This Privacy Policy explains how KM Tourism ("KM Tourism Italy", "we", "us" or "our") collects, uses, and protects the personal data you share with us when you visit kmtourismitaly.com, submit an enquiry, subscribe to our newsletter, or contact us to plan a private journey. We are committed to handling your information transparently and in full compliance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR") and applicable Italian data protection law. By using our website and services, you acknowledge the practices described below.
KM Tourism is a licensed tourism company with approximately twenty years of experience creating luxury, five-star travel. Originally operating across the seven Emirates of the UAE and licensed and authorised by the Dubai Department of Economy and Tourism (DET), we now design tailor-made private journeys in Italy and across Europe.
The data controller responsible for your personal data is KM Tourism di K.M., Codice Fiscale KHLMMM90C01Z236Z, with registered office in Milan, Italy. Our operating licence is Dubai commercial trade licence No. 883945, issued by the Dubai Department of Economy and Tourism (DET). You can reach us at any time regarding this policy or your personal data at info@kmtourismitaly.com or by phone / WhatsApp on +39 02 8078 1331.
We collect only the information we need to respond to you and to plan your journey. Through our enquiry form we collect your name, email address, preferred travel dates, the size of your party, and any free-text description of the trip you have in mind. If you subscribe to our newsletter, we collect your name and email address for that purpose.
When you send an enquiry through our form, the details you provide reach our team by email so that we can reply to you promptly and personally. If you subsequently choose to continue the conversation by email, phone, or WhatsApp, we will also process the content of those communications. We do not operate any account system, we do not process payments on this website, and we do not knowingly collect any special categories of data (such as health or dietary information) unless you voluntarily share them to help us tailor your trip.
We process your personal data on the following legal bases under Article 6 of the GDPR. When you submit an enquiry, we process your data because it is necessary to take steps at your request prior to entering into a contract (Article 6(1)(b)) — that is, to prepare a quote and plan your journey. Where you continue the conversation and engage our services, processing is necessary for the performance of that contract.
When you subscribe to our newsletter, we process your data on the basis of your consent (Article 6(1)(a)), which you may withdraw at any time by unsubscribing or by contacting us. We may also rely on our legitimate interests (Article 6(1)(f)) to respond to general enquiries, to keep records of our correspondence, and to maintain the security and proper functioning of our website — always balanced against your rights and freedoms.
To deliver our website and communicate with you, we rely on a small number of trusted third-party service providers. Enquiries sent through our form reach our team by email, delivered through our email provider (Zoho), and the website is hosted by Vercel. If you choose to message us on WhatsApp, that conversation is handled by Meta Platforms, Inc. under its own privacy policy. Our website embeds Google Maps and Street View, services provided by Google; when you choose to open them, Google may receive technical data such as your IP address.
Some of these providers are based outside the European Economic Area, including in the United States. Where personal data is transferred internationally, such transfers are safeguarded by the mechanisms these providers put in place, such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision. We do not sell your personal data. We share data with an advertising provider only through the Meta Pixel, on the terms described in section 5.
We keep this to a minimum. Without asking for consent, the site stores two small items in your browser: your cookie choice, and, if you arrive from one of our ads, the ad's campaign details. The campaign details stay in that browser tab until you close it and reach us only if you send an enquiry, so that we know which ad you came from. We count visits with Vercel Web Analytics and Speed Insights, which do not set cookies.
We also use the Meta Pixel from Meta Platforms, Inc. It sets the cookies _fbp and _fbc on our site and tells Meta which pages you view and when you click WhatsApp or send an enquiry, together with your IP address and browser details. We use it to measure our Facebook and Instagram ads, and Meta may also use it to show you ads. Outside the United States it is switched on only if you press Accept; if you press Reject, or do not choose, it stays off. In the United States it is on by default until you opt out, using the “Do Not Sell or Share My Personal Information” link at the bottom of every page or the button in the cookie notice. We treat the Global Privacy Control signal from your browser as an opt-out. Separately, Google Street View sets Google's own cookies when you choose to open it, whatever you chose above.
Where the Pixel needs your consent, that is its legal basis, and you can withdraw it at any time with the “Cookie settings” link at the bottom of every page, or by writing to us at info@kmtourismitaly.com. Meta and Google may process data outside the European Economic Area, including in the United States, as described in section 4.
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Enquiry details are kept for the time needed to respond to you and to plan and deliver your journey, and thereafter for a reasonable period to manage any follow-up, administrative, or legal obligations. Newsletter data is kept until you unsubscribe or withdraw your consent.
When your data is no longer required, we will securely delete or anonymise it, unless a longer retention period is required by law (for example, tax or accounting obligations).
As a data subject, you have the right to access the personal data we hold about you; to request the rectification of inaccurate or incomplete data; to request the erasure of your data ("the right to be forgotten"); to restrict or object to its processing; and to receive the data you have provided in a structured, commonly used, machine-readable format and have it transferred to another controller (data portability). Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a supervisory authority. In Italy, this is the Garante per la Protezione dei Dati Personali (www.garante.it). We would, however, appreciate the opportunity to address your concerns directly before you approach the authority.
To exercise any of your rights, ask a question about this policy, or raise a concern about how we handle your personal data, please contact us by email at info@kmtourismitaly.com or by phone / WhatsApp on +39 02 8078 1331. We will respond to any legitimate request without undue delay and, in any event, within the time limits set by the GDPR.
This policy may be updated from time to time to reflect changes in our practices or in applicable law. The date at the top of this page indicates when it was last revised.