Privacy Policy - Escursioni in Natura

INFORMATION pursuant to articles 13 of Regulation (EU) 2016/679

With this document (the “Information”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing the personal data you provide through the site http://www.egmontviaggi.it/ and on the rights that the Regulation (EU) 2016/679, concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (the “GDPR”), recognizes you.

Who are the Data Controller and the Data Protection Officer (DPO)
The Data Controller is EGMONT VIAGGI SRL, “EGMONT VIAGGI SRL” operational headquarters VIA FRANCAVILLA, 387 Trappitello hamlet -98039 -TAORMINA (ME), and headquarters in Riva del Garda (Tn) in Via Ballino, 37, mail: info @ egmontviaggi .it VAT number 01680800834.

The Data Controller has not appointed a Data Protection Officer (“Data Protection Officer” or “DPO”), but you can contact them to exercise your rights, as well as to receive any information relating to them and / or this Notice, by writing to: info@egmontviaggi.it

What personal data we process

2.1. Common personal data

For the purposes indicated in this Notice, the Data Controller processes common personal data such as personal data (name, surname, tax code, address, telephone number, e-mail and other contact details).

2.2. Personal data of family members or third parties

Finally, to follow up on the requests you make from time to time through the Site, the Data Controller may need to also acquire personal data of his family and / or third parties, including minors.

In this sense, you undertake to inform your family members of such treatments, also by providing them with this information.

2.3. Source of personal data.

Your personal data processed by the Data Controller are those provided by you directly by filling in the various forms on the Site.

Purpose and legal basis of the processing, nature of the provision and consequences of a refusal to provide personal data.

3.1 Request for a quote and fulfillment of legal obligations

Your personal data will be processed by EGMONT VIAGGI S.R.L. for activities strictly connected and instrumental to the generation of the quote requested for the trip selected by you and the possible booking and purchase of the same, as well as for the fulfillment of obligations established by laws, regulations and / or community regulations, or by supervisory bodies and control or by other authorities entitled to do so.

The provision of your personal data is mandatory for this purpose. Your refusal will, in fact, make it impossible for the Owner to follow up on the request you made.

For the processing necessary for the pursuit of these purposes, it will not be necessary to obtain your consent because the legal basis of the processing consists, in accordance with current legislation, in the satisfaction of a request made by you and in the fulfillment of a legal obligation.

In any case, your personal data will be processed until the end of the trip and, beyond that date, will be kept exclusively for the period of time necessary to comply with current legislation (including the provisions for the prescription of rights).

3.2. Registration on the site

Your personal data may also be processed by EGMONT VIAGGI S.R.L. to satisfy your registration request on the Site and to be able to provide you with related services.

Also in this case, the processing does not require your prior consent as the legal basis of the processing consists, in accordance with current legislation, in satisfying the request you made. The provision of your personal data for the purposes referred to in this Chapter is mandatory and your refusal will make it impossible for EGMONT VIAGGI S.R.L. to follow up on your request to register on the Site and to use the related services.

The data collected for this purpose by the Data Controller will be kept for the period in which you decide to remain registered on the Site.
3.3. Request for services through the Site

Furthermore, your personal data may be processed by EGMONT VIAGGI S.R.L. to satisfy further requests made by you from time to time by filling in the appropriate forms available on the Site (for example, requests for information).

The provision of data is mandatory and your refusal will make it impossible for the Data Controller to follow up on the requests you make from time to time.

The processing does not require your consent as the legal basis consists in the satisfaction by the Owner of a request you made.

The data collected for this purpose by the Data Controller may be processed for the time strictly necessary to satisfy the request made by you and, in any case, will be deleted 6 months after the request has been processed.

3.4. Marketing activities

EGMONT VIAGGI S.R.L. may use your e-mail address to send you communications of a commercial nature, including the newsletter.

The legal basis of the processing is your express consent. For the pursuit of the purposes referred to in this Chapter, the provision of your data is optional, therefore your refusal will not affect the ability of the Data Controller to satisfy the requests made by you from time to time through the Site, but will make it impossible to keep you updated on your offers and initiatives.

