DATA CONTROLLER :Adrastea Viaggi snc, in the person of its legal representative, with registered office in Tirano (SO) 23037 in Via Pio Rajna 13, email info@adrasteaviaggi.it, as data controller, (hereinafter, "Data Controller")
We inform youmthat, in compliance with the provisions of Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data (hereinafter, "GDPR"), your data will be processed in compliance with the aforementioned legislation and with the methods and for the purposes specified below:
1 - OBJECT OF THE PROCESSING
The Data Controller, as part of its activity, processes your personal data (in particular, name, surname, tax code, VAT number, email, telephone number – hereinafter, "personal data" or even "data") collected on the occasion of the voluntary inclusion of the aforementioned personal data in the data collection form on the website.
2 - PURPOSE
Your personal data are processed for the following purposes distinct by legal basis of reference: 2.1 Execution of the contract - fulfillment of legal obligation (Article 6 letter b, letter c). Your personal data are processed for the following purposes:
a) fulfilling pre-contractual, contractual and administrative-accounting obligations b) fulfilling the obligations provided for by law, by a regulation, by Community legislation or by an order of the Authority.
2.2 On the basis of your consent (art.6 lett. A). Your personal data are processed, for sending text messages and / or e-mails of information communications, as well as newsletters by the Owner in relation to its own initiatives and / or of subsidiary and / or affiliats' initiatives (Marketing purposes).
2.3 - Legitimate interests (Article 6 (f) – recital 47).
Please note that if you are already our customer, we may send you, always in compliance with your interests and rights, commercial communications relating to services and products of the Data Controller similar to those you have already used, unless you disagree to be communicated to the contacts indicated in point 8.
3 - RECIPIENTS OR CATEGORIES OF RECIPIENTS OF DATA
Thr personal data provided may be communicated to third party recipients, in order to comply with contracts or related purposes. More precisely, the data may be communicated to recipients belonging to the following categories:
• Professionals and consultants in tourism and/or commercial and IT matters,
• Banking institutions;
• Authorities competent to fulfil legal obligations and/or provisions dictated by public bodies (Revenue Agency, etc.);
• external parties that manage / support / assist, even only occasionally, the Data Controller in the provision of services, in the administration of the information system and telecommunications networks (including e-mail).
The subjects belonging to the above categories act as Data Processors, or operate completely independently as separate Data Controllers.
4 - PROCESSING METHOD
The processing will be carried out both with manual and/or IT and telematic tools as well as with logic of organization and processing strictly related to the aforementioned purposes and in any case in order to guarantee the security, integrity, availability and confidentiality of personal data. In compliance with the provisions of art. 5 paragraph 1 lett. e) of Reg. EU 2016/679, the personal data collected will be stored in a form that allows the identification of the interested parties for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
5 - PROVISION OF DATA
Please note that, taking into account the purposes of the processing specified in point 2.1, the provision of data is mandatory and their failure, partial or incorrect provision may, as a consequence, make it impossible to manage your request.
6 - TRANSFER OF DATA TO A THIRD COUNTRY and/OR ANINTERNATIONAL
ORGANIZATION The personal data provided for registration in the customer area may be transferred outside the European Union.
7 - DURATION
The personal data are kept for the entire duration of the contractual relationship and, in the event of revocation and/or other type of termination of the mentioned relationship, within the terms established by law for the fulfillment, for example,
of tax obligations.For marketing purposes, the data will be kept until the consent is revoked or for the period established by law or by measures issued by the Supervisory Authority.
8 - RIGHTS OF THE INTERESTED PARTY
You may, at any time, exercise the rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, and in particular:
• access to personal data;
• to obtain the rectification or cancellation of the same or the limitation of the processing that concerns it;
• to oppose the processing; to the portability of the data;
• to revoke the consent: the revocation of the consent does not affect the lawfulness of the processing based on the consent given before the revocation;
• to propose a complaint to the Supervisory Authority (Privacy Guarantor).
You can exercise your rights by sending a request to the Data Controller to the following contacts: info@adrasteaviaggi.it - info@treninorosso.it - Adrastea Viaggi snc, Via Pio Rajna 13 – 23037 Tirano SO ITALY