Privacy & Cookie Policy
Last updated: September 1, 2026
1. About this Policy
Odissey Travel Magazine respects the privacy of its readers, subscribers, contributors and visitors and is committed to processing personal data transparently, proportionately and securely.
This Privacy & Cookie Policy explains how personal data may be collected and processed when you visit odisseymag.com, contact our editorial office, subscribe to our newsletter or push notifications, or interact with the digital services provided through our website.
This Policy concerns the processing of personal data connected with the operation of the website and its digital services.
Odissey’s journalistic and editorial processing, including the use of Artificial Intelligence within research, translation and content production, is further described in our separate Editorial, AI & Transparency Policy.
2. Data Controller
The Data Controller responsible for the processing of personal data through Odissey Travel Magazine is:
Bquadro Group s.r.l.
Via di Monte Verde 244
00151 Rome – Italy
Email: info@odisseymag.com
Odissey Travel Magazine is published by Bquadro Group s.r.l. and is registered with the Court of Rome under no. 76/2025.
Requests relating to privacy or the exercise of data-protection rights may be sent to the email address above.
3. Personal Data We May Process
The categories of personal data processed depend upon how you interact with Odissey.
When you simply browse the website, technical information necessary to provide, secure and operate the service may be processed. This may include IP address, browser and device information, requested pages, timestamps, technical logs and information necessary for the prevention of abuse or security incidents.
When you contact us through a form or by email, we may process your name, email address, telephone number where voluntarily provided, the contents of your communication and any other information you choose to include.
When you subscribe to the Odissey newsletter, we process the information necessary to manage the subscription, normally including your email address and, where requested or voluntarily provided, your name or other subscription preferences. Technical information relating to subscription and consent may also be recorded in order to document the request and manage your preferences.
If newsletter interaction tracking is enabled, information concerning delivery, opening or links clicked may also be processed in accordance with the applicable consent requirements described below.
If you activate browser push notifications, technical identifiers associated with your browser or device may be processed in order to deliver those notifications.
Analytics technologies may process information concerning visits, pages viewed, approximate geographical area, device or browser characteristics and referral information, according to the technology and consent settings applicable to the individual service.
4. Purposes and Legal Bases
Personal data are processed only where an appropriate legal basis exists.
Website Operation and Security
Technical information may be processed to provide the website, maintain its availability, protect it against misuse, prevent unauthorised access and investigate technical or security incidents.
The legal basis is Odissey’s legitimate interest in operating and protecting its website and digital infrastructure, together with any applicable legal obligations.
Contact Requests
Information submitted through the Contact form or by email is processed in order to receive, evaluate and respond to your request.
Where your request relates to a possible contractual or professional relationship, processing may be necessary in order to take steps at your request before entering into a contract.
For general editorial correspondence, processing may be based upon Odissey’s legitimate interest in managing communications addressed to the publication.
Submitting a contact request does not automatically subscribe you to marketing communications.
Newsletter
Newsletter subscriptions are based upon the subscriber’s voluntary choice and, where required, consent.
You may unsubscribe at any time using the unsubscribe mechanism provided in our communications.
Withdrawal of consent does not affect processing lawfully carried out before withdrawal.
Newsletter Measurement and Tracking
Some newsletter technologies are technically capable of measuring whether a message has been opened or whether links contained in it have been selected.
Where Odissey uses tracking pixels or equivalent technologies for individual measurement, performance analysis, profiling or behavioural evaluation, such processing is carried out in accordance with applicable Italian and European requirements relating to transparency and consent.
Where required, subscribers must be able to withdraw consent to such tracking without necessarily being required to unsubscribe from the newsletter itself.
Odissey may choose to disable individual newsletter tracking where the technology used does not allow an appropriate and sufficiently granular management of subscriber preferences.
Push Notifications
Browser push notifications are activated only following a voluntary request by the user and the permissions required by the relevant browser or device.
Users may withdraw their permission through their browser or device settings.
Analytics
Odissey uses analytics technologies to understand how the website is used and to improve its content, structure and performance.
