Privacy Policy
Last updated: 2026/08/28
This Privacy Policy explains how Northwaystravel processes the personal data of users who visit and use the website www.northwaystravel.com, in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.
1. Data Controller
The Data Controller responsible for the processing of personal data collected through this website is:
Northwaystravel
Data Controller: Adriano Caggiari
Address: Via XXV Aprile 11, Carugate, 20061, MI, Italy
E-mail:info@northwaystravel.com
Telephone: +39 351 345 3003
The Data Controller may be contacted for any enquiries regarding the processing of personal data or the exercise of the rights provided for under applicable legislation.
2. Types of Personal Data Collected
Through this website, we may collect personal data voluntarily provided by users, particularly through the “Request a Quote” form.
The information collected may include:
first and last name;
e-mail address;
telephone number, where requested or provided by the user;
pick-up location;
destination;
travel date;
requested time;
number of passengers;
luggage information;
any additional information voluntarily provided by the user in the “Notes” field.
During navigation of the website, certain technical information relating to website use may also be collected, such as IP address, browser type, device used, operating system, and information relating to browsing activity and interaction with the website.
Such information may also be collected through cookies and similar technologies, as described in the relevant Cookie Policy.
3. Purposes of Processing
Personal data collected through the website may be processed for the following purposes:
a. receiving, managing and responding to requests for information and quotations;
b. assessing the user's travel requirements and preparing a personalised quotation;
c. contacting the user in relation to their request, by e-mail or telephone;
d. arranging and managing the transportation service if the quotation is accepted;
e. complying with applicable laws, regulations and legal obligations;
f. protecting the Data Controller's rights and preventing unlawful or fraudulent use of the website;
g. ensuring the security, proper operation and maintenance of the website;
h. carrying out statistical analysis of website usage and monitoring website performance through tools such as Google Analytics, exclusively in accordance with the user's preferences and subject to consent where required by applicable law.
Personal data will not be used for purposes incompatible with those described in this Privacy Policy.
4. Legal Basis for Processing
The processing of personal data necessary to receive and manage a quotation request is based on taking pre-contractual steps at the request of the data subject, pursuant to Article 6(1)(b) of the GDPR.
Where the user accepts a quotation and a contractual relationship is established, the processing of personal data necessary for the performance of the service is based on Article 6(1)(b) of the GDPR.
Processing necessary to comply with legal obligations is based on Article 6(1)(c) of the GDPR.
Processing necessary for the purposes of the legitimate interests pursued by the Data Controller, such as ensuring website security, preventing misuse and protecting the Data Controller's legal rights, may be carried out pursuant to Article 6(1)(f) of the GDPR, provided that such interests are not overridden by the rights and freedoms of the data subject.
The use of non-essential cookies and analytics tools, including Google Analytics where used, will be based on the user's consent where such consent is required by applicable law.
5. Data Provided Through the “Request a Quote” Form
In order to process a quotation request, users will be required to provide the information identified as necessary in the relevant form.
The following information:
pick-up location;
destination;
travel date;
requested time;
number of passengers;
is necessary to enable the Data Controller to assess the request and prepare a quotation for the requested service.
Luggage information and any additional notes may be provided by the user to allow for a more accurate assessment of the requirements associated with the journey.
Failure to provide the necessary information may prevent the Data Controller from properly processing the request or providing a quotation.
Users are requested not to enter unnecessary personal information or special categories of personal data as defined under Article 9 GDPR in the “Notes” field.
6. Processing Methods and Security
Personal data is processed using electronic and IT systems and, where necessary, paper-based systems, with appropriate technical and organisational measures implemented to ensure a level of security appropriate to the risk.
Processing is carried out in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality.
The website is created and hosted using the Squarespace platform.
Information submitted by users through forms available on the website may be collected and managed through the services provided by Squarespace and through any communication or storage tools connected by the Data Controller.
7. Disclosure and Recipients of Personal Data
Personal data may be processed by the Data Controller and by authorised persons.
For the purposes described in this Privacy Policy, personal data may also be disclosed, where necessary, to service providers involved in the management of the business and website, including:
Squarespace, as the provider of the website hosting and management platform;
e-mail service providers;
IT and technical service providers;
analytics and statistical service providers, where used;
consultants and professional advisers assisting the Data Controller in carrying out its business activities and complying with legal obligations.
Where required by applicable law, parties processing personal data on behalf of the Data Controller will be appointed as data processors pursuant to Article 28 GDPR.
Personal data will not be publicly disclosed.
8. Transfers of Personal Data Outside the European Economic Area
Some service providers used to manage the website may process personal data in countries located outside the European Economic Area (EEA).
Where international transfers of personal data take place, such transfers will be carried out in accordance with the GDPR and based on an appropriate transfer mechanism provided for by applicable law, such as an adequacy decision adopted by the European Commission or, where applicable, Standard Contractual Clauses.
For up-to-date information regarding processing activities carried out by Squarespace and related international data transfers, users are encouraged to consult Squarespace's privacy documentation.
9. Data Retention
Personal data collected through the quotation request form will be retained for as long as necessary to process the request and provide an appropriate response.
Where a contractual relationship is established following a quotation request, personal data will be retained for the period necessary to perform the contract and thereafter for the period required by applicable law, including for tax and accounting purposes and for the protection of the Data Controller's legal rights.
Requests that do not result in the conclusion of a contract will be retained for no longer than necessary to manage the request and protect the legitimate interests of the Data Controller, unless a longer retention period is required by law.
Data collected through analytics tools will be retained in accordance with the settings and retention periods applicable to the relevant services.
10. Cookies and Analytics Tools
This website uses cookies and similar technologies that are necessary for its proper operation.
The website may also use analytics cookies and analytics tools, including Google Analytics, to collect statistical information regarding website usage and users' browsing behaviour.
Non-essential cookies will be used in accordance with applicable legislation and, where required, only after obtaining the user's consent.
Users may manage their preferences through the cookie banner displayed on the website.
For further information regarding the cookies used on this website, their purposes, retention periods and how to manage cookie preferences, please refer to the Cookie Policy.
11. Data Subject Rights
Where provided for under applicable law, data subjects have the right to:
obtain confirmation as to whether or not their personal data is being processed;
obtain access to their personal data;
request the correction of inaccurate personal data or completion of incomplete data;
request the deletion of personal data in the circumstances provided for by law;
request restriction of processing in the circumstances provided for by law;
object to processing in the circumstances provided for by law;
obtain data portability, where applicable;
withdraw consent previously given, where processing is based on consent, without affecting the lawfulness of processing carried out before consent was withdrawn.
To exercise these rights, users may contact the Data Controller at:
Data subjects also have the right to lodge a complaint with the competent supervisory authority, in particular the Italian Data Protection Authority (Garante per la protezione dei dati personali), if they believe that their personal data has been processed in violation of applicable data protection legislation.
12. Changes to this Privacy Policy
The Data Controller reserves the right to amend or update this Privacy Policy, including as a result of changes in legislation, the introduction of new services or features, or changes to the tools used by the website.
The updated version of the Privacy Policy will be published on this page and will include the date of the latest update.
13. Contact
For any information regarding this Privacy Policy or the processing of personal data, please contact:
Northwaystravel
E-mail: info@northwaystravel.com
Telephone: +39 351 345 3003