Privacy Policy

Who we are (Data Controller)

This website, savoringexperiences.com, is an editorial showcase for Savoring Experiences, a brand offering private, curated experiences in the Dolomites (Italy) across food and gastronomy, wellness, crafts and heritage, and the outdoors. The website is informational; requests for a tailored itinerary are composed through our experience configurator, hosted on a separate subdomain at exp.savoringexperiences.com. That configurator is operated by the same data controller and is covered by this same Privacy Policy: how it handles your data is described in the dedicated section "The experience configurator" below.

The data controller responsible for the personal data described here is:

• Queeinlike Concierge S.r.l.
• Registered office: Largo Valtournanche, 13, Rome, Italy
• VAT (Partita IVA): IT17613391006

We have not appointed a Data Protection Officer (DPO). Privacy requests are handled directly by the controller using the contact details set out at the end of this policy.

What data we collect

We collect personal data only when you choose to write to us through the single contact form in the "Contact" section of the homepage. When you submit that form, we collect:

• First name
• Last name
• Phone number
• Email address
• The free-text message you write to us
• Your preferred contact method (Email, Phone or WhatsApp)
• Your explicit privacy-consent confirmation (the consent checkbox)

This website has no user accounts, no login, no e-commerce or checkout, no newsletter sign-up and no comments. We do not collect personal data beyond what you provide through the contact form, aside from any essential cookies strictly necessary to operate the site securely, as described in our separate Cookie Policy.

If you select "WhatsApp" as your preferred contact method, any follow-up conversation may then take place over WhatsApp (Meta Platforms), which is also governed by Meta's own privacy terms.

The experience configurator (exp.savoringexperiences.com)

Alongside the homepage contact form, we operate an experience configurator on a separate subdomain at exp.savoringexperiences.com. It is a step-by-step tool that lets you compose a tailored proposal for a stay in the Dolomites and send us a request. The configurator is run by the same data controller, Queeinlike Concierge S.r.l., and is governed by this Privacy Policy.

As you move through the configurator, you tell us about the trip you have in mind. This includes:

• The number of days you would like us to curate;
• The kinds of experience that inspire you (heritage, outdoor, gastronomy, wellness);
• Your preferred pace or intensity, from relaxed to full immersion;
• Who will be travelling — the type of party (couple, family, group or solo), the number of adults and children, and whether you are travelling with a pet (and, if so, whether it is a dog or a cat and its size);
• Your arrival and departure dates and your preferred category of chalet or accommodation;
• Your reference daily budget for experiences (per person) and your reference nightly budget for the chalet.

To send the request and let us reply, the final step asks for your contact details:

• First name
• Last name
• Email address
• Phone number
• An optional free-text message
• Your acceptance of the terms and conditions (a required checkbox)

The configurator also includes basic anti-spam measures (a simple arithmetic check and a hidden honeypot field). These are used only to prevent automated abuse; they are not used to identify or profile you.

When you submit a request through the configurator, the details you have entered are both emailed to us, so that our staff can read your request and get back to you, and stored in a database on a server hosted by Hetzner, an EU-based provider, located within the European Union. We use this data solely to prepare and send you a personalised proposal and to follow up with you about it; we do not use it for any unrelated purpose. The legal basis is your consent, given when you accept the terms and conditions before sending the request, together with our legitimate interest in preventing abuse of the tool.

We keep the requests submitted through the configurator, together with the personal data they contain, for a maximum of two years from the date of your request, after which they are deleted or anonymised. We may retain data for longer only where this is required to comply with a legal obligation or to establish, exercise or defend a legal claim.

How and why we use it (purposes and legal bases)

When you submit the contact form, your data is used to respond to your enquiry, to follow up with you, and to arrange the experiences you have asked about. We do not use this data for any unrelated purpose.

The form's submission backend is currently being finalised. In practical terms this does not change what happens to your data: when you submit the form, the information you provide is used to contact you and handle your request. We intend to deliver enquiries using an SMTP email provider (Aruba, an Italian/EU provider), which is intended to forward your enquiry to us and send a summary of it to you.

