INFORMATION ON THE PROCESSING OF PERSONAL DATA
NOTICE PURSUANT TO REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GDPR)
Last update: October 2021
Pursuant to and for the purposes of Article 13 of EU Regulation No 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter, also "GDPR") and subsequent amendments, Omega Travel di Passarelli Carmen - Via Scalo Ferroviario, 50 - 86030 Matrice (CB) - C. F. PSSCMN92P51B519D - P.IVA 01749110704 (hereinafter "Omega Travel") provides the necessary information regarding the processing of personal data provided.
The Data Controller is Omega Travel, hereinafter also referred to as the 'Data Controller' or 'Controller'.
The Data Controller does not fall within the cases provided for in Art. 37 c. 1, which is why no Data Protection Officer (DPO) has been designated.
CATEGORIES OF PERSONAL DATA PROCESSED
Omega Travel may process the following categories of users' personal data
Personal data: Personal data: any information identified or identifiable, even indirectly, about an individual, including a personal identification number, general identification data or personal data allowing direct identification (e.g. name, VAT number, address, e-mail address, telephone number, IBAN, etc.) - see Article 4(1)(1) GDPR.
Surfing data:the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified persons, but by its nature - through processing and association with data held by third parties - to identify users.
This category of data includes IP addresses or domain names of the computers used by users who connect to the site, URI (Uniform Resource Identifier) of the resources requested, time of the request, method used to send the request to the server, size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters regarding the operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check that it is functioning correctly, and are deleted immediately after processing.
System logs:for operation and maintenance purposes, this platform and any third-party services it uses may collect system logs, which are files that record interaction and may also contain personal data, such as your IP address.
Navigation data for profiling purposes: provided indirectly by the user through the use of services or obtained and analysed by the user's consent provided during the use of the website or services.
Per "Trattamento" s'intende qualsiasi operazione o insieme di operazioni eseguite su dati personali o su set di dati personali, anche con mezzi automatizzati, quali raccolta, registrazione, organizzazione, strutturazione, conservazione, adattamento o alterazione, recupero, consultazione, utilizzo, divulgazione mediante trasmissione, diffusione o messa a disposizione in altro modo, allineamento o combinazione, limitazione, cancellazione o distruzione;
Per "Interessato" s’intende una persona fisica identificata o identificabile.
PURPOSE OF DATA PROCESSING
For automatically collected data and cookies, the legal basis is the legitimate interest of the holder and the purpose is to ensure and improve the web browsing experience. (Legitimate interest). For data provided voluntarily by the user and for other purposes, the legal basis is consent. In particular, your data will be used by Omega Travel to allow your registration on the site and send you via e-mail, sms, chat newsletters, communications and / or non-personalized advertising material on products or services offered by us and the detection of the degree of satisfaction on the quality of services. (Newsletter). As of the date you read this information, Omega Travel uses profiling data to aggregate marketing profiles, manage relationships with advertisers and improve their campaigns, infer usage patterns of our services, and help sales representatives develop digital strategies (profiling purposes). On our website there is a "Blog" section for cultural and non-commercial purposes where articles and comments are collected based on the consent of the authors and users. More information can be found on the "Disclaimer" page (blog).
Consent to the processing of this data is optional and any refusal to do so will not result in the impossibility of using the services offered by Omega Travel.
We would like to inform you that some activities may be carried out through suppliers, specifically appointed data processors, also residing outside the European Union.
The processing of personal data is carried out by means of the operations indicated in Article 4, no. 2 GDPR 2016/679 such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
LEGAL BASIS OF PROCESSING
Your personal data are processed, without your explicit consent pursuant to Article 6 letters a) c) d) e), f) GDPR 2016/679, for the following purposes:
- the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
- in order to fulfil the obligations provided for by law, Community legislation, a regulation or an order of the Authority; .
- the processing is necessary for compliance with a legal obligation to which the controller is subject; .
- The processing is necessary in order to protect the vital interests of the data subject or of another natural person .
- the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.
Your personal data will not be disclosed, but may be communicated where necessary for the provision of the service to third parties appointed, if necessary, as Data Processors by Omega Travel for technical or organisational tasks instrumental to the provision of services.
In relation to and exclusively for the purposes described above, personal data (images, photos and audio recordings) will be used for the following purposes-
The updated list of data processors and persons in charge of processing can always be requested from the data controller..
The right to communicate to third parties remains reserved if you have given specific and optional consent.
The personal data provided may be disclosed to recipients, appointed pursuant to Article 28 of EU Reg. 2016/679, who will process the data as data controllers and/or natural persons acting under the authority of the owner and operator, in order to comply with contracts or related purposes. More precisely, the data may be communicated to recipients belonging to the following categories:
- employees and collaborators of the Data Controller, in their capacity as persons in charge and/or internal data processors and/or system administrators, in Italy and abroad, without involving the transfer of data
- third-party companies or other entities that perform outsourcing activities on behalf of the Controller, in their capacity as external data processors.
