1. PRIVACY POLICY
Privacy and cookie policy pursuant to Art 13 of the EU General Data Protection Regulation 2016/679 (GDPR)
Domizia Incoming https://baiadomiziaincoming.it/ is the website of Domizia Incoming with registered office in Via degli Oleandri, 20 81037 Baia Domizia (CE), PIva: 03490600610 is constantly striving to protect the online privacy of its users.
Source of personal data and data controller
This page describes the general methods for processing the personal data of users of the site and cookies, referring to any specific sections where users of the site can find specific information and any requests for consent (for individual processing). The information is provided only for this site and not for other websites that may be consulted by the user through links. Domizia Incoming with registered office in Via degli Oleandri, 20 81037 Baia Domizia (CE), PIva: 03490600610, is committed to protecting your personal information and this document aims to help you understand what information we may collect and how we use it.
A) Method of processing
This document has been drawn up in accordance with Article 13 of the EU Regulation 2016/679 (hereinafter: “Regulation”) in order to allow you to know our privacy policy. It describes the general modalities of the processing of the personal data of users of the website and cookies and how your personal information is managed when you use our website (hereinafter: “Website”). The information and data provided by you or otherwise acquired in the context of the use of GoGo Tour’s services, – such as: access to the reserved area of the Website, newsletters, etc. (hereinafter: “Services”) -, will be subject to processing in compliance with the provisions of the Regulation and the confidentiality obligations that inspire GoGo Tour’s activity. In accordance with the provisions of the Regulation, the processing carried out by Domizia Incoming will be based on the principles of lawfulness, correctness, transparency, purpose limitation and conservation, data minimisation, accuracy, integrity and confidentiality. The holder of the processing carried out through the Website is GoGo Tour as defined above, which can be written to for any information concerning the processing of personal data. The Personal Data Protection Officer (hereinafter, “DPO”) can be reached at the following address: info@domiziaincoming.it. This information is provided only for this Site and not for any other websites that may be consulted by the user via links. Please refer to any specific sections of the Site where you can find specific information and any requests for consent for individual processing.
B) Types of data
Following navigation of the Website, we inform you that GoGo Tour shall process personal data (art. 4(1) of the Regulations) hereinafter only “Personal Data”. In particular, the Personal Data processed through the Website are as follows:
1. Navigation Data
The computer systems and software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct operation (see the paragraph on cookies below), to identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used by the competent authorities to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site.
2. Data provided voluntarily by the data subject
Apart from what is specified for navigation data, the user is free to provide personal data in any request forms on the website (e.g. to activate the newsletter, free registration, purchase, etc.). Failure to provide such data may make it impossible to provide the service. In these cases, only the information necessary for the requested service will be requested (see specific information in detail). In the use of some of the Services of the Site there may occur the processing of Personal Data of third parties sent by you to Domizia Incoming. With respect to such hypotheses, you act as autonomous data controller, assuming all the obligations and responsibilities of law. In this sense, you hereby grant Domizia Incoming the widest possible indemnity in respect of any dispute, claim, request for compensation for damage caused by processing, etc. that may be received by Domizia Incoming from third parties whose Personal Data have been processed through your use of the functions of the Site in breach of the applicable data protection regulations. In any event, should you provide or otherwise process Personal Data of third parties in the use of the Site, you warrant as of now – assuming all related liability – that this particular processing hypothesis is based on a suitable legal basis pursuant to art. 6 of the Regulation that legitimises the processing of the information in question.
C) Purpose of the processing and legal basis
The processing of personal data that we intend to carry out, with your specific consent where necessary, has the following purposes
To enable the provision of the Services of the Site; The legal basis of the processing is the execution of pre-contractual measures taken at your request (art. 6(1)(b) of the Regulation) as the processing is necessary for the provision of the Service. The provision of Personal Data for these purposes is optional but failure to provide it would make it impossible to activate the Services provided by the Site.
D) Interactions made on Domizia Incoming social pages
In addition, your Personal Data may possibly be processed for the following purposes
integration of the “user profile” present in Domizia Incoming’s Customer Relationship Management (“CRM”) through the interactions made on the social pages (for example, messages and/or comments on Domizia Incoming’s Facebook page, or on any other environment or social page of the Data Controller), in order to respond to requests for assistance from the user concerned.
The legal basis for the processing for the purpose described is the performance of a contract or pre-contractual measures or in response to requests by the data subject (Art. 6(1)(b) of the Regulation). The provision of your personal data for the above-mentioned purpose is optional, but without it it may not be possible to fulfil your requests.
The details of the interactions made by the user concerned on our social pages (for example, messages and/or comments on Domizia Incoming’s Facebook page, or on any other environment or social page of the Data Controller) may also entail further processing of your personal data for purposes of defence against abuse and/or offences and purposes of improving the support offered to users interacting through our social channels, such as in the case of statistical and/or aggregate processing that allow us to better target our communication strategies with online users. The legal basis of the processing for the specific additional purpose described is identified in the legitimate interest of the Data Controller (art. 6 par. 1, lett. f) of the Regulation) in the management of its users’ data.
The data subject has the right to object at any time on grounds relating to his or her particular situation to the processing of data for such further purposes, unless the Controller demonstrates the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
E) Recipients of Personal Data
Your Personal Data may be shared, for the above purposes, with
persons authorised by Alpitour for the processing of Personal Data necessary to perform activities strictly related to the provision of Services, who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees and system administrators)
third parties who may be involved in the management of the Site and who typically act as Data Processors (a complete and updated list of Data Processors is available at https://baiadomiziaincoming.it/).
subjects, entities or authorities to whom it is mandatory to communicate your Personal Data under provisions of law or orders of the authorities.
F) Transfers of Personal Data
Some of your Personal Data is shared with Recipients who may be located outside the European Economic Area. Alpitour ensures that your Personal Data is processed by these recipients in accordance with the Regulation. Indeed, transfers may be based on an adequacy decision, Standard Contractual Clauses approved by the European Commission or other appropriate legal basis.
G) Your privacy rights ex art. 15 et seq. of the Regulation
Pursuant to articles 15 et seq. of the Regulation, you have the right to request from Alpitour, at any time, access to, rectification or erasure of your Personal Data or to object to their processing, you have the right to request the restriction of processing in the cases provided for by article 18 of the Regulation, and to obtain in a structured, commonly used and machine-readable format the data concerning you, in the cases provided for by article 20 of the Regulation.
Requests should be made in writing to the Data Controller at the following address: info@domiziaincoming.it.
In any case, you are always entitled to lodge a complaint with the competent Supervisory Authority (Garante per la Protezione dei Dati Personali), pursuant to Article 77 of the Regulation, if you consider that the processing of your Personal Data is contrary to the legislation in force.
H) Amendments
This privacy policy is in force as of 23/5/2018. Domizia Incoming reserves the right to modify or simply update its content, in part or in full, including due to changes in applicable legislation. Domizia Incoming will inform you of such changes as soon as they are introduced and they will be binding as soon as they are published on the Site. Domizia Incoming therefore invites you to visit this section on a regular basis in order to become acquainted with the most recent and updated version of the privacy policy so as to be always up to date on the data collected and on the use made of such data by Domizia Incoming.