We rely on the following legal bases under Article 6 of the GDPR:

• Consent — Article 6(1)(a): for processing the personal data you submit through the contact form, on the basis of the consent checkbox you tick before sending.
• Legitimate interests — Article 6(1)(f): for the security and basic operation of the website and the prevention of abuse and misuse. We have assessed that these interests are not overridden by your rights and freedoms; you may object to this processing at any time, as explained under "Your rights".
• Legal obligation — Article 6(1)(c): where processing is required to comply with applicable law.

Providing your contact-form data is entirely voluntary, and you are under no obligation to provide it. However, the fields in the form are necessary for us to reply: without them we are unable to respond to your enquiry or arrange the experiences you are interested in.

Cookies

Cookie consent on this website is managed by Cookiebot (a Usercentrics product) in prior-blocking (auto-blocking) mode. This means that non-essential cookies and trackers are blocked until you give your consent through the Cookiebot banner.

The site uses self-hosted fonts (with no runtime requests to Google Fonts), locally optimised images, and currently no analytics or advertising trackers. Full and automatically updated details of the cookies used are kept in our separate Cookie Policy page, which we invite you to consult.

Who we share data with (recipients and processors)

Your enquiry is received and handled by the controller's own staff, who follow up with you. We do not sell your personal data. We share it only with carefully selected service providers acting on our behalf, and only to the extent necessary. These currently include, or are expected to include:

• Cookiebot / Usercentrics — for cookie consent management on the website.
• Hetzner — our hosting provider, operating servers within the EU, on a self-managed deployment; it also hosts the database in which requests sent through the experience configurator are stored.
• Aruba (email provider) — for handling and delivering enquiries by email.
• Meta Platforms (WhatsApp) — only if you choose WhatsApp as your preferred contact method, in which case communication via WhatsApp is also subject to Meta's privacy terms.

We may also disclose personal data where we are legally required to do so by a competent authority.

International transfers

We process your personal data within the European Union / European Economic Area wherever possible. Where a service provider may transfer data outside the EEA — for example Meta / WhatsApp, if you choose WhatsApp as your contact method — we ensure that appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses, to protect your data to the standard required by the GDPR.

How long we keep it (retention)

We keep the personal data you submit through the contact form only for as long as necessary to handle your enquiry and to follow up with you, plus a reasonable period afterwards. We may retain it for longer where this is required to comply with legal obligations or to establish, exercise or defend legal claims. When data is no longer needed for these purposes, it is deleted or anonymised.

Requests submitted through the experience configurator at exp.savoringexperiences.com — both the email we receive and the copy stored in our database hosted by Hetzner — are kept for a maximum of two years from the date of the request, after which they are deleted or anonymised, subject to the same legal exceptions set out above.

Your rights

Under the GDPR (Articles 15 to 22), and subject to the conditions set out in the law, you have the right to:

• Access — obtain confirmation of whether we process your data and a copy of it;
• Rectification — have inaccurate or incomplete data corrected;
• Erasure — ask us to delete your data in the circumstances foreseen by law;
• Restriction — ask us to limit how we process your data;
• Portability — receive the data you provided in a structured, commonly used, machine-readable format;
• Objection — object to processing carried out on the basis of our legitimate interests;
• Withdraw consent — withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

You can withdraw your consent or exercise any of these rights at any time by contacting us through the contact form on this website or by writing to our registered office, as set out below.

How to exercise your rights and complaints

To exercise any of these rights, please contact us using the contact form on this website or by writing to our registered office (details below). We will respond within the timeframes required by law.

If you believe that our processing of your personal data infringes data protection law, you also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (Garante Privacy), based in Rome.

Automated decision-making

We do not carry out any automated decision-making or profiling that produces legal or similarly significant effects within the meaning of Article 22 of the GDPR.

Children

This website and our services are intended for adults and are not directed at children. In Italy, the age at which a child can validly consent to the processing of personal data in relation to information society services is 14. Minors below the applicable age should not submit personal data through this website. We do not knowingly collect personal data from children below that age; if we become aware that we have done so, we will delete it.

Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage, taking into account the nature of the data and the risks involved.

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. The version in force is the one published on this page, identified by the effective date shown at the top. We encourage you to review it periodically.

Contact

For any question about this policy or about how we handle your personal data, or to exercise your rights, you can reach us through:

• The contact form on this website;
• Certified email (PEC): queenlikeconcierge@pec.it;
• Postal mail to: Queeinlike Concierge S.r.l., Largo Valtournanche, 13, Rome, Italy.