Privacy & cookies
Your data, in plain words
Last updated: 12 October 2026
This page explains what personal data Bricole collects, why, how long it is kept, who else handles it, and what the site stores on your device. If anything is unclear, write to hello@bricoletravel.com.
1. Who is responsible
The data controller is Nicolò Carraro, who runs Bricole, Italy. Contact for anything about your data: hello@bricoletravel.com.
2. What we collect
- When you ask for a proposal: first and last name, email address, arrival and departure dates, your interests if you choose them, and your agreement to the terms of the request. If you reached the site through the link of the place where you are staying, or chose it in the form, we also record which place it was.
- If you go ahead: what you tell us to plan your stay — interests, pace, number of people, whether you have a car — and, only if you choose to tell us, dietary requirements or mobility needs. These last ones can count as health information: we use them only to plan your days and to inform the places that will host you, only with your explicit consent, and we delete them 30 days after your stay.
- Payments: handled by Stripe on its own secure page. We receive confirmation that you paid, never your card details.
- Invoices: once you pay, Italian law requires an electronic invoice: we ask for your address and, if you live in Italy, your tax code, and the invoice is sent to the Italian Revenue Agency's invoicing system.
- After your stay: the day after you leave we send you a short questionnaire: your ratings, two optional comments and, for one place you booked chosen at random, roughly how much your group spent there. Answering is up to you. We use the answers to improve the service and to check that the spend our partners report to us, on which some of them pay us a commission, is right.
- AI record: for every text prepared with artificial intelligence we keep what was sent to it and what it returned, so that we can show how the text was produced (see section 6).
- Anonymous visit statistics: how long a visit lasts, which parts of the page are read, whether the request form is sent, which site the visit came from and whether it is a phone or a computer. No name, no IP address and no cookie are used, and nothing is saved on your device: each visit is identified only by a random number that exists in the page while it is open and disappears when you leave or reload it.
- Technical logs: like any website, the providers that host the site, the database and our email automatically record some technical details of each request for security, such as IP address, date and time and browser type. They keep them for a short time, and we do not use them to recognise or follow you.
Bricole's service is for adults: requests must be made by someone aged 18 or over. Information about children travelling with you is given by you, as their parent or guardian, and we ask only for what is needed.
3. Why, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|
| Preparing the proposal you asked for, including the example of your days | Steps taken at your request before a contract — art. 6(1)(b) |
| Planning your stay, sending your programme, passing the bookings you make to the partners you choose, handling changes during the stay | Performance of the contract — art. 6(1)(b) |
| Dietary requirements and mobility needs | Your explicit consent — art. 9(2)(a), which you can withdraw at any time |
| Invoices and accounting records; record of requests about your rights | Legal obligation — art. 6(1)(c) (and art. 5(2)) |
| Counting, without your name, the visits that reach the site through the link of a place to stay, to pay that place for promoting us | Legitimate interest in running our promotion agreements — art. 6(1)(f); no personal data is shared with the place |
| End-of-stay questionnaire, including the question on what you spent at one place, and the weekly analysis of anonymous figures and comments | Legitimate interest in improving the service and checking the commissions our partners report — art. 6(1)(f); answering is optional and you can object at any time |
| Preparing replies to the emails you send us, with the help of AI | For guests: steps at your request or performance of the contract — art. 6(1)(b); for anyone else: legitimate interest in answering the messages we receive — art. 6(1)(f) |
| Record of how AI-drafted texts were produced | Legitimate interest in being able to show how we worked and to defend against claims — art. 6(1)(f) |
| Anonymous visit statistics, security of the site | Legitimate interest in understanding and protecting the site — art. 6(1)(f) |
Your name, email address and dates are needed to prepare a proposal: without them we cannot send one. Everything else you tell us is optional, and leaving it out only makes the plan less tailored.
We do not sell your data, we do not use it for advertising, and we do not send newsletters unless you ask for them.
4. How long we keep it
The deletions below happen on their own, every night, without you having to ask.
- Proposal requests you don't take up: deleted at the latest six months after the dates you asked about.
- Dietary and mobility needs: deleted 30 days after your stay ends; the notes sent to the places that hosted you are deleted 30 days after each visit.
- Questionnaire answers (interests, pace, preferences): deleted two years after your stay.
- End-of-stay questionnaire: your comments are deleted two years after you answer; ratings and the amount you indicated stay with the record of your bookings and are deleted with it. The weekly reports, which contain no names, are deleted after three years.
- Programme, bookings and payment: kept for ten years after your stay, as Italian tax law and the ordinary limitation period require, then deleted. If you ask us to delete your data earlier, your name and email are removed straight away and only the amounts, dates and bookings behind the invoice remain; the invoice itself stays in our accounting records for the ten years the law requires.
- Text of emails in our sending system: cleared after 90 days (only which email was sent, and when, remains).
- Copies in our mailbox: emails exchanged with us are deleted automatically from our email account at the latest two years after your stay or the dates you asked about.
- AI record: for the example and the programme it contains no name or email, and it is deleted together with your request; if you paid, it stays with the record of your programme and is deleted with it after ten years. For replies to your emails it contains the text of your message and is deleted after 90 days, together with the one-line summary of the message that we keep to follow it up.
- Record of requests about your rights: five years, without your email address (only a keyed fingerprint, a hash, that lets us recognise it).
- Anonymous visit statistics: up to 24 months.
