Privacy Policy
At TICKET EXPRESS IT, we are committed to protecting your privacy and personal data. This policy explains how we collect, use, and protect your information.
Last updated: 5 October 2025
We collect different types of information to provide you with our services:
1.1 Personal Information
- Full name
- Email address
- Phone number
- Postal address
- Date of birth
- Identity document or passport number (when necessary for bookings)
1.2 Payment Information
- Credit/debit card details (processed securely and encrypted)
- Transaction history
- Preferred payment method
1.3 Usage Information
- IP address and geographic location
- Browser and device type
- Pages visited and browsing time
- Search and booking preferences
We use your personal information for the following purposes:
- Processing and managing your train, tour, and service bookings
- Sending confirmations, e-tickets, and payment receipts
- Communicating with you regarding your bookings and contracted services
- Processing payments and preventing fraud
- Improving our services and user experience
- Sending you offers and promotions (only if you have consented)
- Complying with legal and regulatory obligations
- Resolving disputes and enforcing our terms and conditions
We share your information only when necessary to complete your bookings or when required by law:
3.1 Service Providers
- Rail operators (Trenitalia, etc.) to process train tickets
- Tour and activity organizers
- Telecommunication operators for phone recharges
- Payment processors (with bank-level encryption)
3.2 Legal Requirements
- Government authorities when required by law
- Courts and regulatory bodies in case of legal disputes
3.3 Business Partners
- We never sell your personal information to third parties for marketing purposes without your explicit consent
As a resident of the European Union, you have the following rights regarding your personal data:
- Right of Access: Request a copy of your personal data
- Right to Rectification: Correct inaccurate or incomplete information
- Right to Erasure: Request the deletion of your personal data
- Right to Restriction of Processing: Restrict the processing of your data
- Right to Data Portability: Receive your data in a structured format
- Right to Object: Object to the processing of your data for certain purposes
- Right to Withdraw Consent: At any time for direct marketing
To exercise any of these rights, please contact us at booking.ticketexpressit@gmail.com
We use cookies and similar technologies to enhance your experience:
5.1 Types of Cookies
- Essential Cookies: Necessary for the website's functionality
- Performance Cookies: Analyze how you use our site
- Functionality Cookies: Remember your preferences
- Marketing Cookies: Personalize ads (with your consent only)
5.2 Cookie Management
You can manage your cookie preferences in your browser settings. Please note that disabling certain cookies may affect website functionality.
We implement robust security measures to protect your information:
- SSL/TLS encryption for all data transmissions
- Bank-level encryption for payment data
- Secure servers with restricted access
- Regular security audits
- Staff training on data protection
- Regular backups and disaster recovery plans
However, no method of transmission over the Internet is 100% secure. We do our best to protect your data, but we cannot guarantee absolute security.
We retain your personal information only for as long as necessary to fulfill the purposes described in this policy:
- Booking data: 10 years (fiscal legal requirement in Italy)
- Payment data: As per payment processor requirements and regulations
- Marketing data: Until you withdraw your consent
- Account data: Until you request account deletion
After these periods, we securely delete or anonymize your data, unless the law requires a longer retention period.
As we operate in Italy and offer international services, your data may be transferred and processed in different countries:
- All data is stored on servers within the European Union
- When we transfer data outside the EU, we use approved standard contractual clauses
- We ensure that all recipients comply with protection standards equivalent to GDPR
Our services are not directed at children under 18 years of age. We do not knowingly collect personal information from children without parental consent. If we discover that we have collected data from a child without consent, we will delete it immediately.
We may update this Privacy Policy periodically to reflect changes in our practices or for legal reasons. We will notify you of significant changes by email or by a prominent notice on our website. The 'Last updated' date at the beginning of this policy indicates when it was last revised.
If you have questions, concerns, or wish to exercise your privacy rights, please contact us:
Data Protection Authority
You also have the right to lodge a complaint with the Italian data protection authority (Garante per la Protezione dei Dati Personali) if you believe we have violated your privacy rights.
By using our services, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described.