Last Updated: 15/05/2025
1. Data Controller
THUNDER S.r.l. – Società Benefit (“we” or “the Company”), headquartered at Strada Nazionale Sempione Oltrefiume 24, 28831 Baveno (VB) – Italia, VAT ID 02792180032, is the data controller for personal data collected through the website aurumjourney.com (“the Website”).
2. Types of Data Collected
- Browsing Data: Information collected automatically, such as IP address, browser type, operating system, and activity on the site.
- Voluntarily Provided Data: Information submitted via contact forms or newsletter subscriptions (e.g., name, email, phone number).
- Booking and Purchase Data: Data collected through the integration with BookingKit. See their Privacy Policy for more details.
- Marketing Data: Preferences and interactions with our promotional communications, collected through newsletter subscriptions.
3. Purpose and Legal Basis of Processing
| Purpose | Legal Basis |
|---|---|
| Responding to contact form inquiries | Pre-contractual measures (Art. 6(1)(b) GDPR) |
| Managing bookings and purchases via BookingKit | Contractual execution (Art. 6(1)(b) GDPR) |
| Sending newsletters and promotional communications | User consent (Art. 6(1)(a) GDPR) |
| Anonymous statistical analysis via Google Analytics | Legitimate interest (Art. 6(1)(f) GDPR) |
| Remarketing and targeted advertising via Meta and TikTok pixels | User consent (Art. 6(1)(a) GDPR) |
4. Data Retention
- Contact Form Data: Retained as long as necessary to respond.
- Booking Data: Retained per legal and tax obligations.
- Marketing Data: Retained until the user withdraws consent.
- Browsing Data: Anonymized and stored per third-party service policies.
5. Data Sharing and Transfers
Personal data may be shared with:
- Marketing agencies and collaborators assisting Thunder S.R.L.
- Third-party providers like Google Analytics, Meta, TikTok, and Brevo.
- Authorities when required by law.
Some providers may transfer data outside the EEA. In such cases, we ensure compliance with GDPR using Standard Contractual Clauses (SCCs).
6. User Rights
Users have the right to:
- Access their personal data.
- Rectify inaccurate or incomplete data.
- Request deletion of data under legal conditions.
- Restrict processing under certain conditions.
- Object to data processing for legitimate reasons or marketing purposes.
- Withdraw consent at any time.
- Data portability, to receive their data in a structured format.
To exercise these rights, users can contact us at info@aurumjourney.com.
7. Policy Updates
We reserve the right to update this Privacy Policy at any time. The latest version will always be available on the Website.
