Privacy Policy

This website is operated by NiKi srls, trading as Niki Tour, with its public office at Via Giulio Galli 66F, 00123 Rome, Italy.

NiKi srls is the data controller for personal information collected through this website. This means that it determines why and how that information is processed.

This policy applies to personal information collected through the current Niki Tour website, particularly through its contact and proposal-request forms.

Independent third-party websites linked from this site operate under their own privacy policies. Visitors should review those policies before sharing information with those websites.

Personal information may be used to:

• respond to enquiries;
• understand the requested journey;
• prepare and discuss a travel proposal;
• communicate about requested services;
• coordinate a proposal or confirmed service with relevant suppliers;
• maintain the security and reliable operation of the website;
• keep appropriate business records;
• comply with legal obligations; and
• establish, exercise or defend legal claims where necessary.

Niki Tour does not sell personal information.

The current website does not use information submitted through the proposal form for automated newsletters or advertising campaigns.

Under applicable data-protection law, the legal basis depends on the context and purpose of the processing. Niki Tour may process personal information where it is necessary for:

• steps taken at the visitor’s request before entering into a contract;
• performance of a contract where a service is later confirmed;
• legitimate interests in responding to enquiries, operating the website and protecting the business;
• compliance with legal obligations; or
• consent, where it is specifically requested for a separate purpose.

Personal information may be accessed or processed, where necessary, by:

• authorised members of the Niki Tour team;
• website hosting and technical service providers;
• Supabase, which provides inquiry storage;
• Resend, which provides internal email delivery;
• Vercel, which provides website hosting and server-side execution;
• travel suppliers or professional partners where needed to prepare or provide a requested service; and
• accountants, legal advisers or public authorities where legally required.

Each recipient receives only the information reasonably necessary for its role.

Some technology providers may process information using infrastructure located outside Italy or the European Economic Area. Where required, appropriate lawful safeguards are used in accordance with applicable data-protection law.

Personal information is retained only for as long as reasonably necessary to respond to the enquiry, prepare or provide requested services, maintain appropriate business records and comply with legal obligations.

Information connected to a confirmed customer relationship may be retained for longer where required for contractual, accounting, tax or legal purposes.

Niki Tour uses reasonable organisational and technical measures to protect personal information. Form submissions are processed server-side, and service credentials are not exposed publicly in the browser.

No internet transmission or electronic storage method can be guaranteed to be completely secure.

The current website does not use advertising cookies or behavioural-profiling technologies. Essential website and hosting functions may process limited technical information necessary to deliver, secure and diagnose the service.

Subject to applicable data-protection law, individuals may have the right to request access to, correction or deletion of their personal information; restriction of processing; objection to processing; and data portability where applicable. Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of earlier processing.

Individuals may also lodge a complaint with a competent data-protection authority, including the Garante per la Protezione dei Dati Personali in Italy. Niki Tour may request information needed to verify identity before completing a rights request.

The website and travel-request service are intended for adults. Niki Tour does not knowingly seek personal information directly from children through the proposal form. Adults may still make travel requests for families that include children.

Niki Tour is not responsible for the privacy practices of independent third-party websites. Visitors should review the privacy information provided by those websites before sharing personal information with them.

This policy may be updated to reflect changes in the website, services or legal requirements. The latest version will be published on this page with an updated date.

For privacy or website-related enquiries, contact Niki Tour through the contact form available on this website.