Privacy Policy
Ultimo aggiornamento:
Last updated: 27 October 2026.
This notice explains which personal data we process when you visit naplesexperiences.com, why we do it and what your rights are, under Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
Data controller
Experiences Srl
Registered office: Napoli
VAT number: 08944071219
Email: naplesexperiences@gmail.com
Website: https://naplesexperiences.com/
What we process and why
1. Contact form and audit requests
Name, email, type of business, the plan you are interested in and your message. We use them to answer your request and, if you become a client, to prepare our offer. Legal basis: pre-contractual steps taken at your request (art. 6.1.b GDPR). We only send you marketing emails if you explicitly ask for them (art. 6.1.a GDPR).
2. Booking a call
The “Book a call” button opens an external calendar service (Cal.com or Calendly). The data you enter there (name, email, chosen time) is received by that service and by us, only to set up the appointment. Legal basis: art. 6.1.b GDPR.
3. Website chatbot
The messages you type into the chatbot are sent to the provider of the artificial intelligence model (Google Gemini) to generate the reply. We do not store conversations on our servers. To prevent abuse we keep, for 10 minutes, a message counter linked to your IP address in hashed form, which is then deleted. Please do not enter sensitive data or payment details in the chatbot. Legal basis: art. 6.1.b GDPR to answer your questions; our legitimate interest in keeping the service secure (art. 6.1.f GDPR) for the counter.
4. Video assistant (LiveAvatar)
The video assistant on the home page loads only when you press its start button. From then on you are connected to LiveAvatar (a HeyGen service), which receives your IP address and, if you grant browser permission, your microphone audio so it can understand your questions. The service may use its own cookies or identifiers. Legal basis: your consent, given by starting the assistant (art. 6.1.a GDPR); you can end the session at any time.
5. WhatsApp
The WhatsApp buttons open a chat with our number. Messages go through WhatsApp (Meta group) under its own terms; we receive your number, profile name and messages and use them only to reply. Legal basis: art. 6.1.b GDPR.
6. Visit statistics
With your consent we use Google Analytics 4 (Google Ireland Ltd / Google LLC) to learn, in aggregate form, how many people visit our pages and where they come from. Without consent Google Analytics stores no cookies (Google Consent Mode). Details are in the Cookie Policy. Legal basis: consent (art. 6.1.a GDPR), which you can withdraw at any time.
7. Technical browsing data
Like any website, our hosting provider’s servers (Experiences srl) log IP address, browser, requested page and time, for security and to keep the site running. To display text the site loads fonts from Google Fonts and authors’ profile pictures from Gravatar (Automattic Inc.): your browser shares its IP address with these services. Legal basis: our legitimate interest in running a working, secure website (art. 6.1.f GDPR).
How long we keep data
| Data | Retention |
|---|---|
| Contact form requests, emails and WhatsApp messages | 24 months from the last contact, unless a contract is in place |
| Client data (contracts, invoices) | 10 years, for Italian tax obligations (art. 2220 Civil Code) |
| Chatbot anti-abuse counter | 10 minutes |
| Server technical logs | as set by the hosting provider, normally no longer than 6 months |
| Google Analytics statistics | 14 months |
Who receives the data
We never sell or hand over your data. Only the providers we need to run the service process it on our behalf, as data processors:
- Experiences srl — website hosting
- Google — email (Gmail), statistics (Google Analytics), fonts (Google Fonts)
- Google Gemini — the chatbot’s artificial intelligence model
- LiveAvatar / HeyGen — video assistant, only if you start it
- Cal.com or Calendly — call bookings
- WhatsApp (Meta) — only if you message us on WhatsApp
- Our accountant, advisers and the authorities — only where the law requires it
Transfers outside the European Union
Some of these providers are based in, or have servers in, the United States. Transfers rely on the EU-US Data Privacy Framework for certified providers, or on the Standard Contractual Clauses approved by the European Commission (art. 46 GDPR).
Your rights
By writing to naplesexperiences@gmail.com you can at any time ask:
- for access to your data (art. 15 GDPR) and its rectification (art. 16);
- for erasure (art. 17) or restriction of processing (art. 18);
- for portability of the data you gave us (art. 20);
- to object to processing based on legitimate interest (art. 21);
- to withdraw your consent, without affecting processing already carried out (art. 7.3).
We reply within 30 days. If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority (Garante) or with the authority of the EU country where you live.
Required data and minors
Required fields in our forms are marked: without that data we cannot reply. The site is aimed at businesses and professionals and is not intended for children under 14.
Changes
If we change how we process data we will update this page and the date at the top.