GDPR · Italian Privacy Code (D.Lgs. 196/2003)
Pursuant to Art. 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code (D.Lgs. 196/2003, as amended by D.Lgs. 101/2018), Escapees S.r.l. hereby informs users of how personal data is collected, processed and protected through the website www.escapees.community.
1. Data Controller
The Data Controller for personal data collected through this website is:
| Company | Escapees S.r.l. |
| Address | Corso Italia, 22 — 20122 Milano (MI), Italy |
| VAT / P.IVA | 11332820965 |
| Privacy contact | info@escapees.it |
2. Hosting & Data Processors
This website is built on WordPress (self-hosted) and is hosted in Europe by GoDaddy integrated Services, GoDaddy.com, LLC 100 S Mill Ave, Suite 1600 Tempe, Arizona 85281, United States
The hosting provider processes personal data (including server logs and uploaded content) on our behalf as a Data Processor, under a valid Data Processing Agreement (Art. 28 GDPR).
GoDaddy’s Managed WordPress infrastructure runs in Europe. Where data is stored on servers located outside the European Economic Area (EEA), transfers are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission under Art. 46(2)(c) GDPR.
3. What Personal Data We Collect
3.1 Data Collected Automatically
When you visit this website, our web server automatically records the following technical data:
- IP address of the requesting device
- Date, time and duration of the visit
- Pages accessed and files downloaded
- Browser type and version, operating system
- Referring URL (the page you visited before arriving here)
This data is processed for website security and performance monitoring according Art. 6(1)(f) GDPR — legitimate interest.
3.2 Data You Provide Voluntarily
When you contact us via the contact form on this website, we collect the information you submit, which typically includes your name, email address and the content of your message. This data is used solely to respond to your enquiry according to Art. 6(1)(f) GDPR — legitimate interest, or Art. 6(1)(a) GDPR — consent where explicitly given.
3.3 Membership Data
If you apply for or hold membership in the Escapees Community, we process personal data necessary for the administration of that membership, including your name, nationality, contact details, and where provided, a biographical description and photograph.
4. Purposes of Processing
We process personal data for the following purposes only:
- Responding to enquiries submitted via the contact form
- Administering membership of the Escapees Community
- Operating, maintaining and improving this website
- Ensuring the security and integrity of the website
- Complying with applicable legal and fiscal obligations under Italian and EU law
We do not use personal data for automated decision-making or profiling within the meaning of Art. 22 GDPR.
5. Data Sharing
Escapees S.r.l. does not sell personal data to third parties. Personal data may be shared only in the following circumstances:
- Hosting and infrastructure providers (GoDaddy / AWS) — acting as data processors under a signed Data Processing Agreement
- IT and web maintenance providers — under confidentiality obligations and only to the extent necessary for technical support
- Legal and accounting advisors — only where required to comply with legal or regulatory obligations
- Public authorities — where required by applicable Italian or EU law
6. International Data Transfers
Some of the third-party services used on this website may transfer personal data to countries outside the European Economic Area (EEA), in particular to the United States. Where such transfers occur, they are carried out on the basis of:
- Standard Contractual Clauses (SCCs) adopted by the European Commission under Art. 46(2)(c) GDPR, or
- An adequacy decision by the European Commission, where applicable
Third-party services that may involve international transfers include the hosting infrastructure (and, where applicable, embedded content or analytics tools (see Section 9 — Cookies).
7. Your Rights
You always have the right to request information about your stored data, its origin, its recipients, and the purpose of its collection at no charge. You also have the right to request that it be corrected, blocked, or deleted. You can contact us at any time using the address given in the legal notice if you have further questions about the issue of privacy and data protection. You may also, of course, file a complaint with the competent regulatory authorities.
8. Cookies
This website uses a number of strictly necessary cookies that are essential for it to function correctly and do not require your consent. WordPress sets several cookies for authentication and session management purposes: the wordpress_* cookies handle login sessions and ensure secure access, while wordpress_logged_in_* identifies users who are currently logged in and is only active during an authenticated session. The wp-settings-* cookie stores individual interface preferences for the WordPress administration panel. If comment functionality is enabled on the site, the comment_author_* cookie remembers a visitor’s name and email address to pre-fill comment forms on future visits. Finally, the PHPSESSID cookie is a standard session identifier set by the PHP server environment and is required for normal server-side operations.
Two third-party tools used on this website may set functional cookies that require your prior consent. The homepage image slider is powered by Slider Revolution, a plugin developed by ThemePunch, which may load additional assets from external content delivery network (CDN) servers. Similarly, image carousels across the site are powered by WP Carousel Pro, developed by WP Carousel, which may also load assets from external CDN servers. These cookies are only activated once you have given your consent.
Several third-party services used on this website may result in data being transmitted to external servers, including servers located outside the European Economic Area. Where Google Fonts are loaded remotely from Google’s servers, your IP address is transmitted to Google LLC (USA) on each page load. We are working to serve all fonts locally in order to eliminate this transfer entirely. Google’s privacy policy can be found at policies.google.com/privacy.
9. Security
Escapees S.r.l. takes appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. All data transmitted to and from this website is encrypted using TLS (Transport Layer Security / HTTPS).
Please be aware that no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable law. Where changes are material, we will post a prominent notice on this website. The date of the most recent revision is shown at the bottom of this page. We encourage you to review this policy periodically.