Legal information
Privacy and cookie notice
Last updated: 7 October 2026
This notice explains how we process the personal data of people who visit the 2wri.com website and of those who contact us to organise a trip, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Who is the data controller
The controller is Motoclub 2WRI.COM A.S.D., based at Via Trento 41, 53021 Abbadia San Salvatore (SI), Italy, tax code and VAT number 90033010522, represented by its president, Paolo Marisaldi. For any privacy request you can write to info@2wri.it.
When you visit the website
The website is made of informational pages. It has no contact forms, sign-up, newsletter, comments or online purchases, and it does not ask you to enter any data.
The provider that hosts the website (Cloudflare) processes technical browsing data, such as the IP address, the date and time of the request, the pages viewed and the characteristics of the browser and device. This data is needed to run the website, protect it from attacks and abuse, and keep it fast. The legal basis is our legitimate interest in ensuring the operation and security of the website (Art. 6.1.f GDPR). We do not use this data to profile you, and it is kept, through the provider, only as long as needed for these purposes.
When you write to us
You can contact us on WhatsApp or at info@2wri.it. We process the data you give us, such as your name, phone number or email address and the content of your message, to reply to you and give you the information on the trips you asked about. The legal basis is the performance of pre-contractual measures taken at your request (Art. 6.1.b). Providing this data is optional, but without it we cannot reply to you.
When you tap a WhatsApp button, the WhatsApp app opens. It is a service of Meta Platforms Ireland Limited, and from that moment the processing of your data by WhatsApp is governed by its own privacy notice. We keep the conversation for as long as needed to handle your request and, if no booking follows, for a maximum of 5 years.
When you book and take part in a trip
If you decide to take part in a trip, we ask you for the data needed to organise it, including your first and last name, contact details and a copy of an identity document or passport. We use it to book hotels, ferries, flights, permits and assistance, to manage the contract and to comply with legal obligations. The legal bases are the performance of the contract (Art. 6.1.b) and legal obligations (Art. 6.1.c). Without this data we cannot accept your registration.
We keep the data for the duration of our relationship and then for the periods required by law, for example accounting and tax obligations (10 years).
If you tell us about your health, such as allergies, intolerances or medical conditions, you do so for your safety during the trip. This is special-category data: we process it only with your explicit consent (Art. 9.2.a) and you can withdraw it at any time.
Photos and videos of the trips
During the trips we take photos and videos that we may publish on this website, on social media and in promotional material. For future trips we ask participants for a written release for the publication of images in which they are recognisable: they can withdraw it at any time by writing to info@2wri.it. If you recognise yourself in a photo or video already published and would like us to remove it, write to us: we will remove it from our channels without delay. We cannot, however, delete them from copies already shared or downloaded by others.
Who we share data with
We do not sell or give away your data. It may be received, only as far as necessary, by:
- the website's hosting and network provider (Cloudflare);
- the operators needed to organise the trip: hotels, ferry and airline companies, local guides and agencies, insurers;
- the advisers who assist us, such as our accountant and lawyer, bound by confidentiality;
- the authorities, when required by law.
Transfers outside the European Union
Cloudflare is based in the United States. For these transfers it relies on its certification under the EU-U.S. Data Privacy Framework and, should this lapse, on the European Commission's standard contractual clauses.
Our trips take place outside the European Union (Tunisia, Morocco, Algeria, Jordan, Oman, Namibia). To book and obtain permits we must share participants' data with hotels, guides and authorities in the destination countries, which may not offer a level of protection equivalent to the European one. These transfers are necessary to perform the contract you requested (Art. 49.1.b GDPR).
Cookies
The website does not use profiling cookies or third-party cookies for advertising or statistics. It does not embed social network widgets, maps or external videos, and the fonts are hosted on the website itself.
The network provider may use cookies or technical identifiers that are strictly necessary for the operation and security of the service, for example to tell automated traffic from human traffic. These tools do not require your consent, which is why we do not show a cookie banner.
The links to our Instagram and Facebook profiles take you away from the website: from there the privacy notices of those services apply. If in the future we introduce analytics tools or other non-technical cookies, we will update this page and ask for your consent before activating them.
Your rights
You can ask us for access to your data, rectification, erasure, restriction of processing and portability, and you can object to the processing (Arts. 15-22 GDPR). You can withdraw any consent you have given at any time, without making the processing already carried out unlawful. To exercise these rights, write to info@2wri.it.
You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).
We do not make decisions based on automated processing and we do not carry out profiling.
Minors
The website is not designed for minors and does not knowingly collect their data. If a minor takes part in a trip, their data and the necessary authorisations are collected from whoever holds parental responsibility.
Changes to this notice
We may update this notice, for example if the website or the services we use change. The date at the top shows the latest version.
Contact
For questions or requests about privacy, write to:
