Privacy Policy and Accessibility Act

PRIVACY POLICY

WEBSITE NOTICE PURSUANT TO ARTICLES 13 AND 14 OF EUROPEAN REGULATION 2016/679 (GDPR)

Summary notices are gradually provided or displayed on the pages of the website prepared for specific on-demand services involving data collection forms. Please note that, in order to offer a complete service, our website may contain links to other websites not managed by BLUVACANZE SPA. BLUVACANZE SPA is not responsible for errors, content, cookies, unlawful moral content, advertising, banners or files that do not comply with current legal regulations, nor for the privacy compliance of websites not managed by the Data Controller.

BLUVACANZE SPA, as the Data Controller of your personal data pursuant to and for the purposes of Articles 13 and 14 of EU Regulation 2016/679, hereby informs you that said regulation ensures the protection of individuals regarding the processing of personal data, and such processing will be carried out in accordance with principles of fairness, lawfulness, transparency, and the protection of your privacy and rights.

The personal information and data you provide or otherwise acquired through the use of this website will be processed in accordance with the provisions of the regulation mentioned above and the confidentiality obligations it sets forth.

DATA SUBJECTS AND DATA RETENTION PERIODS

A) Users (visitors) of the website viaggi.carrefour.it (Carrefour in collaboration with Bluvacanze)

Types of Data Processed

Browsing Data: IP addresses or domain names of computers and other devices used by users who connect to the website; URI (Uniform Resource Identifier) addresses of requested resources and related time details; parameters related to the user’s operating system and IT environment; entry and exit pages; navigation index and behavioral patterns during page visits.

Personal Data Voluntarily Provided by Users: Optional, explicit, and voluntary emails sent to addresses on this site, and form submissions involve the subsequent acquisition of the sender’s personal data (e.g., name, surname, email address). Specific summary notices are present on pages with forms.

Purposes of the Processing

Your data collected during browsing will be processed for the following purposes:

1. Performing operations strictly related and instrumental to managing relationships with users or visitors of the website;
2. Collecting, storing, and processing data for statistical analysis, including in anonymous and/or aggregated form;
3. Statistical analysis to verify the quality of services offered by the website;
4. Sharing interactions and usage data with social network managers for pages where cookies integrating third-party software products are installed;
5. Improving the browsing experience to provide services and advertising messages in line with preferences expressed during navigation.

The processing of data for purpose 1 is necessary to fulfill your request. Refusal may limit or prevent full use of the site’s features. The legal basis is Article 6.1.b of the GDPR.

Providing data for purposes 2, 3, and 4 is optional and based on your consent (Article 6.1.a GDPR). Refusal will not impact access to site features. Consent is granted by clicking “ACCEPT ALL” in the cookie banner. More details are available in the [cookie policy].

Browsing data are retained for the durations indicated in the cookie policy.

COOKIES AND OTHER TRACKING SYSTEM

Your data is also collected via tools and services provided by third parties and stored by them. For further details, please refer to the “cookie policy.”

BLUVACANZE SPA acts merely as an intermediary for links in the cookie policy and cannot be held liable for changes made by third parties.

B) "Open an Agency" Section

By completing the form in the “Open an Agency” section, your data will be used to assess a potential collaboration. Providing this data is optional, but refusal will prevent the evaluation of your request.

Data is retained as long as necessary to provide the requested service.

C)Contact Section, Social Media Ads & Landing Pages

By completing forms in the “Contact Us” section, or via landing pages and social media ads, your data (name, surname, email address, phone number) will be used to respond to your inquiry. The legal basis is Article 6.1.b of the GDPR. Data provision is optional, but refusal will prevent a response.

With your consent, data may be used for promotional purposes (emails, calls, paper mail, SMS, instant messaging, social networks) and entered into the company’s CRM. Consent can be revoked at any time via the “UNSUBSCRIBE” link in email footers or by contacting the Data Controller.

Data is retained until you withdraw consent or object to processing.

D)Careers Section

By submitting a form in the “Careers” section, your data will be used to manage potential employment opportunities. Providing data is optional, but refusal will prevent processing of your CV.

Your CV should include only identifying data. Please avoid including special categories of personal data (Art. 9 GDPR). If such data is provided, the Data Controller may decide whether to keep or delete it.

