Privacy Policy

1. Data controller

The data controller for this website is Rome's Ultimate Free Walking Tour, Via dei Serpenti 89, Rome 00184, Italy. Contact: [email protected].

2. What data we collect

We do not directly collect or store personal data on our servers. However, when you accept cookies, the following third-party services activate and may collect your IP address and browsing behaviour. IP addresses are considered personal data under GDPR.

Google Ads (Google LLC, USA) — measures ad performance and conversions. Google acts as an independent data controller for data it collects. See Google's Privacy Policy.
eXTReMe Tracker (eXTReMe digital, Netherlands) — counts page views to measure traffic. See eXTReMe's Privacy Policy.

None of these services activate unless you consent via the cookie banner.

3. Legal basis (GDPR Art. 6(1)(a))

All tracking is based on your freely given consent. You can withdraw consent at any time — as easily as you gave it — by clicking the link or via your browser's cookie settings. Withdrawal does not affect the lawfulness of processing before withdrawal.

4. Cookies and local storage

We use localStorage to remember your consent choice. Once consent is granted, third-party services (Google, eXTReMe) may set their own cookies. You can delete these at any time via your browser settings.

5. International data transfers

Google LLC is based in the United States. Transfers to Google are covered by the EU–US Data Privacy Framework (Art. 46 GDPR safeguard). See Google's DPF certification. eXTReMe digital is based in the Netherlands and no transfer outside the EEA occurs.

6. Automated decision-making

Google Ads may use your data for ad targeting and profiling. You have the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects (Art. 22 GDPR). To opt out of Google ad personalisation, visit Google Ad Settings.

7. Data retention

We do not store personal data on our servers. Data retained by third-party services is governed by their own policies. Google retains ad measurement data for up to 26 months by default.

8. Your rights

Under GDPR you have the right to:

Access — obtain a copy of personal data we hold about you (Art. 15)
Rectification — correct inaccurate data (Art. 16)
Erasure — request deletion of your data (Art. 17)
Restriction — limit how your data is processed (Art. 18)
Portability — receive your data in a machine-readable format (Art. 20)
Object — object to processing based on legitimate interests or for direct marketing (Art. 21)
Withdraw consent — at any time, without affecting past processing (Art. 7(3))

To exercise any of these rights, email [email protected].

9. Supervisory authority

You have the right to lodge a complaint with the Italian data protection authority: Garante per la protezione dei dati personali — www.garanteprivacy.it.

10. Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects the most recent revision.