Different analytics technologies may have different privacy characteristics.
Some analytics processing may be performed locally within the Odissey WordPress environment using privacy-oriented technologies that do not place cookies on the user’s device.
Other analytics services involving third-party technologies are managed according to the applicable consent requirements and the preferences expressed through our Consent Management Platform.
Advertising and Measurement Technologies
Advertising, audience-measurement or retargeting technologies such as Meta Pixel are considered non-essential technologies and are managed according to the visitor’s consent preferences.
Where consent is required, such technologies should not be activated for their non-essential purposes before the visitor has made an appropriate choice.
Consent can subsequently be withdrawn or modified through the Cookie Preferences control.
5. Contact Forms
Odissey currently uses WordPress technologies to manage contact requests.
Information submitted through a Contact form is used for the purpose of responding to the communication and is not automatically used to subscribe the sender to newsletters, advertising or promotional communications.
Where a separate optional marketing or newsletter subscription is offered, it is presented separately.
6. Newsletter Management
Odissey uses a WordPress newsletter-management system.
Subscriber information may be stored within Odissey’s WordPress database and may include the email address, subscription status, consent records and other information voluntarily supplied during registration.
Depending upon the configuration in use, technical information such as the IP address associated with a subscription may also be recorded for security, consent documentation or subscription-management purposes.
Odissey periodically reviews the privacy settings of its newsletter technology, including the configuration of open and click tracking.
Where tracking is not necessary for the provision of the newsletter, Odissey may limit or disable it in accordance with the principles of data minimisation and privacy by default.
7. Push Notifications — OneSignal
Odissey may offer browser push notifications through OneSignal.
Where a user voluntarily enables this service, technical information necessary to establish and maintain the subscription may be processed, including a push subscription identifier or token, browser/device information and other technical information required for delivery.
The user may revoke browser notification permission at any time.
OneSignal may process data on behalf of Odissey according to its contractual and privacy terms and the configuration used by Odissey.
8. Website Analytics
Independent Analytics
Odissey uses Independent Analytics as part of its website analytics environment.
This technology operates within the WordPress website and does not rely upon conventional tracking cookies or transmit the analytics database to Independent Analytics’ own servers.
It may use technical information such as IP address and User Agent to generate a pseudonymous visitor identifier and to determine approximate geographical information. The IP address itself is not intended to be stored as part of the analytics record.
Odissey seeks to configure such analytics in accordance with data-minimisation principles and may periodically refresh the technical values used to recognise repeat visitors.
Metricool
Odissey may use Metricool to obtain aggregated information concerning visits and pages viewed.
Metricool’s website-tracking technology does not use conventional tracking cookies according to its technical documentation but may communicate with Metricool’s servers and use the visitor’s IP address transiently to determine information such as country and page viewed.
Where this technology is subject to consent requirements under the law applicable to the visitor, it is managed through Odissey’s analytics consent preferences.
Google Services
Odissey uses Google’s Site Kit environment for certain website, search-performance or analytics functions.
The Google services actually enabled through Site Kit may change over time.
Where Google Analytics, Google Ads or another service requiring visitor consent is enabled, its operation is coordinated with the website’s consent-management system and the visitor’s preferences.
Search Console or administrative reporting functions that do not independently track visitors on the public website are distinguished from visitor-facing analytics or advertising technologies.
9. Meta Pixel
Odissey may use the Meta Pixel, provided by Meta Platforms, for purposes such as measuring interactions with the website, evaluating the effectiveness of communication or advertising activities and, where enabled, audience or retargeting functions.
Meta Pixel is classified as a non-essential marketing or measurement technology.
Where consent is required, its use is governed by the visitor’s marketing consent preference.
Information processed through Meta technologies may be received and further processed by Meta Platforms in accordance with its applicable privacy terms.
10. Cookies and Other Tracking Technologies
Odissey uses cookies and other technologies that may perform equivalent or related functions.
These technologies are divided into categories according to their purpose.
Strictly Necessary Technologies
These are required for the operation, security or provision of a service explicitly requested by the user.
