Privacy notice
Data controller
The data controller is Aurelia Consulting S.r.l., Via Vittor Pisani 8/A, 20124 Milan (Italy), VAT number IT14393970968. For any request about the processing of your data you can write to sales@buseventi.it.
Data processed
Data you provide through the quote request form: first and last name, company, email, phone, destination, event type, dates, number of attendees and passengers, service type, itinerary, services requested, luggage, any operational accessibility needs and free text. We do not ask for health data: if you enter it in the free text we will treat it as part of the request. Technical browsing data, such as IP address and server logs, processed by the hosting provider for the operation and security of the site. Site measurement data, only if you accept the measurement tool (see the cookie notice).
Purposes and legal bases
Replying to your quote request and carrying out pre-contractual activities (Art. 6(1)(b) GDPR). Meeting legal, tax and accounting obligations if a contract is concluded (Art. 6(1)(c)). Protecting the site from abuse and automated submissions, through technical checks such as request limits (legitimate interest, Art. 6(1)(f)). Sending you commercial communications, only if you tick the optional box (consent, Art. 6(1)(a)), which you can withdraw at any time. Measuring use of the site, only with your consent (Art. 6(1)(a)).
Nature of providing data
The fields marked as required in the form are needed to reply to the request: without them we cannot prepare a proposal. Consent to commercial communications and to measurement is optional and does not affect the service.
Recipients
Data is processed by authorised staff of Aurelia Consulting S.r.l. To deliver the requested service, the information needed for the proposal, for example routes, dates and number of passengers, may be shared with BusEventi's partner transport companies. We use suppliers acting as data processors: Resend to send the transactional emails through which we receive requests and Vercel to host the site. If enabled and accepted by you, Google provides the measurement tool. Data is not sold.
Transfers outside the European Union
Some suppliers may process data in non-EU countries, in particular the United States. In these cases the transfer takes place with the safeguards provided by Chapter V of the GDPR, such as adequacy decisions or standard contractual clauses.
Retention
Requests that do not lead to a contract are kept for 12 months from the last communication and then deleted. Data of concluded contracts is kept for 10 years, as required by Italian tax law. Data for commercial communications is kept until you withdraw consent. Technical logs are kept by the hosting provider for the time strictly necessary for security.
Your rights
You may request access, rectification, erasure, restriction, objection and portability of your data (Arts. 15-22 GDPR) and withdraw any consent at any time, without affecting processing already carried out. Write to sales@buseventi.it. No solely automated decision-making is carried out.
Complaint to the supervisory authority
If you believe the processing breaches the law, you may lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
Updates
Last updated: 12 October 2026. Any changes will be published on this page.