Retention: up to 2 years.

METHOD OF DATA PROCESSING

Your personal data will be processed manually and electronically, using cookies (see cookie policy) and third-party software. The processing is compliant with Articles 6 and 32 of the GDPR and appropriate security measures.

The Data Controller uses newsletter and promotional email systems with reporting tools. These reports may include: number of readers, open rates, unique clicks, click details, delivery statistics, unsubscribe lists, and click tracking. These data help to compare and improve communication results.

USE OF SOCIAL MEDIA PLATFORMS

BLUVACANZE SPA may provide links to external social media platforms managed by third parties. The company is not responsible for the accuracy or content of such external platforms and encourages users to consult their respective privacy policies.

RECIPIENTS AND DISCLOSURE OF PERSONAL DATA

Your data will be processed by authorized staff and may be shared with:

• External parties providing cloud services;
• Companies managing IT infrastructure, hosting, and backup services.

The full list of processors is available on request.

Your data will not be disclosed publicly.

DATA TRANSFERS

Your data may be transferred outside the EU as per the cookie policy of third-party service providers. For further details, contact: [email protected]

Company communications are managed using servers located within the EU.

MINORS

The website is not intended for use by minors, and data from minors is not knowingly collected. If collected, such data will be promptly deleted. Parental consent is required for any data processing involving minors.

DATA CONTROLLER

The Data Controller is BLUVACANZE SPA, based at Piazzale Lorenzo Lotto, 2 – 20148 Milan, Italy, represented by its legal representative pro tempore.

The Data Protection Officer (DPO) can be contacted at: [email protected]

You may exercise your rights (deletion, limitation, rectification, portability, objection, etc.) as per Articles 15–22 of GDPR by writing to the same email or using the form available in the site’s privacy section.

You have the right to file a complaint with the supervisory authority.

APPLICATION OF THIS NOTICE

If you have questions about this privacy notice, contact BLUVACANZE SPA at [email protected] or through the contact details provided.

CHANGES TO THIS POLICY

BLUVACANZE SPA reserves the right to update this policy in compliance with legal developments and user feedback. Updates will be published promptly on the privacy page.

DATA SUBJECT RIGHTS

EU Regulation 2016/679: Articles 15–22

You have the right to:

• Access your personal data and receive intelligible communication;
• Know the origin, purpose, and logic of processing;
• Know the details of the Data Controller and data recipients;
• Request updates, rectification, or deletion;
• Request data portability;
• Object to processing, including for marketing purposes.

Accessibility Statement

Our Commitment to Accessibility

At Bluvacanze S.p.A., we are deeply committed to ensuring an accessible and inclusive environment and experience for everyone who interacts with us. We strive to accommodate individuals with disabilities so that everyone can easily access our services, travel solutions, and opportunities.

Accessibility Solutions for Travelers

Bluvacanze removes access barriers through the following solutions:

• Alternative contact channels (high street agencies, call center)
• Expert travel consultants trained to engage with empathy

Website Accessibility Features

The website is compatible with all modern browsers and assistive technologies, including but not limited to Firefox, Chrome, Safari, and Edge.

Limitations

Please note:

• PDF files may not always be accessible
• Interactive maps are not accessible to users with visual impairments
• Some videos lack audio descriptions

Legal References

This website is committed to ensuring the accessibility of its digital content in compliance with:

• Law No. 4 of January 9, 2004 (known as the "Stanca Law")
• Legislative Decree 82/2022, which implements Directive (EU) 2019/882 – European Accessibility Act
• WCAG 2.1 Guidelines – Level AA
• UNI CEI EN 301549 Technical Standard

Compliance Status

This website is currently undergoing updates and is partially compliant with the required accessibility standards.

Alternative Contact Channel

If you experience difficulties using the website, please contact us at the following phone number: +39 02 2412‌14‌89

Reporting to AgID

If you do not receive a satisfactory response or receive no response at all, you may submit a report to the Agency for Digital Italy (AgID) via the official website: https://www.agid.gov.it

Date of the Statement: 23/09/2025

Accessibility Assessment

This statement is based on an internal self-assessment and will be periodically updated based on the progress of the accessibility improvement project.