Privacy Policy – Information on the Processing of Personal Data

This Privacy Policy describes the methods of processing personal data provided by users through the website www.rootsofwonder.tours or other online channels managed by Best Vasto Srls. The purpose of this policy is to ensure maximum transparency regarding data processing.

Data Controller
The data controller is Best Vasto Srls, with registered office at Corso Garibaldi 135, 66054 Vasto (CH), Italy. It can be contacted by email at: info@rootsofwonder.tours

To proceed with the submission of your personal data, it is necessary to read and accept this policy. If you do not provide consent, we will not be able to process the requested services. Your data will be transmitted only after your consent to the processing. In accordance with Article 13 of Legislative Decree 196/2003 (Code regarding the protection of personal data), the data collected directly from data subjects, through requests for information or promotional activities on social channels, are processed in compliance with current security regulations. Any responsibility arising from the provision of false or untrue information lies solely with the data subject.

Data Collected and Purpose of Processing
The personal data we collect are used to respond to your contact request. Providing this data is voluntary; however, if you refuse, it will not be possible to manage the contact. The data collected will be used exclusively for the requested service.

Furthermore, the personal data provided may be used to send advertising, promotional, or informational material regarding our products and services, or those of other businesses related to Best Vasto Srls.

The data collected include:

• Full name

• Phone number

• Email address

• Date of birth

These data are not used for user identification or profiling.

Processing Methods
Data processing will be carried out to ensure confidentiality and security. We may use manual, IT, and telematic tools to store, manage, and transmit data according to the described purposes.

Communication of Data
The personal data provided will not be communicated outside the personnel appointed by Best Vasto Srls and will not be disclosed publicly.

Transfer of Data Abroad
Some of the collected data may be shared with services located outside the European Union, such as Google Analytics, Facebook, and Instagram, through social buttons and widgets integrated into the site. This transfer is allowed under EU Decision 1250/2016, which states that further consent is not necessary. The mentioned companies adhere to the Privacy Shield.

Duration of Processing
Data will be retained as long as necessary to provide the requested services and to comply with legal obligations. Additionally, data may be kept for a subsequent period to allow for potential legal defenses.

Rights of Data Subjects
In accordance with EU Regulation 679/2016 (GDPR), users have the following rights:

a) Right of access
The data subject has the right to obtain:

• Confirmation of the existence of personal data concerning them.

• Information on the purposes and methods of processing.

• Details of the logic applied in case of electronic processing.

• The identity of the data controller, processors, and representative in Italy, if appointed.

• The entities or categories of entities to whom data may be communicated.

b) Right to rectification, deletion, and opposition
The data subject has the right to request:

• Updating, correction, or integration of the data.

• Deletion, anonymization, or blocking of illegally processed data.

• Certification that the above operations have been notified, including their details, to the data recipients, unless this proves impossible or involves disproportionate effort.

c) Opposition to processing
The data subject may object, in whole or in part, to the processing of their data for legitimate reasons, even if relevant to the purpose of collection, or to processing for direct marketing purposes, market research, or commercial communications.

d) Lodging a complaint
The data subject has the right to lodge a complaint with the Data Protection Authority.

Section – Mobile App “Alice TourGuide” (Android/iOS)

This section applies to the mobile app “Alice TourGuide” (package: com.alice.tourguide).

Location Data
Our app Alice TourGuide uses device location data to provide tour-related features:

• Purpose: to show Points of Interest (POIs) on the map, calculate distances, and send proximity notifications (geofencing) when the user approaches a POI, even with the screen off or app closed. From the notification, the user can open the POI details and directions.

• Data type: precise and/or approximate location; access in the foreground and, if enabled by the user, also in the background for proximity notifications.

• Legal basis / purpose: performance of the service requested by the user (use of the tour and proximity alerts). We do not use location data for advertising or profiling.

• Processing method: location data is processed locally on the device to determine proximity to POIs. We do not store location history on our servers nor do we sell or share these data with third parties for commercial purposes.

• Third-party providers/SDKs: the app integrates Google Maps SDK for Android / Apple Maps on iOS and system modules (e.g., location services/notifications). Use of these services may involve processing of technical data (e.g., IP address) according to their respective privacy policies (Google/Apple).

• Voluntariness and user control: location access is optional and occurs only after explicit consent via the system prompt. Users can:

  • revoke permissions anytime via System Settings → Apps → Permissions → Location;

  • disable geofencing within the app (settings section) to stop background access.

• Retention: location data are not stored on our servers. Some preferences (e.g., selected tour) may be saved locally on the device to improve the experience.

• Security: we adopt appropriate technical and organizational measures to protect data processed by the app.

To exercise the rights indicated above, you may send a request to the email address info@rootsofwonder.tours. In case of data deletion, the process will be completed within 5 working days.

Privacy Policy Updates
This privacy policy is updated as of September 4, 2025.