PRIVACY POLICY

Last Updated: October 16, 2026

This Privacy Policy describes how personal data is collected, used, and processed when you visit and interact with https://travelingamal.com/ (hereinafter referred to as the “Site”), purchase products, subscribe to our newsletter, or download free resources.

1. Data Controller

For all legal, administrative, invoicing, and e-commerce transactions, the Data Controller responsible for processing your personal data is:

• Company Name: SanVir Web Store Multiservice S.r.l.s.

• Registered Address: Via Gioacchino Rossini 10, 09060 Settimo San Pietro (CA), Italy

• VAT Number / Tax ID: IT03520930920

• Site Management & Content Creator: Amal Cherni (Traveling Amal)

• Privacy Contact Email: info@travelingamal.com

2. Personal Data Collected and Purposes of Processing

A. Newsletter Subscription & Free Downloads

• Data Collected: First Name, Last Name, Email Address.

• Purpose: To send promotional newsletters, blog updates, travel guides, book offers, and automated emails containing downloadable free resources (lead magnets).

• Legal Basis: Explicit user consent (Art. 6.1.a GDPR) provided via signup forms.

• Third-Party Service Providers:

  • Klaviyo: Used for managing marketing contact lists, email campaigns, and basic subscriber segmentation.

  • MailerSend: Used for delivering transactional emails (such as order confirmations and digital download links).

B. E-Commerce & Book Sales

• Data Collected: Full Name, Shipping Address, Billing Address, Tax ID / Fiscal Code (where legally required), Email Address, Phone Number.

• Purpose: Processing and fulfilling online orders, physical or digital book delivery, invoicing, tax compliance, and customer service support.

• Legal Basis: Execution of a contract and compliance with legal and accounting obligations (Art. 6.1.b & 6.1.c GDPR).

• Payment Gateways:

  • Stripe & PayPal: All payment transactions (credit card numbers, PayPal account details) are handled directly and securely by these payment processors adhering to PCI-DSS security standards. The Data Controller never stores or accesses full payment card credentials.

C. Browsing Data, Analytics & Marketing Tracking

• Data Collected: Anonymized IP addresses, browser types, interaction logs, clicks, heatmaps, and session recordings.

• Purpose: Enhancing user experience, optimizing site design and layout, traffic analysis, and evaluating advertising performance.

• Services Used:

  • Microsoft Clarity: Analyzes user interaction on the blog via heatmaps and anonymized session replays.

  • Meta Pixel (Facebook Pixel): Measures ad conversion rates and builds custom retargeting audiences on Facebook and Instagram.

3. Data Retention Period

Personal data is retained only as long as necessary to fulfill the specific purposes for which it was collected:

• E-Commerce & Invoicing Data: Retained for 10 years in compliance with Italian tax and commercial law obligations.

• Newsletter & Marketing Data: Retained until the user unsubscribes via the “Unsubscribe” link in any email or requests deletion.

4. International Data Transfers

Some service providers (e.g., Klaviyo, Microsoft, Meta, Stripe) store data on servers located outside the European Economic Area (EEA), such as in the United States. These transfers are safeguarded under standard contractual clauses (SCCs) and approved international data transfer frameworks compliant with EU GDPR standard requirements.

5. Your Rights Under the GDPR

Pursuant to Articles 15–22 of EU Regulation 2016/679 (GDPR), you have the right to:

• Access, update, or correct your personal data.

• Request the erasure of your personal data (Right to be Forgotten).

• Withdraw consent for promotional communications at any time.

• Restrict processing or request data portability.

To exercise any of these rights, please contact us at info@travelingamal.com.