Privacy Policy

Data Controller

VISA PLANET WORLD S.r.l.

Registered office: Corso del Popolo 222, 45100 Rovigo (RO) - Italy

VAT number: 01623450291

E-mail: info@visaplanetworld.com

Categories of Personal Data Processed

Through this website, the Data Controller may collect and process the following personal data:

• Name and surname
• E-mail address
• Phone number
• Country and visa type of interest
• Message content (free text provided by the user)
• Technical data (IP address, user agent, timestamps) collected automatically by hosting, security, and email providers for service delivery and abuse prevention

The first five categories are provided directly by the user when filling out the eligibility form or subscribing to the newsletter (email address only). Technical data are collected automatically by our infrastructure providers.

Purpose and Legal Basis for Processing

Personal data are processed for the following purposes:

• To respond to information requests sent via the eligibility form;
• To manage communications related to the services offered by VISA PLANET WORLD S.r.l.;
• To send newsletter notifications about new guides and country updates to subscribed users (email address only, with the option to unsubscribe at any time);
• To analyze website usage through analytics tools, only with the user's prior consent;
• To comply with legal obligations, if applicable.

The legal basis of the processing is:

• the performance of a contract or pre-contractual measures requested by the data subject (Art. 6, par. 1, lett. b GDPR);
• the fulfillment of legal obligations (Art. 6, par. 1, lett. c GDPR);
• the legitimate interest of the Controller to ensure proper management of communications and relations (Art. 6, par. 1, lett. f GDPR).

Data Processing Methods

The processing is carried out by authorized personnel using electronic and/or manual tools, adopting appropriate technical and organizational measures to ensure the security and confidentiality of the data. No automated decision-making or profiling activities are performed.

Data Retention Period

Personal data are retained only for as long as necessary to fulfill the purposes described above, typically while the client relationship is active and for a reasonable period afterwards, or as required by law. Data subjects may request erasure at any time via the email address listed under 'Rights of the Data Subject.' Routine administrative records (for example, internal activity logs) are automatically deleted after one year.

Data Communication and Transfer

Personal data may be shared with the following third-party service providers, appointed as Data Processors where applicable:

• Supabase Inc. (database hosting and authentication);
• Vercel Inc. (website hosting and deployment);
• Microsoft Corporation (email delivery via Microsoft 365);
• Cloudflare Inc. (DNS management and CAPTCHA verification via Turnstile);
• Google LLC (website analytics via Google Analytics, only with user consent);
• Calendly LLC (appointment scheduling, when initiated by the user).

Some of these providers are based in the United States. Where personal data are transferred outside the European Economic Area (EEA), such transfers are safeguarded by appropriate mechanisms including Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework, in compliance with Chapter V of the GDPR.

Rights of the Data Subject

The user (data subject) may exercise the following rights at any time under Articles 15-22 of the GDPR:

• Right of access to personal data;
• Right to rectification or erasure;
• Right to restriction of processing;
• Right to object to processing;
• Right to data portability;
• Right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

Requests can be sent directly to the Data Controller via email at: info@visaplanetworld.com

We will respond to requests within 30 days, as required by Article 12(3) of the GDPR.

Consent

By ticking the box "I have read and accept the Privacy Policy" on the eligibility form, the user confirms that they have read this privacy notice and consent to the processing of their personal data for the purposes described above.

Updates

This Privacy Policy may be updated from time to time. The most recent version will always be available on this website.