INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to article 13 of Regulation (EU) 2016/679
Pursuant to Regulation (EU) 2016/679, this page describes the personal data processing method of users who consult the website https://www.sanmartino.com.This information does not cover other websites, pages or on-line services that can be reached by hyperlinks that may be published on the website.
DATA CONTROLLER:
After consulting the website, data relating to identified or unidentified natural persons may be processed.
The data controller is AZIENDA PER IL TURISMO SAN MARTINO DI CASTROZZA, PASSO ROLLE, PRIMIERO E VANOI, Via Passo Rolle 165, San Martino di Castrozza, 38054 (TN), Italy, tel. +39 0439.62407 , email address aptsmart@pec.it.
TYPE OF DATA PROCESSED, PURPOSE OF THE PROCESSING AND RELEVANT LEGAL BASIS:
| TYPE OF DATA PROCESSED | PURPOSE OF THE PROCESSING | LEGAL BASIS FOR THE PROCESSING |
| Browsing data (language settings, IP address, device settings, mobile operating system, login information, usage time, URL request, status information, user agent (browser version information), operating system, ID of the user booking and types of data displayed. The website may also collect data automatically via cookies, see the relevant information). | To manage browsing on the website and technical management of the services provided as well as to allow analysis, verify the number of visitors and ensure security and optimal functionality of the website browsing/services for users. | The legal basis for the processing is the legitimate interest of the data controller to ensure the security and optimal functionality of the website as well as to protect their rights. |
| Identification and contact data provided voluntarily by the data subject when using the services offered by the website, third-party data provided by the data subject under his/her own responsibility dependent on the booking, data relating to any payment methods provided by the data subject for booking services. | To respond to any requests for information from data subjects and/or provide the services requested by the latter, in particular the management of the travel package/tourist service, booking of services, etc. | The legal basis for the processing is the implementation of the measures adopted on request of the data subject, the execution of a contract of which the data subject is a part or the pre-contractual measures adopted by request of the latter. |
| Identification and contact data provided voluntarily by the data subject when using the services offered by the website. | To send communications on initiatives and services to the data subject, offered by the Data Controller through the contact details provided on the website, as well as to send newsletters via email following the registration for the service by the data subject and only after providing specific consent, which will be requested when registering for the service; | The legal basis for the processing is the consent of the data subject, in addition to the legitimate interest of the data controller (in this regard see Recital 47 of Reg. EU 679/2016) to publicise and develop its business, provided that the interests or fundamental rights and freedoms of the data subject do not prevail, taking into account the reasonable expectations of the data subject based on his/her relationship with the data controller. |
| Identification and contact data provided voluntarily by the data subject in the use of the services offered by the website, third-party data provided by the data subject under hi/her own responsibility dependent on the booking, data relating to any payment methods provided by the data subject for booking services. | Fulfilment of obligations deriving from laws, regulations, community legislation. | The legal basis for the processing is the fulfilment of a legal obligation to which the data controller is subject; |
DATA RECIPIENTS:
Only subjects authorised by the data controller will be able to access and, therefore, become aware of your data, which is limited to the data necessary to carry out their task.Without prejudice to notifications made in fulfilling any legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to:
- Subjects authorised by the data controller (collaborators, trainees and employees);
- Data processors and/or external collaborators of the controller (e.g. legal, accounting, IT consultants, service providers linked to the website activities, etc.);
- Public and private subjects to whom the communication is due by law or regulation;
- Subjects who carry out tasks which depend on the execution of contracts or services requested by the data subject (e.g. accommodation facilities that can be booked through the website) who will process the data as independent data controllers.Your data will not be disseminated.
DATA TRANSFER:
The data may be transferred abroad only if the controller decides to make use of IT services (website, email, cloud computing, email direct marketing) managed by suppliers residing in countries outside the European Community or that use servers located in foreign countries.The data controller will only transfer personal data to recipients who offer an adequate level of data protection. In such cases, it will take place on the basis of contractual clauses or contractual agreements that ensure protection in line with European standards.
OPTIONAL NATURE OF DATA PROVISION:
Apart from the data specified for browsing data, the data subject may provide the personal data entered in the request forms of the website, e.g. to request the sending of information material, newsletters, or communications and/or responses to requests sent via the website. Failure to provide these data will make it impossible to offer the service requested. Providing data is optional for the sending of communications and commercial offers. Eventual refusal will not compromise the provision of the other services. You can object to this processing at any time, even after having given your consent for commercial purposes, by sending a written request to the controller at the address aptsmart@pec.it.
DATA STORAGE:
Personal data will be stored for the period of time necessary for the use and provision of the services, in accordance with the laws in force, as well as for the purpose of managing any disputes with any third party and, in any case, for the time required to carry out the activities, including the detection and prevention of fraud or other illegal activities.
RIGHTS OF THE DATA SUBJECTS:
Where foreseen, data subjects have the right to obtain from the data controller, access to personal data and the rectification or erasure of said data or restriction of processing or the right to object to processing (articles 15 and subsequent amendments of the Regulation). The relevant request can be submitted by contacting the controller and by sending a request to the addresses on this website. Data subjects, who believe that the processing of personal data referring to them carried out through this website infringes the provisions of the Regulation, have the right to lodge a complaint with the supervisory authority, as indicated in art. 77 of the Regulation in question, or take action before the courts (art. 79 of the Regulation).
COOKIES AND OTHER TRACKING SYSTEMS:
| Necessary (3) |
|
|
|
| NAME | SUPPLIER | PURPOSE | EXPIRY DATE |
| ASPSESSIONID | technical | session | |
| Lang | technical | 1 year | |
| okPrivacy | technical | 1 day | |
|
|
|
|
|
|
|
|
|
|
| Statistical (9) |
|
|
|
| NAME | SUPPLIER | PURPOSE | EXPIRY DATE |
| _hjid | www.hotjar.com | statistical | 1 year |
| _hjIncludedInPageviewSample | www.hotjar.com | statistical | 30 min |
| _hjFirstSeen | www.hotjar.com | statistical | session |
| _hjAbsoluteSessionInProgress | www.hotjar.com | statistical | 30 min |
| _hjTLDTest | www.hotjar.com | statistical | session |
| _ga | statistical | 2 years | |
| _gat | statistical | 1 day | |
| _gid | statistical | 1 day | |
| _gat_ | statistical | session | |
| _ga_ | statistical | 2 years | |
| _gac_ | statistical | 90 days | |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| Marketing (1) |
|
|
|
| NAME | SUPPLIER | PURPOSE | EXPIRY DATE |
| outbrain_cid_fetch | Outbrain.com | Marketing | 1 day |
