Skip to content

Cookies and privacy

Choose which cookie categories to allow. You can change your mind at any time from the “Cookie preferences” link.

CM Lake Como Tour

Privacy policy

This policy explains how CM LAKE COMO TOUR S.R.L. Unipersonale processes the personal data of people who visit https://www.cmlakecomotour.com and of those who contact us, under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

CM LAKE COMO TOUR S.R.L. Unipersonale, VAT no. IT04142170135, registered office: Via Asiago 25/d, 22100 Como (Tavernola). Privacy contact: info@cmlakecomotour.com, certified email: cmlakecomotour@pec.it.

2. Data we process

  • Data you give us: when you fill in the contact form or write to us by email, phone or WhatsApp (name, email, phone, date and number of guests, message).
  • Browsing data: IP address, browser type and pages visited are processed by the systems that run the site, for its operation and security.
  • Cookies and similar technologies: described in the cookie policy.

3. Why we process it and on what legal basis

  • Answering your requests and preparing quotes or bookings: pre-contractual measures or performance of a contract (Art. 6(1)(b) GDPR).
  • Site security and correct operation: legitimate interest (Art. 6(1)(f) GDPR).
  • Complying with legal obligations, for example tax and accounting if a contract follows (Art. 6(1)(c) GDPR).
  • Statistics and marketing through non-technical cookies: consent (Art. 6(1)(a) GDPR and Italian Privacy Code Art. 122), which you can withdraw at any time from the cookie preferences.

4. Who we share data with

Data may be processed by providers who supply services on our behalf, appointed as data processors where required: Cloudflare (website hosting and storage of booking requests), SMTP2GO (email notifications of requests), Cloudflare (Turnstile anti-spam check on the contact form); for statistics and marketing tools: Google Ireland Limited. We do not sell your data.

5. Transfers outside the European Economic Area

Some of our providers (Cloudflare, SMTP2GO, Google) may process data in the United States. The transfer relies on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

6. How long we keep it

Requests received through the form are kept for 12 months and then deleted, unless the law requires otherwise or we need to defend a right. Browsing data is kept by providers for the technical time needed.

7. Your rights

You can ask for access, rectification, erasure, restriction, portability and object to processing (Arts. 15-22 GDPR) by writing to info@cmlakecomotour.com. You can withdraw consent at any time, without affecting the lawfulness of processing carried out before.

8. Complaints

You have the right to lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority of your country.

9. Whether providing data is mandatory

The required form fields are needed to answer your request: without them we cannot follow it up. Other data is optional.

10. Updates

Last updated: 5 November 2026.

Request a date