Privacy Policy

Last updated: 12 August 2026

This Privacy Policy explains how NextStop-Italy collects, uses, stores and protects personal data when you visit nextstop-italy.com, contact us, register for or participate in our virtual tours, request a private virtual experience, subscribe to our communications, make a contribution or payment, or otherwise interact with our services.

This Privacy Policy is provided in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection legislation.

Information relating specifically to cookies and similar tracking technologies is provided separately in our Cookie Policy.

1. Data Controller

The Data Controller is:

NextStop-Italy di Roberta Galasso
VAT No.: IT12943160015
REA: TO-1327629
Email: info@nextstop-italy.com

For any question concerning this Privacy Policy or the processing of your personal data, or to exercise your data protection rights, you can contact us at the email address above.

2. Personal Data We Process

Depending on how you interact with NextStop-Italy, we may process the following categories of personal data.

Contact and identification data

This may include:

  • first and last name;
  • email address;
  • information you provide when contacting us;
  • any other information voluntarily included in a message or request.

Virtual tour registration and participation data

When you register for or participate in one of our virtual tours, we may process:

  • first and last name;
  • email address;
  • tour or event for which you registered;
  • date and time of registration;
  • registration and cancellation status;
  • information necessary to send you access links, reminders, follow-up communications and, where applicable, access to a recording.

Our virtual tours are hosted using Zoom.

Participants’ cameras are disabled during our public virtual tours.

Private virtual tour enquiries

If you request information about a private virtual experience, we may collect:

  • name;
  • email address;
  • proposed date;
  • time zone;
  • estimated number of participants;
  • organisation or group information, where provided;
  • the content of your enquiry;
  • any additional information necessary to prepare and manage the requested service.

Payment and contribution information

Payments and voluntary contributions may be processed through third-party payment providers such as Stripe and PayPal.

NextStop-Italy does not receive or store complete credit or debit card numbers.

We may, however, receive and retain information relating to a transaction, such as:

  • payer name;
  • payer email address;
  • transaction identifier;
  • date and time of the transaction;
  • amount and currency;
  • payment status;
  • information necessary for accounting, tax, fraud-prevention and customer-support purposes.

Stripe and PayPal may process additional payment and identification information in accordance with their own privacy notices and applicable legal obligations.

Newsletter and communication data

When you register for one of our virtual tours or webinars, your email address is automatically added to our email communication system so that we can provide the service you requested and send communications directly connected with your registration.

These communications may include:

  • registration confirmations;
  • reminders and access information;
  • changes or cancellations relating to the virtual tour;
  • follow-up communications;
  • the link to the recording or replay of the virtual tour, where available;

For these purposes, we may process:

  • first and last name, where provided;
  • email address;
  • virtual tours or webinars for which you registered;
  • unsubscribe information;
  • technical information relating to the delivery of our emails.

Because the follow-up email containing the recording or replay link is part of the virtual-tour service, users who register for a webinar are automatically included in the mailing system used to send these service communications.

You may unsubscribe from our email communications at any time by clicking the unsubscribe link provided in the footer of our emails or by contacting us at info@nextstop-italy.com.

Please note that, if you unsubscribe, we will no longer be able to send you emails through this mailing system. As a result, you may not receive follow-up emails containing the recording for virtual tours for which you have registered.

Unsubscribing does not affect the lawfulness of communications or processing carried out before the unsubscribe request.

Technical and security data

When you use our website or online services, certain technical data may be processed for operation and security purposes, including:

  • IP address;
  • browser and device information;
  • server logs;
  • date and time of requests;
  • requested pages or resources;
  • information relating to errors, security events and attempted misuse.

For information about cookies, analytics technologies and similar tracking tools, please refer to our separate Cookie Policy.

3. Purposes and Legal Bases of Processing

We process personal data only where a valid legal basis under the GDPR applies.

Providing virtual tours and related services

We process registration details and other information necessary to:

  • register users for a virtual tour;
  • send participation links and reminders;
  • provide access to live sessions;
  • manage cancellations;
  • provide follow-up information;
  • provide access to a recording where applicable;
  • answer questions relating to the service.

