Part 1

Privacy Policy

This Privacy Policy describes how visitamedinbali.com (“the Site,” “we,” “us,” or “our”) collects, uses, and protects personal data in accordance with Regulation (EU) 2016/679 (“GDPR”) and applicable data protection law.

1. Data Controller

The Data Controller responsible for this website is:

Hdemia Digitale LLC
Registered address: #2184 Philadelphia Pike, Claymont De US
Tax/company identifier: 10032381
Email: info@hdemiadigitale.it

For any request relating to your personal data, you may contact us at the email address above.

2. Data We Collect and Why

We collect only the personal data that is strictly necessary for the operation of the Site. Below is a full description of each processing activity.

a) Technical and navigation data

When you visit the Site, our web server automatically records certain technical information required for its operation. This includes your IP address, browser type and version, operating system, referring URL, pages visited, and the date and time of your request. This data is collected automatically and is not linked to any identifiable user. It is used solely to ensure the correct functioning of the Site, to diagnose technical errors, and to protect the infrastructure against abuse. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). This data is retained in server logs for a maximum of 30 days, after which it is deleted.

b) Comments on articles

When you leave a comment on the Site, we collect the data you enter in the comment form: your name, email address, optional website URL, and the content of your comment. We also collect your IP address and browser user agent string to help with spam detection. Your email address and IP address are not displayed publicly. Your name and comment content are published on the page if the comment is approved. This processing is based on your explicit consent, given by submitting the form (Art. 6(1)(a) GDPR). You may request deletion of your comment at any time by contacting us. Approved comments are retained indefinitely unless you request removal; unapproved comments and spam are deleted within 30 days.

If you choose to save your name and email in the browser for future comments, this information is stored in your browser via cookies (see the Cookie Policy section below).

c) Direct email contact

If you contact us by email at info@hdemiadigitale.it, we collect the personal data you choose to include in your message (typically your name, email address, and the content of your inquiry). This data is used solely to respond to your request. The legal basis is our legitimate interest in managing communications (Art. 6(1)(f) GDPR), or pre-contractual measures if the inquiry relates to a potential business relationship. We retain email correspondence for as long as is necessary to manage your request and any follow-up, and for a maximum of 3 years thereafter, unless legal obligations require longer retention.

d) Affiliate links and third-party booking platforms

Some pages on this Site contain affiliate links to third-party services such as Booking.com, GetYourGuide, Viator, and similar platforms. These links are inserted manually in the content. When you click one of these links, you are directed to the third-party website, which may set its own cookies and collect your data according to its own privacy policy. We do not transmit any personal data to these platforms before you click, and we do not have access to any data collected by them after you click. Any purchase or booking you make on those platforms is governed by their respective terms and privacy policies. We receive a commission only if a transaction is completed, and this information is provided to us in anonymized aggregate form.

3. Legal Basis for Processing

We process personal data only where we have a lawful basis under the GDPR. The bases we rely on are:

• Consent (Art. 6(1)(a)): for comments submitted on articles and for optional cookies requiring consent (see Cookie Policy).
• Legitimate interest (Art. 6(1)(f)): for server logs, security, and email correspondence management. Our legitimate interest in these cases does not override your rights and freedoms.
• Legal obligation (Art. 6(1)(c)): where we are required to retain or disclose data to comply with applicable law.

4. Data Transfers and Processors

The Site is hosted on servers provided by a third-party hosting provider. Personal data collected through the Site may be stored on servers located within or outside the European Economic Area. Where data is transferred outside the EEA, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) in accordance with Chapter V of the GDPR.

We use Complianz as our consent management platform. Complianz processes limited data (cookie preference records) to document and manage user consent. For details, see Complianz’s Privacy Statement.

We do not sell, rent, or share personal data with third parties for their own marketing purposes. We do not use Google Analytics or any other analytics service that transmits personal data to third parties.

5. Your Rights Under the GDPR

If you are located in the European Economic Area (or the UK, or another jurisdiction that affords equivalent rights), you have the following rights with respect to your personal data:

• Right of access (Art. 15): you may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): you may request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): you may request deletion of your data in certain circumstances (“right to be forgotten”).
• Right to restriction of processing (Art. 18): you may request that we limit how we use your data in certain circumstances.
• Right to data portability (Art. 20): where processing is based on consent or a contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object (Art. 21): you may object to processing based on our legitimate interest at any time.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at info@hdemiadigitale.it. We will respond within 30 days of receiving your request. If you believe your rights have not been respected, you have the right to lodge a complaint with your national data protection supervisory authority.

6. Minors

This Site is not directed at children under the age of 16. We do not knowingly collect personal data from minors. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

7. Changes to This Policy

We may update this Privacy Policy from time to time. The date of the most recent revision is indicated at the top of this page. Continued use of the Site after any changes constitutes acceptance of the updated policy. For significant changes, we will make reasonable efforts to notify users through the Site.