The data collected will be processed by the Data Controller until your decision to revoke the consent and / or to obtain the termination of the processing.

When sending any communication by e-mail, you will be easily allowed to stop processing your personal data.

Right to withdraw consent and oppose direct marketing activities We inform you that, at any time, you have the right to withdraw consent and / or oppose direct marketing activities by contacting the Data Controller at one of the references indicated in point 1 of this Notice.

How your personal data will be processed
The processing of your personal data will take place, in compliance with the provisions of the GDPR, by means of paper, IT and telematic tools, with logic strictly related to the purposes indicated and, in any case, with methods suitable for guaranteeing their security and confidentiality in accordance with the provisions laid down. from article 32 GDPR.
To which subjects your personal data may be disclosed and who can learn about them
For the pursuit of the purposes described in point 3 above, your personal data will be known by the employees and collaborators of EGMONT VIAGGI S.R.L. who will operate as subjects authorized to process and / or data processors.

Furthermore, the Data Controller may need to communicate your personal data to third parties and, in particular, by way of example, to the following categories:

subjects that provide services for the management of the Data Controller’s IT system;
subjects that provide professional tax, legal and judicial consultancy and assistance services;
supervisory and control authorities and bodies and in general subjects, public or private, with publicistic functions (for example, police forces, consulates, etc.).
The subjects belonging to the above categories operate, in some cases, in total autonomy as separate Data Controllers, in other cases, as Data Processors specifically appointed by EGMONT VIAGGI S.R.L. in compliance with Article 28 of the GDPR.

The complete and updated list of companies and / or third parties to whom your personal data may be disclosed is available at the company’s registered office.

Your personal data may be transferred outside the European Union, only to the subjects indicated in this point 6) and in the presence of an adequacy decision by the European Commission or other adequate guarantees of a contractual or covenant nature that must be provided by the involved owners (including Binding Corporate Rules – BCR, and model contractual clauses).

Personal data processed by EGMONT VIAGGI S.R.L. they are not disseminated.

What rights do you have as an interested party
In relation to the treatments described in this Notice, as an interested party you may, under the conditions provided for by the GDPR, exercise the rights enshrined in articles 15 to 21 of the GDPR and, in particular, the following rights:
right of access: right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access to your personal data – including a copy of the same – and communication, among others , of the following information:
purpose of the treatment;
categories of personal data processed;
recipients to whom these have been or will be communicated;
data retention period or the criteria used;
rights of the interested party (rectification, cancellation of personal data, limitation of processing and right to object to processing;
right to lodge a complaint;
the right to receive information on the origin of my personal data if they have not been collected from the interested party;
the existence of an automated decision-making process, including profiling;
right of rectification: right to obtain the correction of inaccurate personal data concerning you and / or the integration of incomplete personal data;
right to cancellation (right to be forgotten): the right to obtain the cancellation of personal data concerning you, when:
the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
You have withdrawn your consent and there is no other legal basis for the processing;
You have successfully opposed the processing of your personal data;
the data has been unlawfully processed,
the data must be deleted to fulfill a legal obligation;
the personal data were collected in relation to the information society service offer referred to in Article 8, paragraph 1, GDPR.
The right to erasure does not apply to the extent that the processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the ascertainment, exercise or defense of a right. in court;

right to limitation of treatment: right to obtain limitation of treatment, when:
the interested party disputes the accuracy of the personal data;
the processing is unlawful and the interested party opposes the deletion of personal data and instead requests that its use be limited;
personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
right to object: right to object to the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing;
right to data portability: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another Data Controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly by EGMONT VIAGGI S.R.L. to another owner if this is technically feasible;
lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM).
The above rights may be exercised against the Data Controller by contacting the references indicated in point 1 above.

The exercise of your rights as an interested party is free of charge pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.

INFORMATION pursuant to articles 13 and 14 of Regulation (EU) 2016/679

With this document (the “Information”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and the rights that the Regulation (EU) 2016/679, relating to the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data (the “GDPR”), recognizes them.

