Privacy policy
Last updated: 22 October 2026
This policy explains what personal data GoNest (gonestworld.com) processes, why, for how long and what rights you have, under Regulation (EU) 2016/679 (GDPR) and the Personal Data Protection Code (d.lgs. 196/2003).
Who processes the data
The data controller is the company named at the bottom of this page, which operates the site. For any privacy request, you can write to the email address shown in the same box.
What data we process
If you browse without an account: technical connection data (IP address, browser type, pages requested, date and time), used to run the site, protect it from abuse and limit the number of requests. If you create an account: email, password (stored only in hashed, encrypted form), an optional display name and the preferences you choose (language, currency, time zone, country of citizenship and of residence, interests). If you use the personal features: saved places, collections, plans with activities, budget scenarios, notifications. If you take part in the community: the questions, answers and reviews you publish, which are visible to other users. We do not ask for identity documents, payment details or health data.
Why and on what legal basis
To provide you with the service and the account features you have requested (performance of a contract, art. 6.1.b GDPR). For site security, abuse prevention, moderation of public content and technical logs (legitimate interest, art. 6.1.f). To comply with legal obligations and respond to requests from the authorities (art. 6.1.c). For personalised Google AdSense ads only with your consent (art. 6.1.a), which you can refuse or withdraw at any time without losing access to the content.
Advertising
The site shows Google AdSense ads. Google Ireland Limited and its advertising partners act as independent controllers and may use cookies and device identifiers to serve and measure ads and, only with your consent, to personalise them. Consent is collected through Google's message, shown to visitors from the European Economic Area, the United Kingdom and Switzerland. Information on how Google uses data: policies.google.com/technologies/partner-sites.
Who receives the data
Data is stored on servers operated by Fly.io, Inc., a hosting provider acting as data processor, in the Frankfurt region (European Union); uploaded files are stored on the storage service connected to Fly.io. If a provider processes data outside the European Economic Area, the transfer takes place with the safeguards provided for by Articles 44-49 of the GDPR, such as standard contractual clauses. We do not sell personal data. The content you publish in the community is visible to everyone.
For how long
Account data is kept for as long as the account exists. If you delete your account, your personal data is erased immediately; public questions, answers and reviews are anonymised, or deleted if you choose so when deleting the account. Technical logs are kept for a limited period, as necessary for security. A minimal record that the deletion took place is retained, for security and evidential purposes.
Data that stays on your device
Some features store data only in your browser, and it is not sent to us: pages downloaded for offline reading, your chosen language and currency, recently viewed places if you have enabled the option, items saved before creating an account. You can delete them from your browser settings.
Your rights
You can request access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (artt. 15-22 GDPR). From your personal area you can download your data in JSON format and delete your account. If you believe the processing breaches the law, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian Data Protection Authority, garanteprivacy.it).
Minors
The service is not intended for children under 14, who cannot create an account.
Changes
If this policy changes, the update date at the top is amended; significant changes are notified to registered users.
Site owner and data controller
Nexuslab S.a.s.
Registered office: Via Pedro Alvares Cabral, 87036 Rende (CS), Italia
VAT no.: 03123600797
Privacy contact: info@gonestworld.com