INFORMATION ON THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH ARTICLE 13 OF REGULATION (EU) 2016/679

Subjects concerned: users consulting the website www.lanotterosa.it of “DESTINAZIONE TURISTICA ROMAGNA”

WHY THIS INFORMATION

In accordance with Regulation (EU) 2016/679 (hereinafter “Regulation”, or “GDPR”), this page describes the methods for processing the personal data of users who consult the website of “DESTINAZIONE TURISTICA ROMAGNA” accessible by electronic means at the following address: www.lanotterosa.it This information does not concern other sites, pages or online services that can be reached through hypertext links that may be published on this site but which refer to resources outside the domain lanotterosa.it

THE DATA CONTROLLER

Following the consultation of the site, data relating to identified or identifiable natural persons may be processed.
THE DATA CONTROLLER è “DESTINAZIONE TURISTICA ROMAGNA” with registered office and operational headquarters in Piazzale Federico Fellini, 3 – 47921 Rimini (RN), VAT no.: 04382230409

DATA PROTECTION RESPONSIBLE

The Data Protection Officer (RPD / DPO) è the company; Studio Paci & C. Srl – Contact person Dr. Gloriamaria Paci who can be contacted at the following address: dpo@studiopaciecsrl.it and telephone: 0541 – 1795431.

TYPES OF DATA PROCESSED, PURPOSES OF THE PROCESSING AND LEGAL BASIS

1) Browsing data
Legal basis: “data processing necessary for browsing the website” – contractual obligation – art. 6 par. 1 letter b) GDPR

The computer systems and software procedures used to operate this site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.

.

These data, which are necessary to navigate the Site and to benefit from the information it contains, are also processed by the owner for the purpose of:

.
• a) obtain aggregate and anonymous statistical information on the use of the Site (most visited pages, number of visitors per time slot or per day, geographical areas of origin of visitors, etc.);
.
• b) check the correct usability of the content offered by the Site;
.
• c) prevent or counteract any possible computer offences and fraudulent use of the functions available on the Site, also for the purpose of reconstructing security incidents and their traceability;

Duration of storage:
In compliance with the principles of lawfulness, purpose limitation and data minimisation, in accordance with Art. 5 of the GDPR, browsing data will be stored for no longer than the strictly technical purposes described above for which they are collected and processed, except in the event of the need to investigate criminal offences by the judicial authorities.

The data will not be retained for longer than the time required to fulfil the purposes for which they were collected and processed.

2) Data communicated by the user
Legal basis: “data processing necessary to answer users” – contractual obligation – art. 6 par. 1 letter b) GDPR

.

The optional, explicit and voluntary sending of messages to the contact addresses of “DESTINAZIONE TURISTICA ROMAGNA” private messages sent by users to institutional profiles/pages and on social media (where this possibility is provided for), as well as the filling in and forwarding of forms on the websites of
“DESTINAZIONE TURISTICA ROMAGNA”, entail the acquisition of the sender's contact details, necessary for replying, as well as all personal data included in such communications.

Specific information, where necessary, will be published from time to time on the pages of the site set up for the provision of certain services, where necessary, the user's consent is collected, informing him/her from time to time on the purposes and on the optional nature of providing the data.

Duration of storage:

The data communicated by the user are kept for the time necessary to handle individual requests, where consent is given until it is revoked, and any subsequent storage for statistical purposes entails the anonymisation of such data (except in the event of the need to investigate criminal offences by the judicial authorities).

The data are not retained for any period of time.

3) Cookies and other tracking systems

.

We make use of:

.
• a) technical cookies necessary for user navigation, facilitating the correct navigation of the site and the usability of its contents by the user. Legal basis: “contract as they are functional and necessary”.
.
• b) analytical cookies used to process aggregate statistical analysis of the use of and interaction with the site by the user. Subject to the user’s consent. Legal basis: “consent”.
.
• c) Profiling cookies make it possible to collect information about the preferences expressed by the user during browsing and to prepare reports for use in targeted advertising and marketing campaigns. Legal basis: “consent”.
  Information on data processing, the purpose, duration and complete management of cookies, including their consent and revocation, can be found in the document “Cookie policy” found in the footer of the page.

. .

4) Social Media Policy:
Information on the processing of personal data through the social media platforms used

.

For information on the processing of personal data carried out by the operators of the Social Media platforms, please refer to the information provided by them through their respective privacy policies. The Data Controller processes the personal data provided by users through the pages of the dedicated Social Media platforms, as part of its corporate promotion and advertising purposes, in order to manage interactions with users (comments, public posts, messages, shares, etc.) in compliance with current legislation.
Personal or sensitive data included in comments or public posts within the social media channels may be removed.

The platforms used are:

Facebook https://www.facebook.com/LaNotteRosa/

Instagram https://www.instagram.com/lanotterosa.it

Twitter https://twitter.com/Notte_Rosa

DATA RECIPIENTS

The recipients of the data collected as a result of the consultation of some of the services listed above are certain entities designated by the Controller pursuant to Article 28 of the Regulation, as data processors, and other service providers in the field of web-agencies, digital communication, system support, and any other digital service providers for which it is possible to request the complete list by writing to info@destinazioneromagna.emr.it

Some data and information may be transmitted or acquired by subjects identified as autonomous owners, such data are related to cookies that are usually anonymised before being sent, for statistical purposes. If transfer to non-EU countries is envisaged, the guarantee measures taken will be indicated.

.

The personal data collected are also processed by the staff of “DESTINAZIONE TURISTICA ROMAGNA”, which acts on the basis of specific instructions given regarding the purposes and methods of processing.

PERSONAL DATA PROCESSING

The personal data transmitted and stored for the time necessary for the stated purposes are protected by specific technical and organisational security measures with reference to art. 32 of the Regulation, capable of guaranteeing, on a permanent basis, the confidentiality, integrity and availability, as well as the ability to promptly restore the availability and accessibility of personal data in the event of an incident;access to personal data in the event of a physical or technical incident, including against the risks of destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processed

TRANSFER OF PERSONAL DATA TO NON-EU COUNTRIES

The controller does not transfer personal data to non-EU countries. However, if you consent to the use of analytical and/or profiling cookies, your data may be transferred to the USA, a country that does not currently provide adequate guarantees for the processing of your data, but Google has declared the implementation of additional security measures that the owner has assessed to be sufficient.

RIGTS OF DATA SUBJECTS

The interested parties have the right to obtain from “DESTINAZIONE TURISTICA ROMAGNA”, in the cases provided for, access to their personal data, rectification, cancellation of the same, limitation of the processing that concerns them, portability, or to oppose processing and to revoke consent (where used as a legal basis) with reference to Articles 15 to 22 of the Regulation).

The request è made through the contact details of “DESTINAZIONE TURISTICA ROMAGNA”, with registered office and operational headquarters in Piazzale Federico Fellini, 3 – 47921 Rimini (RN), or by contacting the Data Protection Manager: Studio Paci & C. Srl (Contact person: Dr. Gloriamaria Paci) who can be contacted at the following address: dpo@studiopaciecsrl.it and telephone number: 0541 1795431.

In order to exercise your rights, you can also use the form available on the website of the Italian Data Protection Authority at this link: https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/9038275

RIGHT TO COMPLAIN

Any data subject who considers that the processing of personal data relating to him/her carried out through this website is in breach of the provisions of the Regulation has the right to lodge a complaint with the Garante, as provided for in Article 77 of the Regulation, or to take legal action (Article 79 of the Regulation). The model for lodging a complaint is available on the website of the Data Protection Authority at this link: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/4535524

.