Last updated: September 28, 2026
This Privacy Policy explains how Dreaming New York (the “Site”), available at dreamingnewyork.com, collects, uses, stores, shares and otherwise processes personal data when you browse the Site, contact us, interact with website features or follow links to third-party services.
This notice is intended to provide transparent information under applicable privacy laws, including, where relevant, Regulation (EU) 2016/679 (the GDPR), the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended), and other privacy laws that may apply according to the visitor’s location. The rules that apply in a particular case depend on the processing activity, the user’s location and the legal scope of the relevant law.
1. Data Controller and privacy contact
The data controller for personal data processed directly through Dreaming New York is the owner/operator of Dreaming New York. Privacy questions, requests and notices can be sent to admin@dreamingnewyork.com.
Some external services accessible from or embedded in the Site may act as independent controllers for the data they collect directly. Their processing is governed by their own privacy notices and terms.
2. Scope of this Privacy Policy
This policy covers personal data processed through the Site and its normal website functions. It does not replace the privacy policies of booking platforms, affiliate partners, social networks, video platforms, map providers, payment providers or other external websites that you may visit after leaving Dreaming New York.
3. Categories of personal data we may process
3.1 Technical, device and connection data
- IP address and approximate location derived from the IP address;
- date and time of requests;
- requested URLs and referring pages;
- browser type, browser language and operating system;
- device type, screen or technical characteristics where transmitted by the browser;
- server responses, error logs, security events and anti-abuse information;
- network and connection information reasonably necessary to deliver and protect the Site.
3.2 Usage and interaction data
Depending on the tools enabled on the Site and your consent choices, we may process information about pages viewed, navigation paths, link clicks, session activity, device/browser identifiers, general traffic patterns, and interactions with embedded or affiliate content.
3.3 Information you provide directly
- Contact communications: name, email address, subject, message and any other information you choose to provide.
- Comments or feedback: if such functions are enabled, the content submitted and technical information used to detect spam or abuse.
- Professional or commercial correspondence: information included in partnership, media, advertising, licensing or other business inquiries.
3.4 Cookie, consent and preference data
We may process cookie identifiers, local-storage values, consent status, date/time of consent choices and similar information needed to remember or demonstrate privacy preferences. More information is available in our Cookie Policy.
4. Sources of personal data
Personal data may come directly from you, automatically from your browser/device when you access the Site, from our hosting/security infrastructure, from website tools used to provide the service, or from third-party providers that report limited information about referrals, performance or transactions where legally permitted.
5. Purposes and legal bases for processing
| Purpose | Typical data | Legal basis where GDPR applies |
|---|---|---|
| Delivering pages and core website functions | IP address, request data, device/browser information | Legitimate interests in operating the Site and, where applicable, steps requested by the user |
| Security, fraud prevention, debugging and abuse prevention | IP address, logs, security events, request patterns | Legitimate interests in protecting the Site, users and infrastructure; legal obligation where applicable |
| Responding to messages and requests | Name, email, message and related correspondence | Legitimate interests, steps requested before a contract, performance of a contract, or legal obligation depending on the request |
| Remembering privacy and cookie choices | Consent/preference records and technical identifiers | Legal obligation and legitimate interests in demonstrating and respecting choices |
| Non-essential analytics or measurement | Usage data, identifiers and device/browser information | Consent where required; exceptionally another lawful basis only where permitted by applicable law and the specific configuration |
| Advertising, affiliate measurement or cross-site tracking | Referral data, identifiers, click/attribution data | Consent where required by ePrivacy/cookie rules or other applicable law |
| Establishing, exercising or defending legal claims and complying with law | Relevant account, technical or communication data | Legal obligation and/or legitimate interests |
Where we rely on legitimate interests, we consider the necessity of the processing and the impact on users’ rights and reasonable expectations. Where consent is the legal basis, it may be withdrawn at any time for future processing without affecting the lawfulness of processing carried out before withdrawal.
6. Whether providing personal data is required
You are generally not required to provide personal data simply to read public content. Some technical data is transmitted automatically when a browser communicates with a website and is necessary to deliver the requested pages securely. If you contact us, the information needed to identify and answer your request may be necessary; if it is not provided, we may be unable to respond effectively.
7. Cookies and similar technologies
The Site may use cookies, local storage, pixels, scripts, tags and similar technologies. Strictly necessary technologies may be used for functions such as security, network management and storing privacy choices. Non-essential analytics, advertising, affiliate or embedded-content technologies are subject to consent where required by applicable law. The Cookie Policy explains the categories, purposes and available controls in more detail.
8. WordPress, Jetpack, Akismet and technical service providers
Dreaming New York is operated using WordPress and may use technical plugins and services, including Jetpack and Akismet. Depending on which features are enabled, these tools may process technical, security, anti-spam, performance, form or interaction data. Some of these services are provided by Automattic group companies and may involve processing on infrastructure located outside the user’s country. The specific data processed depends on the feature being used.
9. Analytics and measurement
The Site may use analytics or performance-measurement functions to understand aggregated traffic, identify technical problems and improve content. Where such tools store or access non-essential information on a user’s device, or otherwise require consent under applicable law, they should be activated only after the relevant consent has been obtained. Analytics settings may change over time as services are added, removed or reconfigured.
