Privacy Policy
This Privacy Policy explains how RomeAttractionTickets.com (“we”, “us”, or “our”) collects, uses, stores, and protects information relating to visitors of our website. This policy complies with the EU General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679, the Italian Personal Data Protection Code (Legislative Decree 196/2003 as amended by Legislative Decree 101/2018), and the Italian DPA (Garante per la protezione dei dati personali) guidelines.
By continuing to use this website, you acknowledge you have read and understood this Privacy Policy.
This website is an informational and affiliate resource about Rome attractions, tickets, tours, and travel tips. Visitors cannot register an account or leave comments on this website. No direct ticket sales or bookings are processed by us.
What Information We Collect
We collect only the minimum data necessary. Below is a clear breakdown.
Data Collected Automatically (Technical/Log Data)
When you visit our website, certain information is automatically collected by our server and third-party tools:
- IP address (anonymised or pseudonymised where possible)
- Browser type and version
- Operating system
- Referring URL (the page you came from)
- Pages visited and time spent on each page
- Date and time of your visit
This data is used solely for:
- Website security and fraud prevention
- Statistical analysis of traffic and user behaviour (in aggregate)
- Improving content and user experience
Legal basis: Legitimate interest (Article 6(1)(f) GDPR) – to operate and improve a functional, secure website.
Data Collected via Contact Form
This website uses Contact Form 7 for visitors who choose to get in touch. When you submit a contact form, we collect:
- Your name
- Your email address
- The content of your message
This data is used only to respond to your enquiry. We do not use it for marketing purposes unless you have given explicit consent.
Legal basis: Consent (Article 6(1)(a) GDPR) and/or legitimate interest to respond to your communication (Article 6(1)(f) GDPR).
Retention: Contact form submissions are retained for up to 12 months, after which they are permanently deleted.
Email Newsletter (Kit / ConvertKit)
If you voluntarily subscribe to our newsletter or email updates, we collect:
- Your email address
- Your first name (if provided)
This data is transmitted to and stored by Kit (formerly ConvertKit), a third-party email marketing service provider based in the USA. Kit processes your data under Standard Contractual Clauses (SCCs) to ensure adequate protection for transfers outside the EEA.
You may unsubscribe at any time by clicking the “Unsubscribe” link at the bottom of any email we send, or by contacting us directly.
Legal basis: Consent (Article 6(1)(a) GDPR).
Kit Privacy Policy: https://kit.com/privacy
Cookies
Cookies are small text files stored on your device when you visit a website. They help websites function correctly and provide analytical data to website operators.
This website uses cookies from several sources. We categorise them as follows:
Strictly Necessary Cookies (no consent required)
These cookies are essential for the website to function and cannot be switched off.
| Cookie | Provider | Purpose |
|---|---|---|
| Session cookies | WordPress / LiteSpeed | Maintain basic site functionality and caching |
| Security cookies | Akismet | Spam and bot protection for the contact form |
| Cookie consent preference | This website | Stores your cookie consent choice |
Analytics Cookies (require consent)
These cookies collect anonymised data about how visitors use our website. We use this information to improve the site.
| Cookie | Provider | Purpose | Data transferred outside EU? |
|---|---|---|---|
_ga, _ga_* | Google Analytics | Anonymised visitor statistics, pages visited, session data | Yes – USA (under DPF/SCCs) |
| WP Statistics cookies | WP Statistics (local) | Aggregated, privacy-friendly statistics stored on our own server | No |
Important note on Google Analytics: We have configured Google Analytics with IP anonymisation enabled. Data is processed by Google LLC in the USA. Google participates in the EU-U.S. Data Privacy Framework. You can opt out using the Google Analytics Opt-out Browser Add-on.