5. Who else handles your data
We use a small number of service providers, each bound by a data processing agreement and only for the purpose described:
| Provider | What for |
|---|
| Cloudflare | Hosting and security of the website |
| Supabase | Database where requests, programmes and statistics are stored (servers in London, United Kingdom) |
| Zoho (EU data centre) | Email |
| Stripe | Payments |
| Accountant and e-invoicing software | Invoices and accounting, once Bricole's VAT registration is active. Invoices also go to the Italian Revenue Agency (Agenzia delle Entrate), as the law requires. |
| Anthropic (United States) | AI service (Claude) that drafts the example of your days and your programme, and helps us prepare replies to your emails. For the example and the programme it never receives your name, your email address or where you are staying. Details in section 6. |
When you book an activity, the place that hosts you (a winery, a restaurant, a guide) receives what it needs to welcome you: your first name and the initial of your surname, the number of people, the time, and any dietary or mobility needs you shared. The place where you are staying is told nothing about you: it only sees, without names, how many visits reached our site through its link.
Some providers are based outside the European Union. Data stored in the United Kingdom is covered by the European Commission's adequacy decision for the UK. For Anthropic, in the United States, the transfer is based on the European Commission's standard contractual clauses included in its data processing agreement; for other providers in the United States, on the EU–US Data Privacy Framework or the same standard clauses.
6. How we use artificial intelligence
- What for: an AI system writes the free example of your days that you find in your proposal; it puts together your full programme, choosing only among the partners we work with and the times that really have seats, every choice checked by our own system; it prepares draft replies to the emails you send to hello@bricoletravel.com, which a person reads and approves before anything is sent; and once a week it writes an internal report for us from anonymous figures (numbers of requests and bookings, average ratings) and the comments left in end-of-stay questionnaires, without any name or email.
- What it receives: for the example, only your dates and your interests. For the programme, your dates, the number of people and children (by age band), your interests, pace, whether you have a car, which arrival and departure days to plan, the area where you are staying, and — in your own words — what you told us you would hate to miss or would rather avoid and any changes you ask for on a proposed programme — never your name, your email or anything else that identifies you. Dietary and mobility needs are never sent: if you gave consent, our system passes on only a level of physical effort from 1 to 3 and whether a wheelchair is used, never the condition itself. Please do not write health information in the free-text boxes. For email replies, the text of your message (without the earlier messages quoted below it) and the details of your booking needed to answer it. If you write health information in an email, it reaches the AI as part of the message: if you prefer, share it through your personal page instead.
- Who provides it: Claude, by Anthropic PBC (United States), which processes the data on our behalf under a data processing agreement. We have set processing to take place only in the United States. Under Anthropic's commercial terms, the data we send is not used to train its models and is deleted from its systems within 30 days, unless content is flagged for breaking its usage rules (then up to 2 years).
- Always disclosed: every text written with AI is labelled as such, including email replies drafted with its help. A person reads every email reply before it is sent, and requests about refunds, complaints, health, legal matters or your data are always handled by a person.
- No automated decisions about you: no decision with legal or similarly significant effects on you is taken solely by automated means (art. 22 GDPR). If a place is full we offer you an alternative: that is a matter of available seats, not an assessment of you.
- Its limits: AI can make mistakes. That is why every text is checked automatically against precise rules, the costs in the example are indicative, and we never rely on AI for allergens or safety: dietary needs are confirmed directly with the place, and the full programme will propose only places and routes from a verified list. The free example is a story to give you an idea, not a guide to follow on your own.
- Transparency: we keep a record of what was sent to the AI and what it returned. You will find it in the copy of your data you can download (section 7).
7. Your rights
You can ask at any time to see the data we hold about you, to correct it, to delete it, to limit how it is used, to receive it in a portable format, or to object to its use, and you can withdraw your consent for dietary and mobility needs at any time (this does not affect what was done before you withdrew it). You can also object at any time to the processing based on our legitimate interest (sections 3 and 6).
- On your own, straight away: at the bottom of our emails about your proposal there is a "See, download or delete your data" link. It opens a personal page where you can download a complete copy of your data or delete it. If your stay is paid and not over yet, deleting would mean cancelling it: in that case, write to us.
- By writing to us: for anything else, at hello@bricoletravel.com. We answer within one month.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
8. Cookies and storage on your device
The site uses no advertising cookies, no third-party analytics and no social-media trackers, and it does not store anything on your device to follow you. Fonts and code are served from our own domain, so opening the site does not send your address to Google or other third parties. The code in the link of the place where you are staying is read only during that visit and sent together with your request. What remains is strictly necessary to provide the service you ask for, which is why there is no cookie banner:
| Name | What it does | How long |
|---|
| bricole_token (local storage) | Only for clients who open their personal programme: lets them reopen it on the same device without searching for the email link | Until you clear it |
| Login of the private admin area (local storage) | Only for Bricole's own staff when they sign in; never set for visitors | Until sign-out |
| __cf_bm and similar (cookie, Cloudflare) | Protects the site from automated attacks, when Cloudflare needs it | Up to 30 minutes |
If one day we add something that needs your consent — for example a video from an external platform — it will stay switched off until you choose to turn it on.
9. Changes
If this page changes in a way that matters, the date at the top will change with it, and clients with an active stay will be told by email.
If the English and Italian versions of this page differ, the Italian version prevails.