE), acting as data processor and storing data on servers located within the European Union

5. Transfer of data outside the EU

Data recorded on the website's server and the notification emails remain on infrastructure located within the European Union.

Data sent via WhatsApp may be transferred to non-EU countries by Meta Platforms. Such transfers take place in accordance with the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses). For more information, see the WhatsApp Privacy Policy.

6. Data retention

Data relating to quotes not followed by a contract is kept for a maximum of 12 months from the request. Data relating to services provided (necessary for tax purposes) is kept for 10 years in accordance with Italian tax law. Data processed on the basis of consent is kept until consent is withdrawn.

7. Data subject rights

As a data subject, you have the right to:

• Access (Art. 15 GDPR): obtain confirmation that processing concerning you is taking place and receive a copy
• Rectification (Art. 16 GDPR): correct inaccurate data or complete incomplete data
• Erasure (Art. 17 GDPR): obtain deletion of your data ("right to be forgotten")
• Restriction (Art. 18 GDPR): restrict processing in certain cases
• Portability (Art. 20 GDPR): receive your data in a structured format
• Objection (Art. 21 GDPR): object to processing, in particular for marketing purposes
• Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise your rights, write to info@giromunna.com. We will respond within 30 days of receiving your request.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Cookies

This website uses two types of cookies:

• Technical cookies, strictly necessary for the operation of the pages and to save your preferences (including your cookie choice). No consent is required under Art. 122 of the Italian Privacy Code.
• Third-party analytics cookies (Google Analytics 4), which collect aggregated, IP-anonymised information about how the site is used. They are activated only with your prior consent, given through the banner on the site: you can accept or decline. You can withdraw consent at any time by clearing your browser cookies — you will be asked to choose again on your next visit.

Google Analytics is provided by Google Ireland Ltd.; for more information see Google's privacy policy.

9. Changes to this notice

GiroMunna reserves the right to update this notice. Changes will be published on this page with an indication of the update date. We encourage you to check it periodically.

10. Contact

For any questions regarding the processing of your personal data, please contact us:

• Email: info@giromunna.com
• Phone: +39 335 587 4744
• WhatsApp: +39 335 587 4744