Privacy & Cookie Policy

The data controller for the personal data processed through this website is:

Data controller

Davide Ruggeri

Email

hello@thatdreamelsewhere.com

Website

https://thatdreamelsewhere.com

For any question about this policy or about your data, write to the email address above.

Contact form

When you send the form on our Get in touch page, we receive your name, your email address, the topic you select and your message. We use them only to read your request, reply to you and keep track of the conversation.

Emails you send us

If you write to hello@thatdreamelsewhere.com, we receive your email address, your message and anything you choose to include. We use them only to reply.

Newsletter

When you subscribe, we receive your email address, the address of the page where you subscribed and proof of your consent: the consent box you ticked, together with the date and time of the request. We use this information only to send you the newsletter and to be able to demonstrate your consent.

We are currently collecting subscriptions and have not yet started sending the newsletter. Before using any dedicated newsletter service, we will update this policy.

Technical data and logs

To deliver the website and keep it secure, our hosting provider Netlify automatically processes technical data such as your IP address, browser and device information, the pages and files requested, and the date and time of each request. When a form is sent, Netlify may record similar technical information with the submission and apply automated spam filtering.

Both forms also contain a hidden anti-spam field, which stays empty when a person fills in the form.

We do not use analytics, tracking pixels, advertising tools or profiling of any kind, and we do not take automated decisions about you.

• Commercial requests and possible collaborations (through the contact form or by email): taking the steps you ask us to take before entering into an agreement with you (Article 6(1)(b) GDPR).
• General questions, for example about a guide or a destination: our legitimate interest in answering the people who write to us (Article 6(1)(f) GDPR).
• Newsletter: your explicit consent (Article 6(1)(a) GDPR), which you can withdraw at any time by writing to us.
• Hosting, security and technical logs: our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR); this processing is technically necessary to deliver the pages you request.

• Contact form: name, email address, topic and message are all required to send the form. Writing to us is entirely voluntary, but without this information we cannot receive or answer your request.
• Newsletter: your email address and the consent box are required to subscribe. The address of the page where you subscribe is added automatically.
• Emails: you decide what to include in your message.
• Technical data: processed automatically whenever you visit the website, because it is needed to deliver the pages.

• Contact requests and related emails: up to 24 months from our last contact with you, unless we need to keep them longer to comply with a legal obligation or to establish, exercise or defend legal claims.
• Newsletter subscriptions: until you withdraw your consent. We review the list periodically. If the newsletter service is not activated, subscriptions will be deleted 24 months after they were collected.
• Technical logs: only for as long as strictly necessary, according to the retention periods applied by Netlify.

• Davide Ruggeri, as data controller, who reads and answers messages and manages newsletter subscriptions.
• Netlify, Inc., which hosts and delivers the website and receives the forms on our behalf. Netlify acts as a data processor on our instructions. You can read its own privacy policy.
• Our email service provider, used only to receive and reply to messages sent to our email address, also acting as a data processor.
• Public authorities, only where we are required to do so by law.

We do not sell, rent or share personal data for marketing purposes.

Netlify, Inc. is based in the United States, and its infrastructure may process data outside the European Economic Area. These transfers rely on the safeguards offered by Netlify, such as the European Commission’s Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

If our email service provider processes data outside the European Economic Area, the same kind of safeguards apply. You can ask us for more information about them.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use your data;
• receive your data in a portable format;
• object to processing based on our legitimate interest;
• withdraw your consent at any time.

To exercise any of these rights, write to hello@thatdreamelsewhere.com. We will reply within one month; for complex requests this period may be extended as allowed by the GDPR. We may ask you to confirm your identity before acting on a request.

You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali, or with the supervisory authority of the country where you live or work.

You can withdraw your consent to the newsletter and unsubscribe at any time by writing to hello@thatdreamelsewhere.com. We will then delete your subscription.

Withdrawing consent does not affect the lawfulness of the processing carried out before you withdrew it.

The website is served over an encrypted HTTPS connection, and our hosting is configured with security headers that limit how pages can be framed or how browser features can be used. Access to messages and subscriptions is limited to the data controller, and we rely only on the providers described in this policy.

No method of transmission or storage is completely secure. If you believe your data may have been compromised, please contact us.

This website is not directed at children. If you are under 14, the age of digital consent in Italy, please do not send us personal data or subscribe to the newsletter without the consent of a parent or guardian. If we learn that we have received such data, we will delete it.

This website does not use cookies: neither our own nor those of third parties. There are no analytics, advertising or social media trackers, so there is no cookie banner.

The website uses a single item of local storage in your browser:

Name

tde-intro-seen

Purpose

Remembers that the introduction screen on the Home page has already been shown, so that it does not appear on every visit.

Content

The value “1”. It contains no personal information and no identifier.

Duration

Until you clear the data stored by this website in your browser.

Type

Technical and first-party. It stays in your browser and is never sent to us or to anyone else, so it does not require consent.

You can delete it at any time by clearing this website’s data in your browser settings; the introduction will simply appear again on your next visit.

The fonts we use (Cormorant Garamond and Inter) and the React and ReactDOM libraries that display our pages are hosted on our own website. Loading our pages does not send requests to Google Fonts or to other external content delivery networks.

Our pages contain links to other websites, such as Instagram, Facebook, Google Maps, hotels, restaurants, museums, transport companies and official tourism sites. Nothing from these services is embedded in our pages: they receive your data only if you click a link and visit them, and from that moment their own privacy and cookie policies apply. When you follow a link, your browser may tell the other website the domain you came from.

Email links open the email program on your device.

We may update this policy if the website or the services we use change, for example if we start sending the newsletter. The current version is always available on this page, with the date of the latest update shown at the top.