Privacy Notice

1. Introduction

Vincenzo Modica (website operator) processes personal data in compliance with the GDPR and applicable national laws. This page explains what we process, why, for how long, and how you can exercise your rights.

Data Controller

Controller: Vincenzo Modica. For any data-protection request, use the contact form on this website. If required by law, requests may be forwarded to the relevant service provider acting as independent controller.

2. Bookings, Payments and Liability

Vincenzo Modica provides guided excursions as a certified volcanological guide. Tours can be booked and paid for directly on this website; the booking contract is concluded with Vincenzo Modica. Some ancillary services (for example cable car and 4x4 shuttle tickets) are provided by third-party operators and paid on site.

  • •Booking data (name, email, phone, tour, date, participants, amount paid) is processed to manage your booking, send the confirmation and reminder emails, and handle date changes or cancellations.
  • •Card payments are processed entirely by SumUp on its own secure payment pages: your card details are entered on SumUp's website and never reach or pass through this website. SumUp acts as an independent data controller under its own privacy policy.
  • •Booking data is kept only for as long as needed to manage the booking and to comply with legal and tax obligations.

3. Data We Collect

  • •Identification and contact data you submit (for example: name, email, phone, message content).
  • •Booking-request context data (tour, date, participants, language, special requirements).
  • •Technical and usage data (IP, browser/device data, pages visited, consent status).

4. How We Use Data

  • •Respond to inquiries and pre-contractual requests (Art. 6(1)(b) GDPR).
  • •Comply with legal obligations, security, and fraud-prevention duties (Art. 6(1)(c)/(f) GDPR).
  • •Measure anonymous or consented analytics to improve website quality (Art. 6(1)(a)/(f) GDPR).
  • •Defend legal claims and maintain service continuity where necessary (Art. 6(1)(f) GDPR).

5. Third-Party Services

Data can be processed by hosting, email, analytics, and booking partners acting as processors or independent controllers. Personal data is retained only for the time necessary for the declared purposes (for example inquiries and support), then deleted or anonymized unless longer retention is required by law.

6. Your Rights (GDPR)

  • •Access, correction, or deletion of your personal data.
  • •Restriction or objection to processing.
  • •Data portability where applicable.
  • •Withdraw consent at any time (without affecting prior lawful processing).
  • •Lodge a complaint with your local Data Protection Authority.

7. Cookies

For cookie details, see our Cookie Notice.

8. Contact

For privacy requests, contact us via the Contact page.