1 - Introduction
Italy Travels S.r.l.takes the privacy and security of your personal data seriously. We collect and process it with particular care and attention, while adopting specific technical and organizational measures to ensure full processing security.
Pursuant to art. 13 of European Regulation 2016/679 ("Regulation"), we would like to inform you that your personal data is processed in a way that ensures security and confidentiality and is carried using paper, computerized and/or telematic tools, as detailed in this policy.
This policy is provided pursuant to Recommendation no. 2/2001 which the European authorities for the protection of personal data, within the Working Group established by Art. 29 of Directive 95/46/EC, adopted on May 17, 2001.
2 - Definitions
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;
Special categories of personal data mean data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.
Data controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
3 - Data controller:
The processing of your personal data is carried out by Italy Travels S.r.l. ("Italy Travels" or "Company"), with registered office in Florence at Via Livorno 54/2, in its capacity as Data Controller pursuant to and for the purposes of the EU Regulation.
For any question or request related to the processing of your personal data you may contact usat any time by sending a request to the following contacts:
Data controller
Company Name: Italy Travels Srl
Registered office: Via Livorno 54/2, Florence
Data contact telephone number: +39 055 5321180
Data contact email: privacyitalytravels@gmail.com
4 - Purposes and legal basis of processing
The personal data that Italy Travels processes are those that you provide us with when you place an order to purchase goods or services and those that we collect while you browse or use the online services offered by Italy Travels.
Italy Travels may therefore collect data about you such as personal data such as first and last name, email, shipping address and billing address, navigation data, and your buying habits.
After being collected, your personal data are processed for the following purposes:
The processing of your personal data is carried out using paper, computer or telematic tools and with adequate security measures to ensure the security and confidentiality of your personal data. The data are currently processed and stored at the registered office of the Data Controller and are also processed on behalf of the Data Controller, by professionals and/or companies in order to execute technical, development, management, and administrative/accounting activities.
5 - Modalities of processing
Your personal data will be processed by the specifically authorized staff of Italy Travels and exclusively on the basis of specific instructions from the Data Controller.
The processing of your personal data is carried out using paper, computer or telematic tools and with adequate security measures to ensure the security and confidentiality of your personal data. The data are currently processed and stored at the registered office of the Data Controller and are also processed on behalf of the Data Controller, by professionals and/or companies in order to execute technical, development, management, and administrative/accounting activities.
6 - Disclosure of personal data
Your personal data will also be transmitted to third parties that we use to provide our services. These parties have been chosen in a suitable manner, and they provide an adequate guarantee of compliance with the rules governing the processing of personal data. These parties have been appointed Data Processors pursuant to art. 28 of the Regulation and are required to carry out their activities according to the specific instructions given by Italy Travels and under its control.
These third parties may belong to the following categories: financial operators, companies specializing in IT services; couriers; marketing companies; companies specializing in market research and data processing.
Your data may also be transferred to the police, judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection against threats to public security, and to allow Italy Travels to exercise or protect a right of its own or third parties before the competent authorities, as well as for other reasons related to the protection of the rights and freedoms of others.
7 - Data transfer outside the EU
Some of the third parties referred to in paragraph 4 above may be based in countries outside the European Union, which, nonetheless, provide an adequate level of data protection, as required by specific decisions of the European Commission.
The transfer of your personal data to third parties resident or located in countries that do not belong to the European Union and that do not ensure adequate levels of protection will be done only with your consent or prior stipulation between Italy Travels and these parties of specific agreements, containing safeguards and appropriate guarantees for the protection of your personal data, known as "standard contractual clauses," also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of a contract between you and Italy Travels or for the management of your requests.
8 - Data Retention
We inform you that your data will be retained for a limited period of time, which varies depending on the type of processing and its specific purposes, as described below:
- data collected to conclude and execute contracts for the purchase of goods or services: the data will be kept until the conclusion of administrative-accounting formalities. Billing data will be retained for ten years from the date of invoice;
- User data registered on a portal/website: the data will be stored until you request your profile be erased;
- payment data: the data will be kept until payment is received and the relevant administrative and accounting formalities are concluded;
- data collected in the context of using services offered by Italy Travels: these data are stored until the termination of the service or cancellation of registration to the service by the User;
- data related to user requests to Italy Travels 's Customer Service: data useful to assist you will be kept until your request has been fulfilled;
- data provided for commercial communication, opinion polls and market research: until the user requests an end to the activity and, regardless, within 2 years from the last interaction of any kind from the data subject with Italy Travels.
At the end of that period, your data will be permanently deleted or otherwise made irreversibly anonymous by Italy Travels.
9 - Your rights
We inform you that you have the right to exercise the following rights in relation to the personal data covered by this notice, as provided and guaranteed by the Regulations:
- Right of access and rectification (articles 15 and 16 of the Regulations): you have the right to access your personal data and to request that it be corrected, modified, or integrated. If you wish, we will provide you with a copy of your data in our possession.
- Right to erasure of data
- Right to restriction of processing
- Right to data portability
- Right to objectItaly Travels must evaluate the reasons for your request.
- Right to lodge a complaint
At any time, you may exercise your rights with regard to the specific processing of your personal data by Italy Travels.
Further information about the rights of the data subject can be obtained by asking the Data Controller for the full excerpt of the articles mentioned above.
10 - Security Measures
Italy Travels adopts appropriate and preventive security measures to safeguard the confidentiality, integrity, completeness, and availability of personal data of the data subject. Technical, logistical, and organizational measures are implemented with the aim of preventing damage, including accidental damage, losses, alterations, improper and unauthorized use of the processed data.
The Data Controller cannot be held responsible for any untruthful information sent directly by the user (for example: correctness of the email address or of the credit card or postal address details), or for any information concerning him or her that has been provided by a third party, including fraudulently.
11 - Changes to this privacy policy
As our services regularly evolve, there may be changes to the characteristics of the processing of your personal data described herein. This privacy policy may be subject to changes and additions over time, as necessary due to new regulations regarding the protection of personal data, or the development/modification of our services.
We, therefore, suggest that you periodically check the content of our policy; when possible, we will seek to inform you promptly of the changes made and their consequences.
The updated version of the privacy policy will always be posted on the page http://www.italy-travels.it/privacy/
indicating the date of its last update.
12 - Date of last update
July 7, 2018