Advertising and Affiliate Cookies (require consent)
Our affiliate partners may set cookies when their widgets or booking tools are loaded on our pages. These cookies allow partners to attribute commissions when a visitor clicks through to book.
| Partner | Purpose | Privacy Policy |
|---|---|---|
| GetYourGuide | Availability widgets, affiliate tracking | https://www.getyourguide.com/pages/privacy-policy/ |
| Viator (TripAdvisor) | Tour and activity affiliate tracking | https://www.tripadvisor.com/pages/privacy.html |
| Tiqets | Ticket affiliate tracking | https://www.tiqets.com/en/privacy-policy/ |
| Headout | Activity booking affiliate tracking | https://www.headout.com/legal/privacy-policy/ |
| Booking.com | Accommodation affiliate tracking | https://www.booking.com/content/privacy.html |
| Google Ads | Remarketing and conversion tracking | https://policies.google.com/privacy |
This list may expand as we add new affiliate partnerships. We will update this policy accordingly.
Managing Your Cookie Preferences
When you first visit our website, a cookie consent banner is displayed. You can accept or decline non-essential cookies at any time. You may also manage or delete cookies through your browser settings. Note that disabling certain cookies may affect your experience on this website or on affiliate partner sites you visit through us.
Most browsers allow you to:
- View and delete cookies stored on your device
- Block all or specific cookies
- Set preferences for particular websites
WordPress Plugins – Data Processing Details
Our website runs on WordPress and uses various plugins. Below we clarify which plugins process personal data and which operate purely as technical utilities.
Plugins That May Process Personal Data
| Plugin | Purpose | Data Processed |
|---|---|---|
| Google Analytics | Website traffic analytics | Anonymised browsing data, IP addresses |
| Google Ads | Advertising and retargeting | Cookie-based ad tracking |
| Akismet Anti-Spam | Contact form spam filtering | Submitted form data, IP address, browser info |
| Contact Form 7 | Visitor enquiry forms | Name, email, message content |
| Kit (ConvertKit) | Email newsletter management | Email address, first name |
| WP Statistics | Privacy-friendly local analytics | Anonymised visit data, stored locally |
Third-Party Links and Affiliate Disclosure
Our website contains links to third-party websites and embedded booking widgets from affiliate partners (GetYourGuide, Viator, Tiqets, Headout, Booking.com, and others). When you click on an affiliate link or use an embedded availability widget, you are redirected to the partner’s website. We have no control over, and accept no responsibility for, the privacy practices of those external websites.
We strongly encourage you to read the privacy policy of any third-party website before submitting any personal information to them.
Affiliate disclosure: When you click on an affiliate link and make a purchase or booking, we may earn a commission at no extra cost to you. This does not influence our editorial content or the recommendations we provide.
International Data Transfers
Some of the third-party services we use (notably Google Analytics, Google Ads, Kit/ConvertKit, GetYourGuide, and others) may transfer your personal data to countries outside the European Economic Area (EEA), including the United States.
Where such transfers occur, we ensure they are protected by one of the following safeguards:
The recipient participates in the EU-U.S. Data Privacy Framework (DPF)
The recipient country has been deemed to provide an adequate level of data protection by the European Commission
The transfer is covered by Standard Contractual Clauses (SCCs) approved by the European Commission
Your Rights Under GDPR
As a resident of the EU/EEA, you have the following rights regarding your personal data:
- Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
- Right to rectification (Art. 16 GDPR): You may request that inaccurate data be corrected.
- Right to erasure (Art. 17 GDPR): You may request deletion of your personal data (“right to be forgotten”).
- Right to restrict processing (Art. 18 GDPR): You may request that we limit how we use your data.
- Right to data portability (Art. 20 GDPR): You may request your data in a machine-readable format.
- Right to object (Art. 21 GDPR): You may object to processing based on legitimate interest or for direct marketing.
- Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To request access or deletion of your data, contact us via this page
Security
We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:
- Secure HTTPS encryption across the entire website
- Regular WordPress core, theme, and plugin updates
- Server-level security via LiteSpeed
- Spam protection via Akismet for all form submissions
- Restricted access to website administration
Despite these measures, no data transmission over the internet is entirely secure. We cannot guarantee absolute security.
Children’s Privacy
This website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has submitted personal information to us, please contact us immediately so we can delete it.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make significant changes, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.
Contact
For any questions, concerns, or to exercise your data rights, please contact us:
If you have any questions about this Privacy Policy, please contact us via this page