Privacy Notice

1. Data Controller

Mirna Travel — MIRNA TRAVEL SOCIETA’ A RESPONSABILITA’ LIMITATA SEMPLIFICATA, with registered office at Via Feletto 37, 10154 Torino (TO), Italy, VAT/Tax code 12618470012, REA TO-1303807. Contact: support@mirnatravel.com.

2. Types of Data Collected

Through the Site, the following may be collected: data voluntarily provided via the flight search form; data provided via the advertising request (Advertising Order), including company, tax (VAT number), and contact data; data provided for newsletter subscription; technical browsing data (e.g. IP address, user agent) automatically collected by the server.

3. Purposes of Processing

Data is processed to: respond to user requests; manage Advertising Orders and related communications (request confirmation, temporary reservation, payment instructions, campaign status); send the newsletter if requested; comply with legal obligations; improve the functioning of the Site.

4. Legal Basis for Processing

Processing is based, depending on the specific purpose, on one or more of the following legal bases under Article 6 of the GDPR: performance of a contract or pre-contractual measures taken at the data subject’s request; compliance with a legal obligation; the data subject’s consent; the Controller’s legitimate interest, always balanced against the data subject’s rights and freedoms.

5. Retention Period

Personal data is retained for the time necessary to achieve the purposes for which it was collected: for the duration of the booking and the subsequent period required by applicable tax and accounting obligations; for the time needed to handle any complaints or disputes; until consent is withdrawn, for processing based on consent (e.g. the newsletter).

6. Data Disclosure

Data may be processed by parties providing services instrumental to the Site (e.g. hosting, email delivery), within the limits necessary for such purposes. To fulfil a requested booking, certain data is also shared with the relevant third-party travel service providers (airlines, accommodation providers, car-rental companies), strictly to the extent necessary to deliver the booked service; those providers act as independent controllers for that data under their own privacy notices.

7. Transfer of Data Outside the EU

Some of the providers referred to above may be located, or process data, outside the European Economic Area. In such cases, Mirna Travel ensures the transfer relies on one of the safeguards under Chapter V of the GDPR, such as an EU adequacy decision, the European Commission’s Standard Contractual Clauses, or another suitable safeguard provided for by applicable law.

8. Rights of the Data Subject

Pursuant to Articles 15-22 of Regulation (EU) 2016/679 (GDPR), the data subject has the right to access their data, request rectification, erasure, restriction of processing, portability, and to object to processing, by writing to support@mirnatravel.com.

9. Cookies

The Site uses cookies grouped into the following categories: Essential/technical (no consent required, strictly necessary to operate the Site); Functionality (remembering preferences such as language); Analytics (used, where activated, to understand aggregate Site usage); Marketing/profiling (activated only with the user’s consent, where required by applicable law). A specific list of cookies actually active on the Site, and any third-party providers, with their purposes and duration, is made available, where applicable, via the Site’s cookie banner or preference centre.

10. Changes to this Notice

This notice may be updated. Users are invited to consult it periodically.

11. Contact

For any request relating to the processing of personal data: support@mirnatravel.com.