They do not require consent where the conditions established by applicable law are satisfied, but their use is described transparently.
Preference and Functional Technologies
These may remember settings or preferences requested by the visitor, including certain accessibility or interface choices.
Analytics Technologies
These help Odissey understand how the website is used.
Depending upon their technical characteristics, provider and purposes, some analytics technologies may require consent.
Marketing and Advertising Technologies
These may be used for advertising measurement, audience analysis, retargeting or other marketing functions.
Where required by law, they are activated only after consent.
11. Cookie Consent Management
Odissey uses a Consent Management Platform to allow visitors to manage non-essential cookies and other tracking technologies.
At the first relevant visit, non-essential tracking should remain disabled by default unless an applicable legal exemption applies.
Visitors can accept, refuse or customise the use of non-essential technologies.
A visitor who chooses not to consent must remain able to use the ordinary editorial content of the website.
Consent preferences may be changed or withdrawn at any time through the Cookie Preferences control made available on the website.
The website should not repeatedly request consent after a visitor has refused it except in the circumstances permitted by applicable law, such as a significant change in processing conditions or after the relevant period established by regulatory guidance.
The detailed and current list of cookies, technologies, third parties, purposes and durations should be available through the Cookie Preferences / Cookie Settings interface maintained by Odissey’s Consent Management Platform.
12. Accessibility Preferences
Odissey uses accessibility technologies that may store local preferences necessary to remember accessibility settings selected by the visitor.
Where these technologies are used solely to provide a function specifically requested by the user, they are treated as functional or necessary technologies in accordance with applicable law.
13. Image Optimisation
Odissey uses professional image-optimisation technologies in connection with the publication of photographic and visual material.
Certain optimisation processes may temporarily transmit image files to the technical infrastructure of an external image-optimisation provider for compression or format conversion before the optimised material is returned to the Odissey website.
Where an image contains identifiable individuals, such processing is managed in accordance with the applicable legal basis governing the underlying editorial material and the contractual safeguards applicable to the relevant service provider.
14. Artificial Intelligence and Translation
Odissey uses Artificial Intelligence and machine-translation technologies as part of its editorial and multilingual publishing workflow, as further explained in the Editorial, AI & Transparency Policy.
These systems are intended primarily to process editorial content intended for publication.
Odissey’s internal practice is to avoid submitting unnecessary contact-form data, newsletter subscriber information, confidential communications or other private visitor information to generative AI or translation providers unless an appropriate purpose, legal basis and contractual framework exists.
Automatically translated content is provided to increase accessibility to Odissey’s journalism and may be subject to the limitations explained in the Editorial, AI & Transparency Policy.
15. Security Logs
Odissey may process IP addresses and other technical information for website security, fraud prevention, rate limiting and protection against unauthorised login attempts or cyber-attacks.
Such processing is based upon Odissey’s legitimate interest in protecting its website, editorial systems and users and upon applicable security obligations.
Security data are retained only for the period reasonably necessary to identify, investigate or document security events and according to the configuration of the relevant security systems.
16. Service Providers and Recipients
Odissey relies upon selected technology providers in order to operate its website and digital services.
Depending upon the functions actually enabled, recipients or processors may include providers of:
- website hosting and infrastructure;
- consent management;
- analytics;
- email and newsletter services;
- push notifications;
- security and anti-abuse systems;
- image optimisation;
- website backups;
- automation and integration services;
- translation and Artificial Intelligence services;
- search, measurement and advertising technologies.
Personal data are disclosed only where required for the relevant purpose and subject to the roles, contractual arrangements and legal safeguards applicable to each provider.
Some technologies, such as local WordPress analytics or newsletter database functions, may process data directly within Odissey’s own website infrastructure rather than transmitting them to the software developer.
17. International Transfers
Some technology providers used by Odissey operate internationally.
Where personal data are transferred outside the European Economic Area, Odissey relies upon the transfer mechanism applicable to the relevant provider and processing activity, which may include an adequacy decision of the European Commission, participation in an approved adequacy framework where applicable, Standard Contractual Clauses or another mechanism permitted by Chapter V of the GDPR.