Legal basis: performance of a contract or taking steps at the user’s request prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.

Managing private virtual experiences and enquiries

We process information submitted through private-tour enquiries or direct communications in order to respond, prepare quotations, organise events and provide the requested service.

Legal basis: Article 6(1)(b) GDPR where the request relates to a potential or existing contractual relationship; otherwise Article 6(1)(f) GDPR, based on our legitimate interest in responding to enquiries addressed to us.

Service and operational communications

We may send communications that are necessary for a service for which you have registered, including:

  • registration confirmations;
  • access links;
  • reminders;
  • schedule changes;
  • cancellations;
  • technical notices;
  • recording or replay information;
  • messages necessary to administer the service.

These communications are not treated as promotional newsletters when they are necessary to provide or administer the service requested by the user.

Legal basis: performance of a contract or taking steps at the user’s request prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.

Newsletter and promotional communications

We may send newsletters, announcements of new virtual tours and other promotional communications where you have voluntarily consented to receive them.

Legal basis: your consent pursuant to Article 6(1)(a) GDPR and applicable rules governing electronic marketing communications.

Consent is voluntary and may be withdrawn at any time by clicking the unsubscribe link provided in the footer of our emails or by contacting us at info@nextstop-italy.com, without affecting the lawfulness of processing carried out before withdrawal.

Withdrawal of consent to promotional communications does not affect the processing of personal data that is necessary to provide a live virtual tour.

Payments, contributions and accounting

We process transaction information in order to:

  • receive and reconcile payments and contributions;
  • respond to payment-related enquiries;
  • maintain accounting and tax records;
  • comply with applicable financial, accounting and legal obligations;
  • prevent and investigate fraudulent or abusive transactions.

Legal bases: Article 6(1)(b) GDPR where processing is necessary in connection with a transaction or service; Article 6(1)(c) GDPR for compliance with legal obligations; and, where applicable, Article 6(1)(f) GDPR for our legitimate interest in preventing fraud and protecting our services.

Managing participation and protecting the sustainability of our virtual-tour service

NextStop-Italy may maintain records relating to registrations for virtual tours, cancellations, access to recordings and contributions received.

These records may be compared in order to:

  • administer participation in our virtual-tour programme;
  • prevent misuse of registration systems;
  • investigate repeated registrations made without use of the service;
  • apply our participation rules;
  • determine whether temporary participation limitations or account restrictions are appropriate;
  • respond to users who ask about a restriction.

Legal basis: Article 6(1)(f) GDPR, based on NextStop-Italy’s legitimate interest in managing its services fairly, preventing abuse and maintaining the economic sustainability of the virtual-tour programme.

Where a restriction is applied, users may contact us at info@nextstop-italy.com to request information or review.

NextStop-Italy does not intend to make decisions based solely on automated processing that produce legal effects or similarly significantly affect users within the meaning of Article 22 GDPR.

4. Recordings of Virtual Tours

All NextStop-Italy virtual tours are recorded so that participants can watch the event after the live session and, where applicable, so that the recording can also be made available through our on-demand services.

After each virtual tour, registered participants who have not unsubscribed from our email communication system will receive a follow-up email containing the recording or replay link

Our virtual tours are configured to protect participants’ privacy. Participants’ cameras and microphones are always disabled and cannot be activated by participants during the session. The group chat function is also disabled. Participants can therefore communicate only directly with NextStop-Italy and/or the tour host through the communication tools made available during the webinar.

Because participant cameras, microphones and group chat are disabled, participants are not ordinarily visible or audible in the recording of the virtual tour.

Any questions or messages voluntarily submitted directly to NextStop-Italy during the webinar are handled for the purpose of managing the live event and responding to participants. Users should nevertheless avoid including unnecessary personal, confidential or sensitive information in their communications.

Recordings may be edited before being distributed or made available and may subsequently be included in our on-demand virtual tour library.