PERIOD OF DATA STORAGE
(name of the company) in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, retains your data for a period of time not exceeding the achievement of the purposes for which they are processed and/or for the time necessary to comply with legal obligations. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.
PROVISION OF PERSONAL DATA
With respect to navigation data, the user is free to provide personal data. The fields marked with * are obligatory for registration. Their absence makes registration impossible.
Personal data will be processed by Omega Travel within the territory of the European Union.
Pursuant to the GDPR, you can exercise certain rights vis-à-vis the Data Controller, such as to obtain from the Data Controller the erasure of your data (right to be forgotten), restriction, updating, rectification, portability, to object to the Processing of your personal data. More in detail, you can exercise the following rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR:
- request, from the data controller, access to personal data (Article 15), i.e. confirmation as to whether or not personal data are being processed and, if so, access to the data; .
- request, from the controller, a correction (Article 16), i.e. to obtain the correction and/or the integration of incorrect personal data concerning him/her;
- request the controller to erase (Article 17) or obtain the erasure of data concerning them without undue delay;
- to ask the data controller to restrict processing concerning him or her (Article 18), i.e. to obtain confirmation that the processing of personal data is limited to what is necessary for storage purposes;
- have data portability (Article 20) which is to obtain, in a structured and readable format, your personal data;
- oppose the processing of your data (Article 21) or, at any time, object, on any ground relating to your particular situation, to the processing of your data;
- rights in relation to automated decision-making (Article 22), i.e. the right not to be subject to a decision based solely on automated processing of data without your explicit consent
- cancel (Article 17), i.e. the right to obtain, in the cases provided for in the Regulation, the deletion of your personal data. In addition, you may at any time withdraw the consent on which the processing is based.
The data subject has the right to lodge a complaint with the Supervisory Authority (Article 77) for the protection of personal data (www.garanteprivacy.it).
DATA BREACH E COMUNICAZIONE ALL'AUTORITÀ DI VIGILANZA
Pursuant to Article 33 of the GDPR in the event of a data breach, the controller shall without undue delay and, where feasible, no later than 72 hours after having become aware of it, notify the personal data breach to the competent supervisory authority pursuant to Article 55, unless the personal data breach is unlikely to result in a risk to the rights and freedoms of natural persons. The controller shall provide a description of the nature of the data breach, including the number of data subjects and the categories of data concerned. The name and address of the data protection officer shall also be provided. If the notification to the supervisory authority is not made within 72 hours, it shall be accompanied by reasons for the delay.
MORE INFORMATION ON EXERCISING YOUR RIGHTS
Any request for information or clarification or exercise of rights may be addressed to the Data Processor by sending:
registered mail to: Omega Travel di Passarelli Carmen - Via Scalo Ferroviario, 50 - 86030 Matrice (CB)
In addition, you always have the right to lodge a complaint with the Data Protection Supervisory Authority, which can be contacted at email@example.com or via the website http://www.gpdp.it
PRIVACY E NEWSLETTER
If you have given your consent to receive commercial communications, your data may be processed in order to send you promotional communications or newsletters by e-mail or other informative content relating to the website.
The consent of the data subject, expressed in accordance with this information, constitutes a legal basis. The data subject has the right to provide personal data; however, if this data is not provided, no marketing activities can be carried out. The personal data processed in this way are stored until the data subject withdraws his or her consent or for the maximum time permitted by law.
NON-AUTOMATED DECISION-MAKING AND PROFILING
If you consent to the processing of your personal data for the purpose of receiving personalised services by means of profiling, your personal data may be subject to a manual decision-making process that will decide which communications are best suited to your profile or which may be of most interest to you. The consequences of processing carried out in this way include, by way of example, the sending of highly profiled commercial communications, the sending of invitations to events considered to be of interest, etc.
The person concerned has, in any event, the right to obtain an explanation of the decision reached and to contest it.
CONSENT TO THE PROCESSING OF PERSONAL DATA
By signing this form, you accept and give your consent to the processing of your personal data for the purposes indicated in this information notice. Withdrawal of consent does not affect the lawfulness of the processing that took place on the basis of the consent given before the withdrawal.
In compliance with the provisions of the GDPR, I, the undersigned, give my consent pursuant to Article 7 of the GDPR to the processing of my personal data in the manner and for the purposes indicated above.
This consent is exercised by me after reading the content of this information in its entirety.
All authorisations issued by us may be revoked at any time by e-mail, at the address firstname.lastname@example.org or by registered mail, to: Omega Travel di Passarelli Carmen - Via Scalo Ferroviario, 50 - 86030 Matrice (CB).
CHANGES TO THE POLICY