Information concerning the safeguards applicable to a specific processing activity may be requested from Odissey using the contact details provided in this Policy.
18. Data Retention
Odissey applies the principle that personal data should not be retained for longer than necessary for the purposes for which they were collected.
Retention therefore depends upon the category of processing.
Contact correspondence is retained for the time reasonably necessary to respond to and manage the matter, subject to longer retention where required for contractual, legal or dispute-related purposes.
Newsletter subscriber information is normally retained while the subscription remains active and for any additional period necessary to document consent, withdrawal or compliance with applicable obligations.
Push-notification subscription data are retained while the subscription remains active or as otherwise technically and legally required by the relevant service.
Consent-management records may be retained for the period necessary to demonstrate the choices made by visitors and compliance with applicable obligations.
Security logs and technical information are retained according to security requirements and the configured retention periods of the systems in use.
Analytics data are retained according to the configuration of the relevant analytics technology, with data minimisation and aggregation applied where reasonably possible.
Backups may temporarily preserve information beyond its deletion from the active system until the corresponding backup reaches the end of its normal retention cycle.
More specific retention periods may be provided where the technical configuration of a particular service establishes a fixed period.
19. Your Data-Protection Rights
Where the GDPR applies, you may have the right, subject to the conditions established by law, to:
- obtain confirmation as to whether Odissey processes personal data concerning you and request access to those data;
- request correction of inaccurate or incomplete personal data;
- request deletion of personal data;
- request restriction of processing;
- object to processing based upon legitimate interests;
- receive personal data in a portable format where the right to data portability applies;
- withdraw consent at any time where processing is based upon consent.
Withdrawal of consent does not affect the lawfulness of processing performed before withdrawal.
Rights may be subject to limitations or exemptions established by law, including those applicable to journalistic activity, freedom of expression, public interest, legal obligations and the rights of third parties.
Requests may be sent to:
info@odisseymag.com
Odissey may request information reasonably necessary to verify the identity of the person making a request where appropriate.
20. Right to Lodge a Complaint
If you believe that the processing of your personal data infringes applicable data-protection law, you have the right to lodge a complaint with a competent supervisory authority.
In Italy, the supervisory authority is the:
Garante per la protezione dei dati personali
You may also have the right to seek judicial remedies under applicable law.
21. Children
Odissey Travel Magazine is a general-interest and professional travel publication and its digital services are not specifically designed or directed at children.
Where a consent-based information-society service is offered directly to minors, the rules applicable to the age at which a minor may validly provide consent are observed.
Under Italian law, a child who has reached the age of fourteen may provide consent in relation to the direct offer of information-society services within the scope established by applicable data-protection legislation; where required for younger children, consent must be provided or authorised by the person exercising parental responsibility.
22. Automated Decision-Making
Odissey’s website is not intended to subject ordinary visitors to decisions based solely upon automated processing that produce legal effects or similarly significant effects concerning them.
If such processing is introduced in the future, the information and safeguards required by applicable law will be provided.
23. Third-Party Websites and Embedded Content
Odissey articles may contain links to third-party websites or embedded services.
Independent third-party websites are responsible for their own privacy practices.
Where embedded third-party technologies can place non-essential cookies or otherwise track visitors through the Odissey website, their activation is managed according to applicable consent requirements.
24. Changes to this Policy
The technologies used by a digital publication evolve over time.
Odissey therefore periodically reviews this Privacy & Cookie Policy and may update it where services, providers, legal requirements or processing activities change.
Material changes will be reflected by updating the date shown at the beginning of this Policy and, where required, by providing additional notice or requesting a new consent.
25. Contact
For questions concerning this Policy, privacy matters or the exercise of data-protection rights, please contact:
Bquadro Group s.r.l. — Odissey Travel Magazine
Via di Monte Verde 244
00151 Rome – Italy
info@odisseymag.com
This Privacy & Cookie Policy should be read together with Odissey’s Editorial, AI & Transparency Policy, Cookie Preferences interface and other applicable legal notices.