The processing of personal data necessary to organise, record and deliver the virtual tour and to provide registered participants with access to the recording is based on Article 6(1)(b) GDPR, as it is necessary for the performance of the service requested by the user.

Users who unsubscribe from our email communications may no longer receive follow-up emails containing virtual tour recordings or replay links.

5. Email and Newsletter Provider

We may use Brevo, formerly Sendinblue, to manage newsletters and other email communications.

For this purpose, relevant contact details and communication information may be processed through Brevo’s systems.

Brevo may act as a data processor on our behalf for services it provides to NextStop-Italy. Brevo’s own privacy and data-protection terms apply to processing for which it acts independently.

6. Video Conferencing – Zoom

We use Zoom to host virtual tours, webinars and private virtual experiences.

When you register for or participate in an event hosted through Zoom, information such as your name, email address, registration details, participant information and technical information may be processed through Zoom’s systems.

Zoom may process personal data on behalf of NextStop-Italy for certain services and may act independently in relation to certain processing carried out for its own purposes, as described in Zoom’s privacy documentation.

Users should consult Zoom’s Privacy Statement for further information about Zoom’s own processing activities.

7. Hosting and Technical Service Providers

Our website is hosted using Hostinger.

Hosting and technical service providers may process information such as server logs, IP addresses and other technical data where necessary to host, maintain, secure and deliver the website.

We may also use specialised WordPress, security, backup, email-delivery or technical-service providers when necessary to operate and protect the website.

Such providers are given access only to the data reasonably necessary to perform their services and, where required by law, are appointed as processors pursuant to Article 28 GDPR.

8. Payment Providers

We currently use third-party payment providers including Stripe and PayPal.

Payment providers process payment information under their own security and privacy procedures and may act as independent data controllers for processing required for payment execution, fraud prevention, regulatory compliance and their own legal obligations.

NextStop-Italy does not store complete payment-card details.

Users are encouraged to consult the privacy notices of the relevant payment provider before submitting payment information.

9. Affiliate Links and External Booking Services

NextStop-Italy participates in commercial affiliate programmes and may publish links to third-party travel, accommodation, experience, transportation, retail or booking services.

When you click an affiliate link, you may be redirected to a third-party website or platform. The destination service may receive technical information relating to the referral and may process personal data if you browse, register, make a purchase or complete a booking on its platform.

Unless expressly stated otherwise, NextStop-Italy does not receive the complete payment details that you provide directly to an external affiliate partner.

Third-party affiliate and booking platforms operate under their own terms and privacy policies and may act as independent data controllers.

Any cookies or similar tracking technologies used in connection with affiliate links or advertising are described, where applicable, in our separate Cookie Policy.

10. Recipients of Personal Data

Personal data may be disclosed, where necessary, to the following categories of recipients:

  • hosting and IT infrastructure providers;
  • email and newsletter service providers;
  • video conferencing and webinar providers;
  • payment service providers;
  • professional advisers, accountants and tax consultants;
  • external service providers involved in the organisation or delivery of a requested service.

Personal data is not sold by NextStop-Italy.

Service providers that process personal data solely on our instructions are appointed as processors where required by Article 28 GDPR.

Some third parties, such as payment providers or external platforms, may act as independent data controllers for certain processing activities.

11. International Transfers of Personal Data

Some of the service providers used by NextStop-Italy operate internationally and may process personal data outside the European Economic Area (“EEA”), including in the United States.

Where personal data is transferred to a country outside the EEA, we seek to ensure that the transfer takes place in accordance with Chapter V GDPR.

Depending on the provider and destination, the applicable safeguards may include:

  • an adequacy decision adopted by the European Commission;
  • participation in the EU-U.S. Data Privacy Framework where applicable and valid for the relevant recipient;
  • Standard Contractual Clauses approved by the European Commission;
  • Binding Corporate Rules;
  • other transfer mechanisms permitted under applicable data-protection law.

Additional information about safeguards applicable to a specific transfer may be requested by contacting info@nextstop-italy.com.

12. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.

