Skip to content
Dream Destination

Privacy Policy

Last updated 12 October 2026

Last updated: 12 October 2026

This policy explains how Dream Destination handles your personal data when you visit www.dreamdestination.it, send us a request, book a free call, receive a trip proposal, travel with us or sign up for our newsletter. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003 (the "Italian Privacy Code").

1. Who is the data controller

The data controller is Dream Destination S.r.l., Viale Abruzzi 13/A, 20131 Milan, Italy, VAT and tax code 14770430966 ("Dream Destination", "we", "us").

For any question about your data, write to info@dreamdestination.it or to our registered office.

We have not appointed a data protection officer (DPO), because it is not required for our activity.

2. What data we process

Data you give us

  • When you fill in the request form: first name, last name, email, phone number, country of residence, number of travellers, the trip or destination you are interested in, type of trip (for example couple, family, honeymoon), preferred dates and flexibility, and your message.

  • When you email us, write to us on WhatsApp, call us or talk to us during the free call: the data and information you choose to share to build your trip.

  • When you sign up for the newsletter: your email address.

  • When you confirm a trip: the data needed to book the services for you and the people travelling with you, such as full name, date and place of birth, nationality, identity card or passport details, contact details, any special requirements, and billing and payment details.

Other people's data. If you give us the data of people travelling with you (for example family or friends), please do so only after informing them, and ask them to read this policy. For travellers under 18, the data is provided by whoever has parental responsibility.

Special categories of data. For some services you may tell us about your health (for example allergies or intolerances, assistance needs or reduced mobility) or dietary requirements linked to your beliefs. We process this information only if you give it to us, only to arrange the services you request, and only with your explicit consent (Art. 9(2)(a) GDPR).

Browsing data. When you visit the site, the systems that run it automatically collect some technical data, such as IP address, browser and device type, pages visited and time of visit. We use it to run and protect the site and for aggregate visit statistics. For details on cookies and similar tools, see our Cookie policy.

3. Why we process your data and on what legal basis

  • a) To answer your requests, schedule and hold the free call, and prepare a trip proposal for you. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

  • b) To organise and book the trip you confirm, manage the contract, assist you before, during and after the trip, and handle payments. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

  • c) To process the health information or dietary requirements you share with us, for the services that need them. Legal basis: your explicit consent (Art. 9(2)(a) GDPR).

  • d) To comply with legal obligations, for example tax and accounting rules, tourism regulations and requests from authorities (including border authorities and carriers). Legal basis: legal obligation (Art. 6(1)(c) GDPR).

  • e) To send you our newsletter with trip ideas, tips and news. Legal basis: your consent (Art. 6(1)(a) GDPR).

  • f) If you are already our client, to email you about trips similar to those you have taken with us, until you object (you can do so at any time, including with the link in every email). Legal basis: legitimate interest (Art. 6(1)(f) GDPR and Art. 130(4) of the Italian Privacy Code).

  • g) To run the site securely and measure visits in aggregate form. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

  • h) To establish, exercise or defend our rights, including in court. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).

We do not use your data for automated decision-making or profiling, and we do not pass it to other companies for their own marketing.

4. Do you have to give us your data?

No. However, without the data marked as required in the form we cannot reply to you, and without the travellers' data we cannot book the services for the trip. Consent to the newsletter and to the processing of special categories of data is optional: if you do not give it, the only consequence is that you will not receive the newsletter, or that we will not be able to arrange the services that need that information.

5. How we process your data

We process data electronically and, where needed, on paper, with appropriate technical and organisational measures to protect it from unauthorised access, loss or misuse. Only authorised and trained people at Dream Destination can access it.

6. Who we share your data with

Your data is not made public. It may be shared, only as far as needed for the purposes above, with:

  • providers of your travel services: the trip's technical organiser, airlines and other carriers, hotels and accommodation, local partners, guides, drivers, rental companies, insurance companies;

  • providers who help us run our business, who process data on our behalf as processors (Art. 28 GDPR): the website platform and its hosting and database, email and newsletter services, messaging services, accounting, tax and legal advisers;

  • public authorities, when required by law.

An up-to-date list of our processors is available on request at info@dreamdestination.it.

7. Transfers outside the European Union

If your trip includes services outside the European Union, we must share the necessary data with local providers (for example hotels, carriers and local partners in the destination country). This transfer is necessary to perform the contract you requested (Art. 49(1)(b) and (c) GDPR).

Some technology providers may process data outside the European Union. In these cases the transfer is made to countries covered by a European Commission adequacy decision, or under the standard contractual clauses approved by the Commission or other safeguards provided for by Articles 45 and 46 GDPR.

8. How long we keep your data

  • Requests and proposals that do not become a trip: 24 months from the last contact, then we delete them.

  • Contract data, invoices and accounting records: 10 years from the end of the relationship, as required by law (Art. 2220 of the Italian Civil Code), or longer if needed for an ongoing dispute.

  • Health information and dietary requirements: until the end of the trip and the related assistance, unless needed to protect our rights.

  • Newsletter: until you unsubscribe. You can do so at any time with the link in every email.

  • Emails to clients about similar trips: until you object, and in any case no longer than 24 months after your last trip.

  • Browsing data: only as long as strictly necessary for technical and security purposes, as explained in the Cookie policy.

9. Your rights

At any time you can ask us to:

  • access your data and find out how we use it;

  • correct or complete it if it is wrong or incomplete;

  • erase it, unless we must keep it by law or to defend our rights;

  • restrict its processing;

  • receive it in a structured, machine-readable format, or have it sent to another controller (portability), when we process it under a contract or with your consent;

  • object to processing based on our legitimate interest and, at any time and without giving reasons, to processing for marketing purposes;

  • withdraw your consent, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, write to info@dreamdestination.it. We will reply without undue delay and in any case within one month, as required by the GDPR.

If you believe that the processing of your data breaches the law, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work, or take legal action.

10. Changes to this policy

We may update this policy, for example if our services or the law change. The current version is always on this page, with the date of the last update at the top. If the changes are significant, we will also let you know by email where possible.

Message us on WhatsApp