...

Privacy Policy

Maldivando Privacy Policy

Last updated: May 19, 2026

Welcome to Maldivando.it (the "Website"). Your privacy and the protection of your personal data are of utmost importance to us. This Privacy Policy outlines how this Website collects, manages, and processes personal data in compliance with EU Regulation 2016/679 (GDPR) and Italian privacy laws.

1. Data Controller

The Data Controller for the personal data collected through this Website is the Maldivando.it management team, reachable for any legal or privacy inquiries at the dedicated email address: info@maldivando.it.

2. Types of Data Processed

While browsing or interacting with this Website, we may collect the following categories of data:

  • Browsing Data: IP addresses, URI/URL strings of requested resources, timestamp of requests, server response size, and operating system parameters. This data is processed anonymously for statistical and security optimization purposes.
  • Data Provided Voluntarily by the User: First name, last name, email address, phone number, or specific travel preferences supplied when filling out contact forms, asking about transport timetables, or subscribing to our newsletter for local guesthouse deals.

3. Purposes and Legal Basis for Processing

Your personal data is processed for the following objectives:

  • Service Provision (Legal basis: Performance of a contract): Enabling you to explore local island profiles, calculate logistics, review transport options, and customize your travel planning.
  • Responding to Inquiries (Legal basis: Legitimate interest): Managing and replying efficiently to messages or customized travel requests sent via our contact forms.
  • Marketing and Newsletters (Legal basis: Explicit consent): Sending curated updates on local islands, travel guides, and exclusive vacation deals for the Maldives. Consent can be revoked at any moment.
  • Security and Maintenance (Legal basis: Legitimate interest): Monitoring infrastructure performance and preventing cyber attacks or fraudulent behaviors within the multitenant network.

4. Data Retention Period

Personal data will be stored only for the timeframe necessary to fulfill the original collection purposes:

  • Contact form submissions and inquiries will be stored for a maximum of 12 months after resolution.
  • Newsletter subscription records will be kept active until you request unsubscription (opt-out), which can be triggered instantly via the footer link in any email.

5. Data Recipients and International Transfers

Your data is never sold or shared with external third parties for unrelated advertising purposes. Data is accessed only by trusted technical IT partners (such as our secure SiteGround EU hosting infrastructure or certified email marketing platforms). Transfers outside the EEA, if any, are protected by standard contractual clauses (SCCs).

6. Rights of the Data Subject

Under the GDPR, you possess the right to access, rectify, erase ("right to be forgotten"), restrict, or object to the processing of your personal data, as well as the right to data portability. To exercise these rights, please contact us at our support email. You also maintain the right to lodge an official complaint with the Italian Data Protection Authority (Garante Privacy - garanteprivacy.it).