Privacy policy

Last updated: [TO COMPLETE: date]

This notice explains how the personal data of visitors to afortia.com is processed, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR) and the UK GDPR.

Data controller

Afortia – [TO COMPLETE: controller's full name or company name], [TO COMPLETE: address], [TO COMPLETE: tax code / VAT number]. Email: info@afortia.com.

What data we process

  • Browsing data: IP address, date and time of the request, page visited, browser and operating system. It is logged automatically by our hosting provider to run and secure the site.
  • Data you send us: if you write to info@afortia.com, we process your email address and the content of your message.
  • Cookies: see the cookie policy.

The site has no sign-up forms and does not collect payment data.

Purposes and legal bases

  • Running the site and protecting it from abuse: legitimate interest (Art. 6(1)(f) GDPR).
  • Replying to your messages: your request (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
  • Travelpayouts affiliate tools: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Who we share data with

  • Vercel Inc. (website hosting), as data processor.
  • Travelpayouts ([TO COMPLETE: company name and registered office, from the Travelpayouts website]), only if you accept cookies. See its privacy policy.
  • [TO COMPLETE: email provider for info@afortia.com], to handle our mail.

We do not sell or publish your data.

Transfers outside the EU/UK

Some providers may process data outside the European Economic Area and the UK (for example in the United States). In these cases transfers rely on an adequacy decision (EU-U.S. Data Privacy Framework and UK Extension) or on standard contractual clauses. [TO COMPLETE: check the transfer basis stated by each provider]

How long we keep data

  • Browsing data: for the hosting provider's log retention period [TO COMPLETE: period].
  • Emails: as long as needed to handle your request, then [TO COMPLETE: retention period].
  • Cookies: see the cookie policy.

Your rights

You can ask for access, rectification, erasure, restriction and portability of your data, object to processing (Articles 15–22 GDPR) and withdraw consent at any time by writing to info@afortia.com. You also have the right to lodge a complaint with a supervisory authority: in Italy the Garante per la protezione dei dati personali, in the UK the Information Commissioner's Office (ICO).

Changes

We will update this notice when the site changes (for example when new services are added). The date at the top shows the latest version.