Personal Data Processing

A separate document on the legal grounds for processing personal data and the rights of data subjects, supplementing the privacy policy.

Version of 1 August 2026 · Kidster Tours S.r.l.s.

Documents

A question about our documents?

Write to kidster.tours@gmail.com and we will reply within three business days.

kidster.tours@gmail.com

1. Legal grounds

Performance of the contract: data without which the tour cannot be arranged.

Consent: publishing reviews and photos sent in by parents.

Legitimate interest: anonymised analytics and protection against fraudulent bookings.

Required by law: retention of payment records.

2. Children's data

We ask only for a child's age and, if a parent wishes, any needs relevant to the tour. We do not ask for children's documents and we do not publish their data. Photos from tours are published only with a parent's written consent.

3. Transfers outside the EU

We keep data on servers in the European Union. Where messengers or payments require a transfer outside the EU, it takes place under the European Commission's standard contractual clauses.

4. Your rights

Obtain a copy of your data and learn who it was shared with.

Correct any inaccuracies.

Have your data erased once it is no longer needed for the contract or accounting.

Withdraw consent to publishing your review or photo at any time.

5. How to exercise your rights

Write to kidster.tours@gmail.com describing your request. We reply within 30 days. If our answer does not satisfy you, you may contact the data protection authority in your country.

6. Security

Only staff who need it for their work can access your data. Data sent through the site is encrypted, and access is protected by two-factor authentication.