Effective date: 03/10/2026
1. Who we are
This website (calanova.co and offer.calanova.co, together “the Site”) is operated by:
Ad Maiora Srl Corso Nizza, 84 — 12100 Cuneo (CN) — Italia P.IVA: 03927010045 Email: [email protected]
Ad Maiora Srl is the data controller for personal data processed through the Site and the Calanova newsletter, within the meaning of Regulation (EU) 2016/679 (“GDPR”).
2. What data we collect and why
a) Newsletter subscription. When you subscribe, we collect your email address and, where you provide it, your first name. Legal basis: consent (Art. 6(1)(a) GDPR). We record the date, time, and source of your subscription as evidence of consent.
b) Engagement and interest data. When you click links in our emails or on our offer pages, we record which links you clicked and when. We use these signals to understand which destinations and topics interest you and to select more relevant editorial content for you. We do not use email opens for interest profiling. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR) in providing more relevant editorial content to people who have chosen to receive the Calanova newsletter. You may object to this processing at any time, or request access to or erasure of your interest profile, by contacting [email protected]. You may also unsubscribe from marketing emails at any time.
c) Affiliate link tracking. Some links on the Site and in our emails are affiliate links, routed through our own redirect system. When you click one, the destination partner may record that the visit came from Calanova. If you later make a purchase, the partner reports an anonymized conversion to us so we can be paid commission. We receive transaction value and partner reference — not your payment details.
d) Website analytics. With your consent (via the cookie banner), we use Google Analytics 4 to understand aggregate site usage. Legal basis: consent (Art. 6(1)(a)).
e) Advertising measurement. With your consent, we use the Meta Pixel and Meta Conversions API to measure the effectiveness of our advertising on Meta platforms. Legal basis: consent (Art. 6(1)(a)).
f) Technical logs. Our hosting and CDN infrastructure records IP addresses and request data in server logs for security and operation of the Site. Legal basis: legitimate interest (Art. 6(1)(f)). Logs are retained for a limited period and then deleted.
3. Cookies and similar technologies
The Site uses:
- Strictly necessary cookies — required for the Site to function (no consent needed).
- Analytics cookies (Google Analytics 4) — only with your consent.
- Advertising cookies (Meta Pixel) — only with your consent.
You can change or withdraw your cookie choices at any time via the cookie settings link in the footer. Affiliate partners may set their own cookies on their own websites after you click through to them; those are governed by their privacy policies.
4. Who we share data with
We use the following categories of processors and partners:
- Email delivery: Amazon Web Services (Amazon SES, EU region — Ireland).
- Hosting and infrastructure: Hetzner Online GmbH (Germany); DigitalOcean; Cloudflare (CDN, security, media storage); Supabase (database); Vercel (application hosting).
- Analytics: Google Ireland Ltd (Google Analytics 4).
- Advertising: Meta Platforms Ireland Ltd.
- Affiliate networks and travel partners: including booking platforms and affiliate networks such as Stay22, Travelpayouts, Awin, CJ, and Impact. The current list of active partners is available on request at [email protected].
We do not sell your personal data.
5. International transfers
We prioritize EU-based processing: email sending runs from the AWS Ireland region and core infrastructure runs in the EU. Some providers (e.g. Google, Meta, Cloudflare, Vercel, DigitalOcean) may process data in the United States. Where that happens, transfers are protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
6. How long we keep data
- Subscriber and engagement data: we retain your subscriber record, sending history, and engagement history for the lifetime of the subscriber record. Unsubscribing stops future marketing emails but does not automatically erase the subscriber record or its historical activity. You may request erasure at any time by contacting [email protected].
- Suppression and erasure records: when you unsubscribe, we retain the information necessary to ensure that we do not send you marketing emails against your wishes and to demonstrate compliance. When an erasure request is completed, identifying personal data is deleted, redacted, or irreversibly anonymized as applicable. We may retain non-identifying operational history and a minimal hash-only suppression record needed to prevent future unwanted sending. Suppression records are retained indefinitely for this purpose.
- Consent records: retained as long as necessary to demonstrate lawful processing.
- Analytics data: per the retention settings of the analytics tool (maximum 14 months in Google Analytics 4).
7. Your rights
Under the GDPR you have the right to access, rectify, and erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time (without affecting prior processing). Every email we send contains a one-click unsubscribe link.
To exercise any right, including the right to object to interest profiling or to request access to or erasure of your interest profile, write to [email protected]. We respond within one month.
You also have the right to lodge a complaint with the Italian supervisory authority: Garante per la Protezione dei Dati Personali (www.garanteprivacy.it) or the authority of your country of residence.
8. Children
The Site and newsletter are not directed at anyone under 16, and we do not knowingly collect data from minors.
9. Changes
We may update this policy. Material changes will be signposted on the Site and, for subscribers, by email. The current version is always available at this address.