Privacy notice

Who the controller is and how to reach them

The data controller is the operator of tickets.torino.it, an independent editorial site about Turin’s museums and tickets. For any request about your personal data, including exercising the rights described below, email hi@tickets.torino.it: it is the controller’s direct contact address. No data protection officer has been appointed, as none is required for this kind of activity.

This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003).

What data we process, why and for how long

The site has no sign-up, forms, newsletter or comments. We process very little personal data, and only in three situations.

Browsing the site

Like any web server, the one hosting this site records the requests it receives in a log file: IP address, date and time, the page requested (including booking links), the referring page and browser type. Purpose: serving pages, keeping the site secure and spotting abuse and technical errors. Legal basis: our legitimate interest in running the site securely (Art. 6(1)(f) GDPR). Retention: no more than 30 days, unless the logs are needed for longer to investigate an attack or abuse.

Emails you send us

If you write to us, we process your address, your name if you give it, and the content of your message. Purpose: replying to you and, where needed, correcting our pages. Legal basis: our legitimate interest in answering people who contact us (Art. 6(1)(f)); for requests about personal data, our legal obligation to deal with them (Art. 6(1)(c)). Retention: up to 12 months after the last message, or less if you ask us to delete it, unless the conversation is needed to establish or defend a legal claim. Giving us this data is optional, but without an address we cannot reply.

Booking links to our partners

The booking buttons and boxes lead to an address on our own domain that forwards you to Tiqets, GetYourGuide or Headout and adds our affiliate code. That step appears in the server logs like any other page. Partners give us reports on the bookings that came through our links (for example the product, date and commission amount), which contain no name, email or other contact details of the person who booked.

Cookies, analytics and partner widgets

The site sets no cookies of its own, stores nothing in your browser and uses no analytics, advertising or profiling tools. Fonts and images are served from our own server. The site search downloads an index of our pages from our server and filters the results in your browser: what you type is not sent anywhere.

Some museum and attraction pages include an availability box from Tiqets or GetYourGuide. The box is loaded from the platform’s servers when you scroll down to it: at that point your browser connects to those servers, which receive your IP address, the page you are on and technical browser data, and may set their own cookies. To speed up loading, our pages also ask your browser to prepare a connection to those servers in advance; in that case the provider can see your IP address but receives neither the page nor any cookies. Tiqets and GetYourGuide process this data as independent controllers under their own privacy policies: Tiqets and GetYourGuide. You can block third-party cookies in your browser settings, and the rest of the page will keep working.

Who receives the data

• Hosting provider: the site is hosted on servers run by HOSTKEY B.V. in the Netherlands, which processes the logs on our behalf as a data processor.
• Email provider: stores messages sent to hi@tickets.torino.it on our behalf, as a data processor.
• Tiqets and GetYourGuide: receive the technical data described above when you load one of their availability boxes, as independent controllers.
• Booking partners: when you follow a link to Tiqets, GetYourGuide or Headout, everything you do on their site, including booking and payment, is governed by their own terms and privacy policy.

We do not sell or pass data to advertisers or anyone else. We do not transfer data outside the European Economic Area ourselves; any transfers made by our partners are described in their privacy policies.

Your rights

At any time you can ask to access your data, have it rectified or erased, restrict its processing, receive it in a machine-readable format (portability) and object to processing based on our legitimate interest (Articles 15–21 GDPR). Email hi@tickets.torino.it: we reply within one month of your request. That period can be extended by two further months only for particularly complex requests, in which case we will tell you within the first month. We may ask for some information to confirm that the request really comes from you.

If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the authority of the EU country where you live or work.

Changes to this notice

If we change the way we process data, for example by adding an analytics tool, we will update this page before the change takes effect and, where the law requires it, ask for your consent. Last updated: 23 September 2026. For the rules on using the site, see the terms of use.