10. Affiliate links, booking services and external commercial partners
Dreaming New York contains links to third-party travel and booking services, including affiliate links. For example, links may direct users to Booking.com or other travel providers. When you click an external affiliate or booking link, the destination provider may collect information, place its own cookies or identifiers, and process a booking or payment under its own privacy policy. Dreaming New York may receive referral or commission information, but generally does not receive the complete payment-card or booking data that you provide directly to the external provider.
For more information about commercial relationships, see our Affiliate Disclosure.
11. Embedded content, video and social media
Articles may contain or link to embedded content such as videos, maps, social posts or other third-party media. Embedded content can technically behave as though you visited the third-party website directly. The provider may receive your IP address and browser information and, if permitted to load, may place cookies or combine the interaction with information linked to an account you hold with that provider. Where prior consent is required for non-essential tracking, the relevant content should not activate such tracking before consent.
12. Recipients and categories of service providers
Personal data may be processed by or disclosed to the following categories of recipients where necessary: hosting and infrastructure providers; security and anti-spam providers; WordPress/website technology suppliers; email and communication providers; analytics or measurement providers; consent-management services; technical contractors; professional advisers; competent authorities when required by law; and third-party services that you independently choose to access through external links.
Where a provider acts as a processor on our behalf, it should process data under appropriate contractual and data-protection obligations. Some providers instead determine their own purposes and means and act as independent controllers.
13. International data transfers
Some website providers may process personal data in countries outside the European Economic Area, the United Kingdom or the country in which you live. Where GDPR transfer rules apply, transfers may rely, as appropriate, on an adequacy decision, approved Standard Contractual Clauses, another safeguard under Chapter V GDPR, or a lawful derogation in the limited circumstances in which one is available. The transfer mechanism may depend on the provider and destination country.
14. Data retention
We retain personal data only for as long as reasonably necessary for the purpose for which it was processed, taking into account legal, accounting, security and dispute-resolution requirements. Because the Site uses different systems and providers, exact periods may vary. The following criteria generally apply:
- Server and security logs: retained for the period reasonably needed for security, troubleshooting and abuse prevention, subject to hosting-provider settings and legal requirements.
- Correspondence: retained for as long as needed to respond and handle reasonable follow-up, and longer where necessary for legal or business records.
- Consent records: retained for a period reasonably necessary to remember and demonstrate the user’s choices.
- Cookies and similar identifiers: retained according to their individual expiration period or until deleted/withdrawn, as described in the Cookie Policy or relevant provider settings.
- Legal records: retained for the applicable limitation period or as required by law.
15. Security of personal data
We use reasonable technical and organizational measures intended to protect the Site and personal data against unauthorized access, alteration, loss, misuse or disclosure. Measures may include access controls, updates, backups, anti-spam/security tools and hosting-level protections. No internet transmission or storage method can be guaranteed to be completely secure.
16. Automated decision-making and profiling
Dreaming New York does not use information submitted directly through ordinary contact communications to make decisions based solely on automated processing that produce legal effects or similarly significant effects on the individual. Third-party advertising, analytics or booking providers may use automated techniques or profiling for their own purposes; their privacy notices should be consulted for details.
17. Your rights under the GDPR
Where the GDPR applies, and subject to its conditions and exceptions, you may have the right to:
- obtain confirmation as to whether personal data concerning you is being processed and request access to it;
- request correction of inaccurate or incomplete data;
- request erasure of personal data in the circumstances provided by law;
- request restriction of processing;
- receive eligible data in a structured, commonly used and machine-readable format and, where technically feasible, request transmission to another controller;
- object to processing based on legitimate interests, including an absolute right to object to direct marketing where applicable;
- withdraw consent at any time for future processing where consent is the legal basis;
- lodge a complaint with a competent supervisory authority.
Requests can be sent to admin@dreamingnewyork.com. We may request information reasonably necessary to verify identity and locate the relevant data. Rights are not absolute and statutory exceptions may apply.
18. Right to complain to a supervisory authority
If you are in the European Union or European Economic Area, you may lodge a complaint with the data-protection authority in the country where you habitually reside, work or where you believe an infringement occurred. In Italy, the supervisory authority is the Garante per la protezione dei dati personali (garanteprivacy.it).
19. Visitors from the United States and other jurisdictions
Certain U.S. state privacy laws and other national or regional laws may grant additional rights, such as access, correction, deletion, portability, and the ability to opt out of certain targeted advertising, sale or sharing activities. These rights apply only when the relevant law covers both the user and the Site’s processing activity. Requests may be sent to the privacy contact above. We do not discriminate against users for exercising rights protected by applicable law.
20. Children’s privacy
Dreaming New York is a general travel-information website and is not directed at children for the purpose of collecting their personal data. We do not knowingly seek personal information from children through ordinary website use. If you believe a child has provided personal data directly to the Site in circumstances requiring deletion or another action under applicable law, contact us.
21. External websites
Links to external websites are provided for convenience and travel planning. Once you leave Dreaming New York, the external site’s own privacy practices apply. We recommend reviewing the provider’s privacy notice before submitting personal data or making a booking or purchase.
22. Changes to this Privacy Policy
We may revise this Privacy Policy to reflect changes in the Site, service providers, legal requirements or processing practices. Material changes will be reflected in the version published on this page. The date shown at the top indicates when this version was last updated.
23. Contact
For privacy questions or to exercise a privacy right, email admin@dreamingnewyork.com. For general communications, you may also use the Contact page.