Who are the Data Controller and the Data Protection Officer (DPO) The Data Controller is EGMONT VIAGGI SRL, operational headquarters VIA FRANCAVILLA, 387 Trappitello -98039 -TAORMINA (ME), and headquarters in Riva del Garda (Tn) in Via Ballino, 37, mail: info@egmontviaggi.it VAT number 01680800834.

The Data Controller has NOT appointed a Data Protection Officer (“Data Protection Officer” or “DPO”) as an activity not subject to mandatory appointment, for the exercise of your rights, as well as to receive any information relating to your data and / or to this Notice, you can write to: info@egmontviaggi.it
What personal data we process

2.1. Common personal data

For the purposes indicated in this Notice, the Data Controller processes common personal data such as personal data (name, surname, date and place of birth, tax code, address, telephone number, e-mail and other contact details), as well as data relating to the payment method.

2.2. Personal data of family members

Finally, again for the execution of the contract, the Data Controller may need to acquire personal data of his family members, including minors. In this sense, you undertake to inform your family members of such treatments, also by providing them with this information.

2.3. Source of personal data.

Your personal data processed by the Data Controller are those provided directly by you to the Data Controller or collected from third parties (for example, through agencies). This information also covers the processing of your personal data acquired through third parties.

Purpose and legal basis of the processing
3.1 Execution of the contract and fulfillment of legal obligations

Your personal data will be processed within the normal activity of the Data Controller and in particular for purposes strictly connected and instrumental to the execution of the contract you have entered into with EGMONT VIAGGI S.R.L., and, in particular, for the realization of:

(i) CREATIVITY AND STRATEGY (Advertising, Marketing consultancy, Corporate identity (logos, corporate identity, brochures, etc.), Technical and product catalogs, Advertising graphics, Packaging and display design, Set design, Rendering service, Photo / video service, Gadget Customization).
(ii) EVENTS AND EQUIPMENT (Fairs and exhibition stands, Meetings and conventions, Workshops, Road shows, Team building activities, Press conferences, Launch of new products, Promotion in store, Special events, Photographic exhibitions, Fashion shows, Customization and outfitting of sales points.
(iii) UNCONVENTIONAL MARKETING (Guerrilla marketing, Ambient marketing, Street marketing, Viral marketing, Unconventional set-ups, Product placement, 3D installations, Special vehicles, Mock-up on vehicles, Augmented reality)
(iv) ONLINE MARKETING (Website creation, E-commerce, SEO and positioning, PPC and Adwords campaigns, Landing pages, Social networks, Online catalogs, Banners and animations, Web applications, Newsletters, blogs, emailing)
Furthermore, your personal data will be processed for the fulfillment of obligations provided for by laws, regulations and / or community regulations, or by supervisory and control bodies or other authorities entitled to do so. For the treatments aimed at pursuing these purposes, it will not be necessary to obtain your consent because the legal basis of the treatment consists, in accordance with current legislation, in the execution of a contract and the fulfillment of a legal obligation.

However, if the Data Controller has to process particular categories of your personal data, it will be necessary to obtain your explicit consent.

3.2. Marketing

Your personal data will also be processed by EGMONT VIAGGI SRL, to send them, through traditional methods (such as paper mail) and / or automated contact methods (such as, for example, e-mail, fax, SMS, MMS, instant messaging, social networks, etc.), communications of a commercial nature relating to updates on their offers. For the pursuit of the purpose referred to in this Chapter, your express consent is required, which constitutes the legal basis of the processing.

When sending any communication by e-mail, you will be easily allowed to stop processing your personal data.

Right to object to direct marketing activities

We inform you that, at any time, you have the right to revoke the consent given and / or to oppose direct marketing activities by contacting the Data Controller at one of the references indicated in point 1 of this Notice.

Nature of the provision and consequences of a refusal to provide personal data
The following table contains a summary of: (i) purposes of the processing; (ii) mandatory or optional nature of providing data; (iii) consequences of a refusal to provide data; (iv) legal basis of the processing, with particular indication of the cases in which your consent is necessary in order to proceed with the processing; (v) retention period of your personal data.

Purpose of the processing Nature of the provision of data Consequences of a refusal to provide data Legal basis of the processing Retention period of your personal data
3.1. Execution of the contract and fulfillment of legal obligations
a) CREATIVITY AND STRATEGY;

b) EVENTS AND EQUIPMENT;

c) UNCONVENTIONAL MARKETING;

d) ONLINE MARKETING

Mandatory Failure to provide the data will make it impossible for EGMONT VIAGGI S.R.L. to fulfill the contract you have signed. Execution of the contract. If it is necessary to process particular categories of your personal data, it will be necessary to obtain your explicit consent. Your personal data, including – if you have given your explicit consent – the particular categories of your personal data, will be processed for the time necessary to pursue the purposes referred to in points a) – d) – c) and d) and , subsequently, kept exclusively for the period of time necessary to comply with the provisions of the law.
3.2. optional marketing Failure to provide personal data will not affect the ability of the owner to execute the contract signed by you, but will make it impossible for the owner to send communications of a commercial nature. Your express consent. Your personal data will be processed until your decision to withdraw consent and / or to obtain the cessation of processing.

To which subjects your personal data may be disclosed and who can learn about them
For the pursuit of the purposes described in point 3 above, your personal data will be known by the employees and collaborators of EGMONT VIAGGI S.R.L., who will operate as authorized subjects and / or data processors.

Furthermore, the Data Controller may need to communicate your personal data to third parties, whether or not they belong to EGMONT VIAGGI S.R.L., and, in particular, by way of example, to the following categories:

a) subjects who provide services for the management of the Data Controller’s IT system;
b) subjects who provide professional tax, legal and judicial consultancy and assistance services;
c) persons who carry out the auditing and certification of the financial statements;
d) any other person to whom the data must be disclosed on the basis of an express provision of the law.

The subjects belonging to the categories listed above operate, in some cases, in total autonomy as separate Data Controllers, in other cases, as Data Processors specifically appointed by EGMONT VIAGGI S.R.L., in compliance with Article 28 of the GDPR. The complete and updated list of companies and / or third parties to whom your personal data may be disclosed is available at the company’s registered office.

The personal data processed by EGMONT VIAGGI S.R.L., are not subject to disclosure.

• right of access: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, to obtain access to your personal data – including a copy of the same – and the communication, between others, of the following information:

a) purpose of the processing;
b) categories of personal data processed;
c) recipients to whom these have been or will be communicated;
d) data retention period or the criteria used;
e) rights of the interested party (rectification, cancellation of personal data, limitation of processing and right to object to processing;
f) right to lodge a complaint;
g) the right to receive information on the origin of my personal data if they have not been collected
at the interested party;

h) the existence of an automated decision-making process, including profiling;

• right of rectification: the right to obtain the rectification of inaccurate personal data concerning you and / or the integration of incomplete personal data;

• right to cancellation (right to be forgotten): the right to obtain the cancellation of personal data concerning you, when:

a) the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) You have withdrawn your consent and there is no other legal basis for the processing;
c) You have successfully opposed the processing of your personal data;
d) the data have been unlawfully processed,
e) the data must be deleted to fulfill a legal obligation;
f) the personal data have been collected in relation to the information society service offer referred to in Article 8, paragraph 1, GDPR.
The right to erasure does not apply to the extent that the processing is necessary for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or for the ascertainment, exercise or defense of a right. in court;

• right to limitation of treatment: right to obtain limitation of treatment, when:

a) the interested party disputes the accuracy of personal data;
b) the processing is unlawful and the interested party opposes the deletion of personal data and instead requests that its use be limited;
c) personal data are necessary for the interested party to ascertain, exercise or defend a right in court;

• right to object: right to object to the processing of personal data concerning you, unless there are legitimate reasons for the Data Controller to continue processing;

• right to data portability: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly by EGMONT VIAGGI S.R.L., to another owner if this is technically feasible;

• lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM).

The above rights may be exercised against the Data Controller by contacting the references indicated in point 1 above.