As a general rule:

Virtual tour registration and participation records

Registration, cancellation, attendance/access and related administrative information may be retained for the period necessary to administer the virtual-tour programme and manage participation rules.

Where these records are also necessary for the establishment, exercise or defence of legal claims, they may be retained for the applicable limitation period.

Service communications and enquiries

Ordinary enquiries and correspondence are normally retained only for the time necessary to respond and manage the matter, after which they may be deleted or archived where there is no further legitimate reason to retain them.

Correspondence relating to contractual, payment or legal matters may be retained for longer where necessary for legal or evidentiary purposes.

Newsletter data

Newsletter subscription information is retained until consent is withdrawn or the user unsubscribes.

After an unsubscribe request, limited information may be retained on a suppression list for the sole purpose of ensuring that the user’s opt-out preference is respected.

Payment, transaction and accounting records

Transaction information required for accounting, tax or other legal obligations will be retained for the period required by applicable Italian law, which may generally extend to ten years for relevant accounting records.

Recordings

Virtual-tour recordings may be retained for the period during which they are required for replay, archive or on-demand distribution purposes.

Security logs

Security and technical logs are retained only for a period reasonably necessary to protect the website, diagnose incidents and investigate security events, unless longer retention is required in connection with a specific incident or legal claim.

13. Mandatory and Optional Data

Where data is marked as required, failure to provide it may prevent us from providing the relevant service.

For example, an email address and other required registration information may be necessary to register a user for a virtual tour and send the participation link.

Providing information for promotional newsletter purposes is optional and refusal or withdrawal of marketing consent does not prevent access to our ordinary services.

14. Security of Personal Data

NextStop-Italy implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

15. Children’s Privacy

Our website and general virtual-tour services are not specifically directed at children for the purpose of collecting their personal data independently.

Where a private virtual experience is organised for a school, college or group involving minors, the organisation or responsible adult arranging the event should ensure that participation takes place in accordance with applicable data-protection requirements and that any required parental or guardian permissions have been obtained.

We ask participants not to submit unnecessary personal information concerning minors through public forms, chats or other interactive features.

16. Your Data Protection Rights

Subject to the conditions and limitations established by the GDPR, you may have the right to:

  • obtain confirmation as to whether we process personal data concerning you;
  • obtain access to your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request erasure of y
  • request restriction of processing;
  • receive personal data you provided to us in a structured, commonly used and machine-readable format and, where applicable, request its transmission to another controller;
  • object to processing based on legitimate interests;
  • object at any time to processing for direct-marketing purposes;
  • withdraw consent at any time where processing is based on consent;
  • not be subject, where applicable, to a decision based solely on automated processing that produces legal effects or similarly significantly affects you;
  • lodge a complaint with a competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Requests concerning your personal data may be sent to:

info@nextstop-italy.com

We may request information reasonably necessary to verify the identity of the person submitting the request.

17. Right to Lodge a Complaint

If you believe that your personal data has been processed in breach of applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.

For a Data Controller established in Italy, the relevant supervisory authority is:

Garante per la protezione dei dati personali

This right is without prejudice to any other administrative or judicial remedy available under applicable law.

18. External Websites

Our website contains links to third-party websites and services.

NextStop-Italy does not control the privacy practices of external websites and this Privacy Policy does not govern personal data that users provide directly to third parties.

We recommend reviewing the privacy policy of a third-party service before providing personal information to it.

19. Cookies and Similar Technologies

Information concerning cookies, analytics tools, advertising technologies and similar technologies used on nextstop-italy.com is provided in our separate Cookie Policy.

Users can also manage their cookie preferences through the consent-management tools available on the website.

20. Changes to This Privacy Policy

We may update this Privacy Policy when our services, providers or processing activities change, or when required to reflect changes in applicable law.

The current version will always be published on this page together with its latest revision date.

Where a change materially affects processing based on consent, we will seek new consent where required by applicable law.

Data Controller

NextStop-Italy di Roberta Galasso
VAT No. IT12943160015
REA TO-1327629
info@nextstop-italy.com

Last updated: 12 August 2026