Your Privacy Matters

Privacy Policy

Last updated: August 2026

At TukTuk Milan, we respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us or make a booking for our services.

GDPR

Your personal data is handled responsibly

We collect and process personal information only where reasonably necessary to provide our services, manage bookings, communicate with customers and meet our legal obligations.

Data Controller

The data controller responsible for the processing of your personal data is:

TukTuk Milan

Phone: +39 344 612 9703
Email: tuktukmilan@yahoo.com

If you have any questions regarding this Privacy Policy or the processing of your personal data, you can contact us using the details above.

Personal Data We Collect

Depending on how you interact with our website and services, we may collect the following information:

First and last name
Email address
Telephone number
Number of passengers
Booking date and time
Selected tour or service
Meeting point or destination
Information provided through contact or booking forms
Payment and transaction information, where applicable
Any other information you voluntarily provide to us

We only collect information that is reasonably necessary to provide our services and communicate with you.

How We Collect Your Data

We may collect personal data when you:

Make a booking
Contact us by email or telephone
Complete a contact form
Submit a booking or enquiry form
Request information about our services
Browse or interact with our website

Some technical information may also be collected automatically when you visit our website, such as IP address, browser type, device information and website usage data.

How We Use Your Personal Data

We may use your personal data to:

Process and manage bookings
Provide our tours and transportation services
Contact you regarding your booking
Respond to enquiries and requests
Process payments where applicable
Send booking confirmations and service-related communications
Improve our website and services
Prevent fraud, misuse or security incidents
Comply with legal and regulatory obligations

We will not use your personal data for purposes that are incompatible with the purposes described in this Privacy Policy unless permitted or required by applicable law.

Legal Basis for Processing

Where applicable under the General Data Protection Regulation (GDPR), we process personal data on one or more of the following legal bases:

Performance of a contract or steps taken at your request before entering into a contract
Compliance with a legal obligation
Our legitimate interests, provided that these interests do not override your fundamental rights and freedoms
Your consent, where consent is required

You may withdraw consent at any time where processing is based on consent.

Booking and Payment Information

When you make a booking, we may need to process information necessary to arrange and provide the requested service.

Where payments are processed through third-party payment providers, your payment information may be handled directly by those providers in accordance with their own privacy policies and security procedures.

TukTuk Milan does not intentionally store complete payment card details unless this is specifically required and legally permitted.

Communication

We may use the contact information you provide to communicate with you regarding:

Your booking
Changes to your reservation
Meeting points and schedules
Service-related information
Responses to your enquiries

We may also contact you regarding promotional communications where permitted by applicable law and, where required, with your consent.

You may opt out of marketing communications at any time.

Sharing Personal Data

We do not sell or rent your personal data.

Your information may be shared with trusted service providers where necessary to operate our business and provide our services.

These may include:

Payment service providers
Booking and reservation platforms
Website hosting providers
IT and technical service providers
Accounting and administrative service providers
Professional advisers
Public authorities where required by law

Third-party providers are expected to process personal data only as necessary for the relevant service and in accordance with applicable data protection requirements.

International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we will take appropriate steps to ensure that the transfer is carried out in accordance with applicable data protection laws.

Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

Certain information may need to be retained for longer periods where required by tax, accounting, legal or regulatory obligations.

When personal data is no longer required, it will be securely deleted or anonymised where appropriate.

Data Security

We take reasonable technical and organisational measures to protect personal data against:

Unauthorised access
Accidental loss
Destruction
Alteration
Disclosure
Other unlawful processing

However, no online transmission or storage system can be guaranteed to be completely secure.

Cookies

Our website may use cookies and similar technologies to provide functionality, analyse website traffic and improve the user experience.

Some cookies may be placed by third-party services used on our website.

For more information about the cookies we use and how you can manage them, please see our Cookie Policy.

Your Rights Under GDPR

If the GDPR applies to you, you may have the following rights:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete information.
Right to erasure – to request deletion of your personal data in certain circumstances.
Right to restriction – to request that we restrict the processing of your personal data in certain circumstances.
Right to data portability – to receive certain personal data in a structured, commonly used and machine-readable format.
Right to object – to object to certain types of processing, including direct marketing.
Right to withdraw consent – where processing is based on your consent.

These rights are subject to applicable legal conditions and limitations.

How to Exercise Your Rights

To exercise any of your rights or ask questions about the processing of your personal data, please contact us:

Email: tuktukmilan@yahoo.com
Phone: +39 344 612 9703

We may need to verify your identity before responding to certain requests.

We aim to respond to valid requests within the time period required by applicable law.

Complaints

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Italy, the relevant authority is the Garante per la protezione dei dati personali.

Children's Privacy

Our website and services are not specifically directed at children.

We do not knowingly collect personal data from children through our website without appropriate consent or another lawful basis where required by applicable law.

Third-Party Websites

Our website may contain links to third-party websites or services.

TukTuk Milan is not responsible for the privacy practices, content or security of third-party websites.

We recommend reviewing the privacy policies of any third-party website you visit.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, legal requirements or data processing practices.

The updated version will be published on this page with a revised "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or how we process your personal data, please contact: