Last updated: September 26, 2026
This Privacy Policy explains how personal data may be collected and processed when you visit or interact with Dreaming of Canada at https://dreamingofcanada.com (the “Website”). It is intended to provide the information required, where applicable, by Regulation (EU) 2016/679 (“GDPR”), the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended), and applicable electronic communications and privacy rules.
1. Data Controller and contact details
The data controller for processing carried out through this Website is the operator of Dreaming of Canada.
Website: https://dreamingofcanada.com
Privacy contact: dreamingofcanada.com@gmail.com
2. Scope of this Policy
This Policy covers personal data processed through the Website, including technical browsing data, communications, comments or other submissions where available, anti-spam and security information, consent preferences, analytics data where enabled, and data associated with external or affiliate services.
3. Categories of personal data
3.1 Technical and browsing data
Servers and technical services may automatically process IP address, request date and time, requested URL, referrer, browser and device type, operating system, language settings, HTTP status, and other information normally transmitted through internet protocols.
3.2 Server, security and diagnostic logs
Hosting, security and infrastructure services may generate logs used to maintain availability, troubleshoot errors, detect malicious traffic, prevent abuse and protect the Website.
3.3 Communications
If you contact us, we may process your email address, name if supplied, message content, attachments and any other information you voluntarily provide.
3.4 Comments and public submissions
If comments or similar functions are enabled, we may process the information submitted together with technical data such as IP address and browser user-agent information for moderation, security and anti-spam purposes. Approved content may remain publicly visible together with the name or profile information you choose to provide.
3.5 Consent and preference data
Where a consent mechanism is used, we may process records of cookie choices, consent status, date or version of the preference and a technical identifier required to remember the choice and demonstrate compliance.
3.6 Analytics and usage data
Where analytics are enabled, information such as page views, navigation patterns, approximate traffic source, device category and similar statistical data may be processed. The Website currently uses Jetpack, including Jetpack Stats. The exact data processed depends on configuration and on the provider’s current service.
3.7 Affiliate and outbound-link data
Some pages contain affiliate links, including links to services such as Booking.com. An affiliate system may use technical identifiers or referral information to attribute an eligible transaction after a user follows an affiliate link. The destination provider processes data under its own privacy policy.
4. Purposes and legal bases
| Purpose | Typical data | Legal basis where GDPR applies |
|---|---|---|
| Providing Website pages and functions | Technical connection and request data | Legitimate interests in operating the Website and, where relevant, steps taken at the user’s request |
| Security, abuse prevention and troubleshooting | IP address, logs, request and device data | Legitimate interests in protecting systems, content and users |
| Responding to enquiries | Contact details and message content | Legitimate interests and, where relevant, steps taken at the user’s request |
| Comment moderation and anti-spam | Submission and technical data | Legitimate interests in moderation, security and abuse prevention |
| Non-essential analytics or tracking where consent is required | Usage data, identifiers, cookies or similar technologies | Consent |
| Remembering privacy choices | Consent and preference records | Legal obligation and/or legitimate interests in respecting and demonstrating privacy choices |
| Legal compliance and legal claims | Relevant technical, communication or administrative records | Legal obligation and/or legitimate interests in establishing, exercising or defending legal claims |
Where processing relies on consent, you may withdraw that consent at any time for future processing. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5. Whether providing data is mandatory
Browsing ordinary public pages generally does not require you to provide identifying information directly. Technical data necessary for internet communication and Website security is processed automatically. Providing data in an email, comment or form is generally voluntary, but we may be unable to respond if information reasonably necessary to handle the request is not provided.
6. WordPress
The Website is built with WordPress. WordPress and related components may process technical information needed for Website operation, authentication, administrative sessions, preferences, comments and security. Some cookies are relevant only to administrators or logged-in users.
7. Jetpack and Automattic
Jetpack is active on the Website and may provide statistics, security, performance and other WordPress functions. Jetpack Stats is enabled. Depending on configuration, Jetpack and Automattic may receive technical and usage information necessary to provide these services.
Where a Jetpack feature uses non-essential cookies or tracking technologies that require consent, the relevant technology should be activated only after valid consent has been obtained.
8. Akismet
The Website uses Akismet to detect spam and abusive submissions. If you submit a comment or another protected form, information associated with that submission may be analysed for anti-spam purposes. This may include submitted data, IP address, user agent, referrer and other technical information relevant to spam detection.
9. Gravatar
If comments and Gravatar integration are enabled, an anonymised value generated from your email address may be provided to Gravatar to check whether you use that service. If a comment is approved, a profile image associated with Gravatar may be publicly visible next to the comment.
10. Cookies and similar technologies
The Website may use cookies, local storage and similar technologies for strictly necessary functions, security, preferences, analytics and third-party functionality. Non-essential cookies or tracking technologies are used only where a valid legal basis exists and, where required, after prior consent.
See our Cookie Policy for more information.
11. Affiliate links and third-party booking services
Dreaming of Canada may participate in affiliate programmes and currently contains affiliate links to third-party travel services, including Booking.com. When you click an affiliate link, you leave this Website and access the third party’s service. That provider may process identifiers, device data, account or booking data and payment-related information under its own policies.
12. Embedded content and external resources
Pages may contain or link to external maps, videos, booking tools, widgets or similar resources. When third-party content loads, the provider may receive technical information such as IP address and may attempt to use cookies or similar technologies. Where prior consent is legally required for a non-essential third-party technology, it should remain blocked until consent is provided.
13. Recipients and categories of recipients
Personal data may be available, where necessary, to hosting and infrastructure providers; website maintenance and security providers; WordPress ecosystem providers including Automattic services; anti-spam services such as Akismet; analytics providers where enabled; email providers; professional advisers; and public authorities where disclosure is required by law.
Providers acting on our behalf are expected to process data only for authorised purposes and under appropriate contractual or legal safeguards where required.
14. International transfers
Some service providers may process personal data outside the European Economic Area. Where the GDPR requires safeguards for a transfer to a country without an applicable adequacy decision, the relevant controller or processor may rely on an appropriate mechanism such as Standard Contractual Clauses approved by the European Commission, together with supplementary measures where necessary.
15. Data retention
Personal data is retained only for as long as reasonably necessary for the relevant purpose and for any additional period required by law or needed to establish, exercise or defend legal claims.
- Technical and security logs: retained according to operational, security, troubleshooting and hosting requirements.
- Contact correspondence: retained for the time needed to handle the enquiry and reasonable follow-up, and longer where required for legal or administrative reasons.
- Comments: may remain stored while published or while required for moderation, anti-spam or record-keeping.
- Consent records: may be retained for the period reasonably necessary to remember the user’s choice and demonstrate compliance.
- Analytics data: retained according to service configuration and applicable law.
16. Security
Reasonable technical and organisational measures are used to protect the Website and personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet transmission or storage method can be guaranteed to be completely secure.
17. Your GDPR rights
Where the GDPR applies, and subject to the conditions and exceptions provided by law, you may have the right to:
- obtain confirmation as to whether your personal data is processed and request access;
- request rectification of inaccurate or incomplete data;
- request erasure;
- request restriction of processing;
- object to processing based on legitimate interests;
- receive certain data in a structured, commonly used and machine-readable format and request portability where applicable;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a competent supervisory authority.
To exercise a right, email dreamingofcanada.com@gmail.com. We may request information reasonably necessary to verify identity and prevent unauthorised disclosure.
18. Right to object
Where processing is based on legitimate interests, you may object on grounds relating to your particular situation. We will stop the relevant processing unless there are compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims. If personal data were ever processed for direct marketing, you would have the right to object at any time.
19. Withdrawal of consent
Where processing is based on consent, consent can be withdrawn at any time. It should be as easy to withdraw as to give. Withdrawal applies to future processing and does not affect processing lawfully carried out before withdrawal.
20. Complaint to a supervisory authority
If you are in the European Union, you may lodge a complaint with the competent supervisory authority. In Italy, this is the Garante per la protezione dei dati personali. Contacting us first is welcome but does not limit your right to complain to an authority.
21. Automated decision-making and profiling
Dreaming of Canada does not use the Website to make decisions based solely on automated processing that produce legal effects or similarly significant effects on individual visitors. Third-party services may perform their own analytics, fraud-prevention, advertising or profiling activities under their own policies and legal bases.
22. Children’s privacy
The Website provides general travel information and is not designed to intentionally collect personal data from children. Children should not submit personal information without the involvement of a parent or legal guardian where required by applicable law.
23. Changes to this Privacy Policy
This Policy may be updated when Website services, providers, technical configuration or legal requirements change. The date at the top identifies the stated revision date.
24. Contact
Dreaming of Canada
Email: dreamingofcanada.com@gmail.com
Website: https://dreamingofcanada.com
25. Consent-management records
Dreaming of Canada uses a local consent-management interface to remember privacy choices. A strictly necessary first-party cookie named doc_cmp_consent may store the consent configuration version, the visitor’s Analytics choice, the External content/marketing choice and the time of the choice. The preference is retained for up to 180 days unless it is deleted earlier or a material change requires a new choice.
This information is processed to respect the visitor’s privacy instructions and, where applicable, support accountability regarding consent. The preference cookie is not used for advertising or behavioural profiling.