This Privacy Policy explains how SudRiders collects, uses and protects your personal data when you visit sudriders.com or contact us to book a tour. We comply with the EU General Data Protection Regulation (GDPR) and applicable Italian privacy law.
1. Data Controller
SudRiders S.r.l. (operating under MedeaTour, licensed tour operator)
Registered office: Catania, Sicily, Italy
Website: sudriders.com
Email: info@sudriders.com
2. Data We Collect
2.1 Data you provide directly
When you fill in our booking or enquiry form (hosted on Google Forms), you provide:
- Name and surname
- Email address
- Phone number (optional)
- Country of residence
- Tour preferences, dates and number of riders
- Any other information you voluntarily include in the message field
2.2 Data collected automatically
When you visit sudriders.com, we collect anonymised usage data via Google Analytics 4:
- Pages visited and time spent
- Approximate geographic location (country/city level)
- Device type, browser and operating system
- Traffic source (how you arrived at the site)
This data is aggregated and cannot identify you personally. See our Cookie Policy for full details.
3. How We Use Your Data
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Responding to booking and enquiry requests | Art. 6(1)(b) — performance of a contract |
| Managing confirmed tour bookings | Art. 6(1)(b) — performance of a contract |
| Sending tour-related information (GPX, road book, updates) | Art. 6(1)(b) — performance of a contract |
| Website analytics (anonymised) | Art. 6(1)(a) — consent (cookie banner) |
| Compliance with legal obligations | Art. 6(1)(c) — legal obligation |
We do not use your data for automated decision-making or profiling.
4. Data Sharing
We do not sell, rent or trade your personal data. We share data only with:
- Google LLC — for form processing (Google Forms) and website analytics (Google Analytics 4). Data is processed in accordance with Google's privacy policy and GDPR Standard Contractual Clauses.
- Accommodation providers and local partners — name and contact details only, shared when necessary to complete a confirmed booking.
- MedeaTour S.r.l. — our licensed tour operator, for regulatory and insurance compliance.
5. Data Retention
- Enquiries that do not result in a booking: deleted within 12 months of last contact.
- Confirmed bookings: retained for 10 years in accordance with Italian fiscal law (D.P.R. 600/1973).
- Analytics data: retained for 14 months, then automatically deleted by Google Analytics.
6. Your Rights
Under GDPR, you have the right to:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — request that we limit processing of your data
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interests
- Withdraw consent — at any time, for processing based on consent (e.g. analytics cookies)
To exercise any of these rights, contact us at info@sudriders.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Italian Data Protection Authority: garanteprivacy.it
7. Security
sudriders.com is served over HTTPS (TLS 1.3). We do not store payment card data — all bookings are invoiced separately via MedeaTour. Enquiry data submitted via Google Forms is stored on Google's infrastructure, which is certified to ISO 27001 and SOC 2.
8. Children
Our services are intended for adults aged 18 and over (or the minimum legal age to hold a motorcycle licence in your country). We do not knowingly collect personal data from minors.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last revised. Continued use of the site after any changes constitutes acceptance of the updated policy.
10. Contact
For any privacy-related questions:
SudRiders S.r.l. — info@sudriders.com