Last updated: September 24, 2026
1. Data Controller
The data controller for personal data collected through the Radici e Imprese website is:
NEVERENDING TOURISM LTD.
Registered office: 128 City Road, London, EC1V 2NX, United Kingdom
Company number: 13971950
Email: info@radicieimprese.com
Website: https://radicieimprese.com
For privacy-related requests or to exercise your data protection rights, you may contact info@radicieimprese.com, using “Privacy – Radici e Imprese” as the subject line.
2. Purpose of the Website
Radici e Imprese is a digital space and strategic initiative designed to connect Italian territories, businesses, productive culture, authentic Made in Italy, Italian communities abroad, and people with Italian heritage.
The website has informational, cultural, editorial, professional, and relationship-building purposes. It may feature projects, territories, businesses, experiences, stories, editorial content, and collaboration opportunities connected to Radici e Imprese activities.
3. Personal Data We Process
The website may process the following categories of personal data:
- technical browsing data required for the operation and security of the website, such as IP address, browser information, device information, access date and time, and technical logs;
- data voluntarily provided through contact forms or email, such as first and last name, email address, telephone or WhatsApp number, organization, subject of the request, and message content;
- texts, images, stories, testimonials, proposals, referrals, or other materials voluntarily submitted by the user;
- data relating to organizations, businesses, institutions, professionals, communities, or territorial stakeholders reported or involved in the activities.
Only with consent, Google Analytics 4 collects website usage data: pages visited, language, device type, referring website, and essential interactions, associated with pseudonymous identifiers. We do not send Analytics names, email addresses, phone numbers, message contents, or form field values. Page addresses sent to Analytics exclude query parameters and fragments.
4. Purposes and Legal Bases
Personal data may be processed for the following purposes:
- to operate, maintain, protect, and secure the website, based on the controller’s legitimate interests;
- to respond to requests submitted through forms or email, based on the user’s request, possible pre-contractual steps, and the controller’s legitimate interests;
- to evaluate referrals, collaboration proposals, contributions, stories, testimonials, images, or other materials voluntarily submitted, based on the user’s request, legitimate interests, or consent where required;
- to organize, document, communicate, and, where appropriate, publish content and activities connected to Radici e Imprese, based on legitimate interests, contractual or project-related obligations, or consent where required;
- to manage operational, professional, institutional, or collaborative relationships with businesses, organizations, partners, and interested parties;
- to comply with applicable legal, administrative, accounting, tax, or regulatory obligations.
The website does not currently carry out profiling or solely automated decision-making concerning users.
With your optional consent, we measure visits, engagement, primary calls to action, form submissions successfully processed by the website, and visits to linked resources to evaluate and improve the user journey. These measurements do not establish email receipt, a commissioned project, or revenue. Declining does not prevent browsing or contacting us.
5. Providing Personal Data
Providing personal data through forms, email, or the voluntary submission of materials is optional. However, failure to provide the information needed to handle a request may prevent the controller from responding, evaluating a proposal, or considering submitted content.
Anyone who submits images, texts, testimonials, or other materials relating to third parties represents that they are authorized to share them and, where necessary, have obtained the relevant permissions and releases.
6. Processing Methods and Security
Personal data is processed using electronic systems and, where necessary, manual procedures. The controller adopts reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, disclosure, destruction, or misuse.
Access to personal data is limited to individuals and service providers who need it for technical, administrative, operational, professional, editorial, communication, or project-related purposes.
7. Recipients of Personal Data
Personal data may be processed or disclosed, only to the extent necessary, to website hosting and maintenance providers, developers, web agencies, email and digital service providers, editorial and communication professionals, project partners, businesses or organizations involved in a specific request, professional advisers, authorized personnel, and public authorities where required by law.
These recipients process personal data only for purposes connected to the website and Radici e Imprese activities and, where necessary, under appropriate contractual arrangements.
For optional measurement, we use Google Analytics 4, provided by Google. Data may also be processed on infrastructure outside the United Kingdom and the European Economic Area. Details about processing and the service’s safeguards are available in Google’s data processing terms and Google’s Privacy Policy.
8. International Data Transfers
Because the controller is established in the United Kingdom and the activities may involve parties located in the United Kingdom, the European Union, and other countries, some personal data may be processed or made accessible outside the United Kingdom or the European Economic Area.
Where required by applicable law, international transfers are carried out on the basis of adequacy regulations or decisions, Standard Contractual Clauses, the International Data Transfer Agreement, the UK Addendum, or other appropriate safeguards under the UK GDPR and, where applicable, the European Union GDPR.
9. Data Retention
Personal data is retained only for as long as necessary for the purposes for which it was collected.
Requests submitted through forms or email are generally retained for the time needed to manage the request and, as a rule, for no longer than 24 months, unless a relationship remains ongoing or a longer period is necessary for documentation, legal claims, or compliance purposes.
Data connected to proposals, collaborations, projects, businesses, territories, or documented activities may be retained for the time necessary to evaluate, manage, document, and protect the relevant activities.
Published content, including stories, testimonials, images, and information about businesses or projects, may remain online until a justified removal request is received, subject to legitimate editorial, contractual, legal, or documentation needs.
GA4 user and event data retention is set to 2 months, without resetting on new activity. Aggregated reports may remain available beyond that period. Analytics cookies are set to 180 days; your consent choice is stored for 6 months.
10. Your Data Protection Rights
Subject to the conditions established by applicable law, including the UK GDPR and, where applicable, the European Union GDPR, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, and data portability where applicable. You may also withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Requests may be sent to info@radicieimprese.com, using “Privacy – Radici e Imprese” as the subject line.
You also have the right to lodge a complaint with the United Kingdom Information Commissioner’s Office or another competent supervisory authority, without prejudice to any other administrative or judicial remedy available under applicable law.
11. Children’s Data
The website is not intended to collect personal data from children without the involvement of a parent or legal guardian.
Images, testimonials, stories, or other materials concerning children may be used only with appropriate authorization from the individuals legally entitled to provide it.
12. Cookie Policy
We use necessary cookies for operation, security, language, and storing preferences. These do not require consent. The necessary cookie ri_analytics_consent_v1 stores your Analytics choice for 6 months.
Google Analytics 4 loads only after you select “Accept Analytics.” It creates _ga and _ga_* cookies to distinguish browsers and sessions. Their configured duration is 180 days, without automatic renewal on each visit. Before consent and after declining, the Google tag does not load. We do not enable advertising features, Google Signals, remarketing, or collection of form field values.
You can select “Necessary only” in the banner and change or withdraw your choice at any time using “Cookie preferences” in the footer. Withdrawal stops future collection and deletes this site’s Analytics cookies in the current browser; it does not automatically delete previously collected data. For data requests, contact us as described above.
You can also block or delete cookies through your browser settings; disabling necessary cookies may affect some functions. Your preference applies to this browser and this website.
13. Updates to This Policy
This Privacy & Cookie Policy may be updated to reflect technical, organizational, operational, or legal changes.
The current version will be published on the website together with the date of the latest update.