Privacy Policy

The designated data controller is Local Way S.r.l. ('Local Way', 'we'), matching the identity structures summarized above. This disclosure applies to all visual Platform visitors, registered Local Wayers, standard data inquiries, Experience participants, and, where contextually required, corporate Local Advisors and their associated legal representatives. A specialized Data Protection Officer (DPO) has not been appointed; should an expert be commissioned, update entries will publish immediately on this node.

Local Way oversees the operational core of the Platform, collecting identifiers required to drive discovery functions, booking actions, system assistance workflows, payment validation routines, protective security models, and foundational business ledger logs. To coordinate a finalized experience, the relevant Local Advisor receives the strict structural data elements necessary to clear, frame, and safely deliver the selected event. Concerning independent post-execution logistics, the Local Advisor functions independently as an autonomous data controller. External settlement clearing hubs execute validation services subject to their isolated operational policies.

Submitting specific data blocks to support user onboarding, checkout routines, payment clearances, or legal obligations is strictly mandatory; choosing to withhold these parameters will disrupt Platform operations and block bookings. Conversely, parameters required to drive marketing newsletters, non-technical analytics cookies, or voluntary community reviews are entirely optional and do not limit core platform access.

Specific computing operations or payment verification tasks may trigger technical processing pipelines based outside the boundaries of the European Economic Area (EEA). To safeguard these transfers, Local Way incorporates standard validation models recognized under the GDPR, applying European Commission adequacy decisions, official Standard Contractual Clauses (SCCs), or equivalent binding legal instruments. Specific validation documentation can be requested through our primary privacy contact channel.

The Platform utilizes background algorithmic routines to filter out payment fraud threats, verify user account states, balance search index rankings, suggest contextually relevant experiences, and streamline reservations. These automated scripts do not generate definitive legal classifications or heavily compromise user choices under Art. 22 GDPR. If such logic is introduced, targeted disclosures detailing the processing safeguards will deploy. We maintain strict physical and electronic defenses, including role-based administrative access filters, infrastructure isolation, action logging, system backups, incident management protocols, and data minimization routines.

The Platform is exclusively designed for legal adults who are fully capable of executing binding contractual engagements. Any personal information detailing minor children joining an experience must be supplied strictly by a verified parent or legal guardian, restricted to elements needed to complete the booking.

Subject to local statutory limits, users can demand access to personal data, request correction of files, command absolute deletion, impose execution restrictions, request digital data portability, challenge actions based on legitimate interests, or cancel active consent options. To invoke these protections, submit an email to [email protected] using the subject header 'Privacy'. Official complaints can also be filed directly with the Italian Data Protection Authority (Garante per la protezione dei dati personali). We fulfill standard requests within one calendar month, barring complex extensions authorized under GDPR rules.

As a platform operator, Local Way faces binding tax compliance mandates requiring the tracking, verification, safe storage, and reporting of data regarding registered Local Advisors, transacted fees, booking volumes, tax registration codes, and required operational files under the DAC7 regulatory reporting framework. Supplying this financial data is a statutory requirement; failing to cooperate with reporting requests requires Local Way to lock profile tools or disable payout functions completely.

We periodically alter this documentation to stay aligned with technological updates, internal workflow changes, or regulatory updates. The active, authoritative version remains continuously pinned to this Platform layout node, marked with an explicit update timestamp. If alterations substantially change paths that rely on visitor consent, renewed clearance flows will trigger. Core regulatory touchstones include EU Regulation 2016/679 ('GDPR'), Italian national privacy laws, and the digital tracking regulations enacted by the Italian Garante authority on June 10, 2021.