As you know, as of 25 May 2018, the new European Data Protection Regulation No. 679/2016, also known as GDPR, is fully applicable.
In order to provide you with even greater transparency in the processing of your personal data, we have updated our Privacy Policy, which you can find on the Privacy page of our website ukuleleviaggi.it.
Here are the main changes:
- greater detail of the categories of personal data we process;
- possibility of exercising new rights;
- indication of personal data retention periods;
- more information on the possible transfer of personal data to non-EU countries (guarantees covering the same);
- information on the processing we may carry out for legitimate interests.
Below you will also find a summary of the changes introduced by the GDPR.
Subject: Information pursuant to Article 13 of Legislative Decree no. 196/2003 and Article 13 of EU Regulation no. 2016/679
Company: Ukulele Viaggi di Ancona Tommaso – Head Office: Via Dalmazia, 437 – 51100 Pistoia
Registered office: Via Chiesa Nuova n. 6, 51100 Pistoia – Vat nr. 01441480470
Pursuant to italian Art. 13 of Legislative Decree 196/2003 (hereinafter ‘Privacy Code’) and Art. 13 of EU Regulation no. 2016/679 (hereinafter ‘GDPR 2016/679’), laying down provisions for the protection of persons and other subjects regarding the processing of personal data, we wish to inform you that the personal data you provide will be processed in compliance with the above mentioned law and the confidentiality obligations to which Ukulele Viaggi di Ancona Tommaso is bound
Data controller
Tommaso Ancona born in Bari on 16 September 1958 and resident in Via Chiesa Nuova, n. 6 – 51100 Pistoia (CF: NCNTMS58P16A662H), owner of Ukulele Viaggi di Ancona Tommaso Via Dalmazia n. 437 Pistoia P.Iva 01441480470 phone 0573/904663 email: tommaso@ukuleleviaggi.it
Purpose of processing
The personal data provided by you are necessary for the fulfilment of legal obligations (fiscal fulfilments), and in order to be contacted by our office in case of urgent communications or commercial purposes related to our activity (our new services, travel proposals, appointments)
Processing and storage methods
The processing will be carried out in automated and/or manual form, in compliance with the provisions of Article 32 of GDPR 2016/679 and Annex B of Legislative Decree 196/2003 (Articles 33-36 of the Code) regarding security measures, by specially appointed persons and in compliance with the provisions of Article 29 GDPR 2016/ 679.
We would like to inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Art. 5 GDPR 2016/679, subject to your free and explicit consent expressed at the foot of this information notice, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed.
Scope of communication and diffusion
We would also like to inform you that the data collected will never be diffused and will not be communicated without your explicit consent, except for necessary communications that may involve the transfer of data to public bodies, consultants or other parties for the fulfilment of legal obligations.
Diffusion
Your personal data will not be disseminated in any way. Your personal data may also be transferred, limited to the above-mentioned purposes, to the following states:
- EU countries;
- Secure non-EU states.
Special categories of personal data
Pursuant to Articles 26 and 27 of Legislative Decree No. 196/2003 and Articles 9 and 10 of EU Regulation No. 2016/679, data that can be qualified as ‘special categories of personal data’, i.e. data revealing ‘racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data concerning a person’s health or sexual life or sexual orientation’ are neither collected nor processed. These categories of data can only be processed with your free and explicit consent, given in writing at the end of this information notice.
Your data will not be transferred either to member states of the European Union or to third countries outside the European Union.
Existence of an automated decision-making process, including profiling
The DATA CONTROLLER does not adopt any automated decision-making process, including profiling, as referred to in Article 22(1) and (4) of EU Regulation No. 679/2016.
Rights of the data subject
At any time, you may exercise, pursuant to Article 7 of Legislative Decree No. 196/2003 and Articles 15 to 22 of EU Regulation No. 2016/679, the right to:
- request confirmation of the existence or otherwise of your personal data;
- to obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the storage period
- obtain the rectification and erasure of data
- obtain the restriction of processing
- obtain portability of the data, i.e. receive them from a data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance
- to object to the processing at any time and also in the case of processing for direct marketing purposes
- to object to an automated decision-making process concerning natural persons, including profiling
- to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him/her or to object to the processing thereof, in addition to the right to data portability
- withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
- to lodge a complaint with a supervisory authority.
You may exercise your rights by written request sent to ‘Ukulele Viaggi di Ancona Tommaso, Via Dalmazia, 437 Pistoia’, to the postal address of the registered office or to the email address: tommaso@amministratore
Details of cookie management
Cookies are small text strings that sites visited by the user send to his/her terminal (usually to the browser), where they are stored and then retransmitted to the same sites the next time the same user visits. Cookies are distinguished by their duration, purpose and origin.
The duration of cookies can be either session or persistent. The first type of cookie is automatically deleted after the browser is closed, while the second type remains on the user’s device until a predetermined expiry date.
There are two purposes for cookies: technical cookies and profiling cookies.
Technical cookies are those necessary for the operation of the site and the provision of services; these are used for the sole purpose of carrying out the transmission of a communication over an electronic communication network.
Some examples of technical cookies are
- navigation or session cookies, which ensure normal navigation and use of the site (allowing, for example, authentication to access restricted areas)
- analytics cookies used to collect information in aggregate form on the number of users and how they visit the site
- functionality cookies, which allow the user to navigate the site according to the features and criteria selected in order to improve the service offered (e.g. choice of language).
Profiling cookies, on the other hand, are aimed at creating profiles of the user and are sometimes used in order to send advertising messages in line with the preferences expressed by the user when surfing the web.
Some examples of profiling cookies are:
- advertising profiling cookies are used to propose advertisements based on the interests expressed by users while browsing;
- retargeting cookies are used to serve advertisements to users who have previously visited the site;
- social network cookies are used for sharing content on social networks;
- statistics cookies are used to manage navigation statistics.
These types of cookies can be third-party and first-party cookies. A cookie is a third party cookie when it is sent from a site other than the one you are viewing, whereas a first party cookie is a cookie installed by the operator of the site you are visiting.
Depending on the type and source of the cookie, its installation will or will not be subject to your consent.