Privacy policy
How we handle your data.
Information under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) for anyone who visits orbis.voyage or writes to us.
Last updated: 22 October 2026
Data controller
Davide Zampognaro, owner of the Orbis project, based in Rome (Italy), VAT no. IT18420201008. For any privacy request, write to [email protected].
What data we collect
Data you send us: the contact form opens your own email app with a ready-made message. We only receive what you choose to send by email: name, agency, email address, approximate number of trips and your message.
Technical browsing data: like any website, the servers hosting these pages log some technical information for security (IP address, date and time, requested page, browser). We do not use it to profile you.
Local preferences: your light or dark theme choice is stored only in your browser (localStorage) and is never sent to us.
Cookies and third-party tools
The site uses no profiling cookies and no analytics or advertising tools. Fonts are hosted together with the site: no requests are made to Google Fonts or other external services. That is why we do not ask for cookie consent.
Why we process it and on what basis
To answer your requests and arrange a demo (pre-contractual steps taken at your request, Art. 6(1)(b) GDPR).
To keep the site secure and working (legitimate interest, Art. 6(1)(f) GDPR).
How long we keep it
Emails for as long as needed to handle your request and, if no business relationship follows, for no more than 24 months. Technical logs only as long as strictly needed for security, normally no more than 30 days.
Who may receive it
Only the providers that help us run the service, appointed as data processors: the hosting and CDN provider (Cloudflare) and the email provider. Orbis application servers are located in the European Union (Frankfurt, Germany). Any transfer outside the European Economic Area only happens with the safeguards required by the GDPR, such as standard contractual clauses. We never sell or share your data.
Your rights
You can ask at any time to access, correct, erase, restrict or port your data, and object to processing based on legitimate interest. Just write to [email protected]: we reply within 30 days.
If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or the authority in your country.
Traveller data inside the platform
This policy covers the website. Data that agencies upload to Orbis for their clients is processed by us as a processor on behalf of the agency, which remains the controller, under a data processing agreement (DPA) signed with each agency.