Home / Privacy
Privacy policyWhat we know about you,
and what we do with it.
Very little, by design. You can use the whole site without an account, a form or a single cookie. This page lists everything that is collected, who receives it and how to change your mind.
Who is responsible
The data controller is Nicolò Salvatore, self-employed, Piazza Walther 2, 39100 Bolzano (BZ), Italy, VAT IT03145580217. Write to hello@airporttocitycenter.com for anything on this page. There is no data protection officer: the law does not require one for a site this size, and the same person answers.
What is collected, and why
Delivering the page
Your IP address, browser and the page asked for, as every web server receives them.
- Why
- To send you the page and keep the site safe from abuse.
- Legal basis
- Legitimate interest (Art. 6(1)(f) GDPR): a website cannot work otherwise.
- Kept
- We keep no log of individual visits. Cloudflare, which serves the site, handles this data under its own terms (below).
Outbound click count
When you follow a link to another site: which site, where on the page the link sat, the page, and your country as Cloudflare sees it.
- Why
- To know which links are used, and so which partners and operators are worth covering.
- Legal basis
- Legitimate interest. No cookie, no IP address, no identifier: a count, not a profile.
- Kept
- About 3 months, the retention of Cloudflare's Analytics Engine.
Map tiles
Your IP address and which map squares were requested, sent to OpenFreeMap when an airport page draws its map.
- Why
- To show the map.
- Legal basis
- Legitimate interest: the map is part of the answer the page gives.
- Kept
- OpenFreeMap states it stores no IP addresses in its regular logs.
Analytics
Only if you accept it: Google Analytics 4, with a random browser identifier, the pages you read, the controls you use, rough location and device type.
- Why
- To see which airports and routes people look up, and decide what to add next.
- Legal basis
- Your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Kept
- Cookies up to 2 years; the event data 2 months in Google Analytics.
Partner links
Only if you tick that box: the Travelpayouts script (details below).
- Why
- So the network can credit us when a booking follows your visit.
- Legal basis
- Your consent (Art. 6(1)(a)), which you can withdraw at any time.
- Kept
- Set by Travelpayouts under its own policy.
Your emails
If you write to us: your address, name if you give it, and what you wrote.
- Why
- To answer you and act on corrections.
- Legal basis
- Legitimate interest in answering, or steps you ask us to take.
- Kept
- As long as the conversation is useful, and at most 2 years after the last message.
Your cookie choice
In your browser's local storage as atcc-consent.
- Why
- So the banner does not ask on every page.
- Legal basis
- Legal obligation to respect and record your choice.
- Kept
- 12 months, then the banner asks again.
We do not sell data, show ads, build profiles, make automated decisions about anyone or ask for anything we do not need. The site is not aimed at children. The cookie-level detail is on the cookie page.
Who else receives it
Cloudflare, Inc. (USA) hosts the site, delivers every page, counts outbound clicks and forwards email to our inbox. It acts as our processor under its Data Processing Addendum and is certified under the EU–US Data Privacy Framework.
Google Ireland Ltd runs Google Analytics, only if you accept analytics. Data may be processed by Google LLC in the USA, which is certified under the EU–US Data Privacy Framework. Google Analytics 4 does not store IP addresses. Our email inbox is also a Google mailbox, so messages you send us are held by Google.
Hyperknot Software Kft. (Hungary) runs OpenFreeMap, which serves the map tiles. It states that it sets no cookies and keeps no IP addresses in its regular logs.
Go Travel Un Limited (Hong Kong) runs the Travelpayouts affiliate network, only if you tick Partner links. Its script runs in your browser, sets its own cookies and local storage, reads the Google Analytics and Yandex visitor identifiers if your browser holds them, and reads the page you are on, so it can match a later booking to this site. Hong Kong has no EU adequacy decision, so data sent there does not carry the same guarantees as within the EU; you are asked before any of it happens, and it happens only if you say yes. Travelpayouts decides what it does with the data under its own privacy policy.
Booking sites. When you follow a link to an operator or a reseller, you leave this site. A paid link tells the seller it came from us, so a booking can be credited; what that site then collects is governed by its own privacy policy, not this one.
Your rights
You can ask to see the data we hold about you, correct it, delete it, restrict or object to its use, or receive it in a portable form. Where we rely on your consent you can withdraw it at any time, with the Cookies link in the footer of every page, and withdrawal is as easy as consent was. Write to hello@airporttocitycenter.com; we answer within one month.
In practice we hold almost nothing that names you: the analytics identifier is random and lives in your browser, so clearing this site's cookies removes it, and the click count holds no identifier at all. Emails are the exception.
You can also complain to a data protection authority: in Italy, the Garante per la protezione dei dati personali, or the authority where you live or work.
Changes
When the site starts collecting something new, this page changes the same day, and if a change needs your consent, the cookie banner asks again. Last updated 28 September 2026.
See also the cookie page, the terms of use and the legal notice.