GDPR Privacy Notice
Last updated: September 2026
This GDPR Privacy Notice supplements the general Privacy Policy of Beyond Homelands and explains how personal data relating to individuals located in the European Economic Area (“EEA”) is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (“GDPR”).
1. Data Controller
The data controller responsible for the processing of personal data through the Beyond Homelands website is:
Luca Pugliese
Beyond Homelands
Website: https://beyondhomelands.com
Email: info@beyondhomelands.com
For any question concerning this Notice or the processing of your personal data, you may contact us at the email address above.
2. Personal Data We May Collect
Depending on how you interact with the website, we may process the following categories of personal data:
identification information, such as first name and last name;
contact information, such as email address and telephone number when voluntarily provided;
information submitted through contact forms, registration forms or other communications;
technical information, such as IP address, browser type, device information, operating system and time zone;
information about how you interact with the website, including pages visited, referring pages and navigation activity;
cookie and similar technology information, where applicable;
information necessary to respond to inquiries, requests or potential contractual relationships.
We do not intentionally request special categories of personal data through the general Beyond Homelands website.
3. Purposes and Legal Bases for Processing
We process personal data only when a lawful basis under the GDPR applies.
Website operation and security
We may process technical and usage information to operate, maintain, protect and secure the website, detect abuse and understand technical performance.
Legal basis: our legitimate interests in maintaining a secure, functional and reliable website pursuant to Article 6(1)(f) GDPR.
Responding to inquiries
When you contact us, we process the information you provide in order to respond to your request and communicate with you.
Legal basis: our legitimate interests under Article 6(1)(f) GDPR and, where your request concerns a possible contractual relationship, taking steps at your request prior to entering into a contract pursuant to Article 6(1)(b) GDPR.
Newsletter and marketing communications
Where you voluntarily subscribe to marketing communications, we may use your email address and related information to send you news, updates or promotional communications.
Legal basis: your consent pursuant to Article 6(1)(a) GDPR, where consent is required.
You may withdraw your consent at any time using the unsubscribe mechanism provided in our communications or by contacting us.
Compliance with legal obligations
We may process personal data where necessary to comply with applicable laws, regulations, court orders or lawful requests from public authorities.
Legal basis: Article 6(1)(c) GDPR.
Establishment, exercise or defence of legal claims
Where necessary, information may be retained or processed to protect our rights, prevent fraud, resolve disputes or establish, exercise or defend legal claims.
Legal basis: our legitimate interests pursuant to Article 6(1)(f) GDPR and, where applicable, applicable legal obligations.
4. Cookies and Similar Technologies
The website may use cookies and similar technologies for essential website functionality, security, analytics and, where applicable, marketing purposes.
Strictly necessary technologies may be used where required for the operation and security of the website.
Where the law requires consent for analytics, advertising or other non-essential technologies, such technologies should only be activated after the user has provided the required consent.
Users may manage their choices through the cookie consent tools made available on the website, where applicable.
5. Recipients and Service Providers
We may share personal data only where necessary with service providers that support the operation of Beyond Homelands, such as providers of:
website hosting and infrastructure;
cybersecurity and technical services;
analytics;
email and communication services;
website forms and related digital tools;
professional, legal or accounting services where necessary.
Such parties may act as processors or independent controllers depending on the services they provide and their legal relationship with us.
We do not disclose personal data to third parties unless there is a legitimate purpose and an appropriate legal basis for doing so.
6. International Transfers
Some of the service providers used in connection with the website may process data outside the European Economic Area, including in countries such as the United States or Canada.
Where personal data is transferred outside the EEA, we take appropriate steps as required by the GDPR. Depending on the recipient and destination, these may include:
reliance on an adequacy decision adopted by the European Commission;
Standard Contractual Clauses approved by the European Commission;
other appropriate safeguards permitted under Article 46 GDPR; or
another lawful transfer mechanism permitted by the GDPR.
You may contact us for further information concerning the safeguards applicable to a particular transfer.
7. Data Retention
Personal data is retained only for as long as reasonably necessary for the purposes for which it was collected.
The retention period may depend on:
the nature of the information;
the reason for its collection;
whether an ongoing relationship exists;
applicable legal, accounting or regulatory requirements;
the need to establish, exercise or defend legal claims.
When personal data is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.
8. Your Rights Under the GDPR
If the GDPR applies to you, you may have the right to:
be informed about the processing of your personal data;
request access to your personal data;
request rectification of inaccurate or incomplete personal data;
request erasure of your personal data where the legal requirements are met;
request restriction of processing;
object to processing based on legitimate interests;
receive certain personal data in a portable format and request data portability where applicable;
withdraw consent at any time where processing is based on consent;
object to direct marketing at any time;
lodge a complaint with a competent supervisory authority.
The exercise of these rights is subject to the conditions and limitations provided by applicable law.
9. How to Exercise Your Rights
To exercise any of your GDPR rights, please contact:
Please indicate the nature of your request and provide sufficient information for us to identify the relevant data.
Where reasonably necessary, we may request additional information in order to verify your identity and protect personal data from unauthorised disclosure.
Requests will be handled within the time limits required by applicable data protection law.
10. Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes the GDPR.
If Italy is the relevant supervisory jurisdiction, the competent authority is:
Garante per la Protezione dei Dati Personali
You may also contact the supervisory authority in the EEA country where you live, work or where you believe an infringement has occurred.
11. Automated Decision-Making and Profiling
Beyond Homelands does not use personal data collected through the general website to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individuals, unless you are specifically informed otherwise.
Certain technologies may analyse website interactions for statistical, security or personalisation purposes, subject to applicable consent requirements.
12. Providing Personal Data
Providing personal data is generally voluntary.
However, certain information may be necessary in order for us to respond to a request, provide a requested service, take steps toward a contractual relationship or comply with legal obligations.
If required information is not provided, we may be unable to provide the relevant service or respond fully to the request.
13. Third-Party Websites and Services
The Beyond Homelands website may contain links to websites, stores, platforms or services operated by third parties.
Those third parties may process personal data under their own privacy notices and terms. We encourage users to review the privacy information provided by the relevant third party before providing personal data.
Where additional Beyond Homelands services or programs have their own privacy notices, those notices may supplement this GDPR Privacy Notice.
14. Changes to This GDPR Privacy Notice
We may update this Notice from time to time to reflect changes in our services, technologies, legal requirements or data-processing activities.
The latest version will be published on this website together with the date of the most recent update.
15. Contact
For questions regarding this GDPR Privacy Notice or the processing of your personal data:
Beyond Homelands
Data Controller: Luca Pugliese
Email: info@beyondhomelands.com
Website: https://beyondhomelands.com