Privacy & Cookie Policy
Privacy notice under Arts. 13-14 of Regulation (EU) 2016/679 (GDPR).
This notice explains how the personal data of users who browse this website and use its services is processed. This English text is a courtesy translation: in the event of any discrepancy, the Italian version available at /IT/privacy.html prevails.
1. Data Controller
The data controller is:
- Business name: Venice Fly Transfer
- Owner: Daniele Salvan
- Address: Terraglio 387/1, 31022 Preganziol (TV), registered office; Via Dante 46, 30174 Venezia (VE), operating office
- Privacy contact email: [email protected]
- Certified email (PEC): [email protected]
- VAT number: 05131770264 (tax code SLVDNL66H08L736O)
2. Purposes of Processing and Legal Basis
The controller processes the personal data you provide of your own accord in order to be contacted back and to receive the transfer service: name, telephone number or email address, and the data needed to carry out the transfer (date and time, pick-up and drop-off location, number of passengers and pieces of luggage, flight or ship number).
- Answering your request and preparing a quote: legal basis, pre-contractual measures taken at the request of the data subject (Art. 6.1.b GDPR).
- Performing the transfer service and managing the customer relationship: legal basis, performance of a contract (Art. 6.1.b GDPR).
- Complying with tax, accounting and administrative obligations required by law: legal basis, legal obligation (Art. 6.1.c GDPR).
Providing your data is optional, but without the data needed to carry out the transfer the service cannot be delivered. This website collects no data automatically: there is no contact form and no data is sent to the website's servers.
3. Contact through WhatsApp
The only request channel offered by this website is WhatsApp. The booking button opens a window where you can state the service, the date, the time, the number of passengers, the luggage and, if relevant, the flight or ship number.
These fields are not sent either to this website or to the controller: they stay in your browser, where a local script uses them solely to compose the text of the message. No data passes through the website's servers and nothing is recorded at this stage.
When you press the button you are taken to WhatsApp, a service provided by WhatsApp Ireland Limited (Meta group), with the message already written: sending it remains your own choice. From that moment on, the processing of data on the platform is governed by the WhatsApp / Meta privacy policy, to which reference is made. The controller processes the content of the conversation from the moment it is received, for the purposes set out in the previous section.
If you would rather not use WhatsApp, you can contact the controller by telephone or at the email address given in section 1.
5. Hosting and Content Delivery Infrastructure (CDN)
To ensure the best performance and security, this website uses an architecture that may include:
- Hosting / origin server: the website is hosted on infrastructure (VPS/dedicated) managed by EU (Satellite stack), acting as data processor. The servers are located within the European Economic Area (EEA), in line with the security standards required by the GDPR.
- Delivery and security network (CDN): traffic to this website may be filtered and distributed by Cloudflare, Inc. (USA/global) or similar services. These services act as a reverse proxy to protect the website from DDoS attacks and malicious access. Although Cloudflare is a US company, it adheres to the Data Privacy Framework (DPF), providing adequate levels of protection for the transfer of the data (IP addresses and system logs) required for security.
6. Local Resources and Absence of Tracking
Unlike most websites, this one is designed on a privacy-by-default principle:
- No Google Fonts: typefaces are hosted locally on our own server (self-hosted). No call is made to Google's servers to load fonts.
- No analytics service: we use neither Google Analytics nor any other measurement tool that installs cookies or tracks browsing behaviour.
- No embedded content: we do not load videos (YouTube/Vimeo) or maps (Google Maps) directly into the pages, so as to avoid third-party tracking. Links to those platforms are plain external hyperlinks.
7. Data Processor (Technical Provider)
The website is built and maintained, technically and infrastructurally, by Social Facile di Federico Cadamuro, Via Gorizia 24, Preganziol (TV), VAT number 05366430261 ([email protected]), acting as data processor under Art. 28 GDPR, limited to the technical operations needed to deliver and maintain the website. The provider does not use the data for its own purposes and does not disclose it to third parties except where required by law.
9. Processing Methods and Retention
Data sent by users (through WhatsApp, email or telephone) is handled through email systems. It is stored on the servers of the controller's email provider, protected by appropriate security measures. No data is archived in any website database.
Data is retained according to the storage limitation principle (Art. 5 GDPR):
- Contact requests (leads): data is deleted 12 months after the last interaction or the closing of the request, where no contractual relationship follows.
- Administrative and customer data: where a contractual relationship is established, data is retained for 10 years to meet civil and tax obligations.
10. Place of Processing and Data Transfer
Data is processed at the server locations indicated in section 5 (EU, Satellite stack).
Data may also be disclosed to tax advisers, accountants or lawyers for the accounting and administrative obligations arising where a contractual relationship is established. Depending on the case, these parties act either as duly appointed data processors or as independent controllers.
11. Reviews Published on this Website
This website publishes reviews received on the controller's Google profile. These are contents already made public by their own authors on the Google platform, reproduced here in full and without any editing, in the language in which they were written.
For each review, only the author's public name as shown on Google, the star rating, the approximate time of publication and the text are displayed. Profile pictures, email addresses and any other contact details of the authors are not reproduced. The website neither collects nor hosts new reviews: there is no submission form.
The legal basis is the controller's legitimate interest in giving an account of the quality of the service provided (Art. 6.1.f GDPR), balanced by the fact that the contents are already public by their authors' own choice and that no further data is collected or processed.
The author of a review who does not wish it to be reproduced on this website may ask for its removal using the contact details given in section 1: simply letting us know is enough, with no need to give a reason, and the review will be removed from the website. Removal from this website does not affect the review published on Google, which remains entirely under its author's control.
12. Rights of the Data Subject
At any time you may exercise the rights granted by Arts. 15-22 GDPR (access, rectification, erasure, restriction, portability, objection) by sending a request to the controller's email address. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Last updated: August 2026