Information pursuant to D.Lgs. 196/03 and EU Regulation 2016/679 GDPR (General Data Protection Regulation)
Data controller
Con Spoleto – Consorzio Operatori turistici di Spoleto
con sede legale in Spoleto, via nuova, 3 – CAP 06049 Spoleto
Cod. Fisc. e P.I. 02037980543
Indirizzo email: info@conspoleto.com
Types of data collected
This site collects, independently or through third parties, some personal data of its Users, including: Name, Surname, Email, Telephone, Cookies and Usage Data (IP address, web browser details, date/time and time zone).
Other personal data collected may be indicated in other sections of this privacy policy or through informative texts displayed at the same time as the data collection itself.
Personal data may be entered voluntarily by the User, or collected automatically during the use of this site.
The possible use of Cookies – or other tracking tools – by this site or by the owners of third party services used by this site, unless otherwise specified, has the purpose of identifying the User and recording the relative preferences for purposes strictly related to the provision of the service requested by the User.
Failure by the User to provide certain personal data may prevent this site from providing its services.
Purpose of processing
The purposes of the processing of personal data provided by users may be the following:
a) Respond to requests for information and assistance from users relating to products/services;
b) Management of orders for the purchase and supply of products/services;
c) Provide and improve the products/services provided and resolve any related issues.
d) Comply with legal obligations.
e) Sending offers and promotional material related to products/services.
Method of treatment
The Data Controller shall take appropriate security measures to ensure the confidentiality and security of personal data and to prevent unauthorized access, disclosure, modification or destruction.
Personal data are collected and processed with the support of computer and/ or paper, with organizational methods and logic strictly related to the purposes indicated.
In addition to the Data Controller, in some cases, other parties involved in the organization of this site (administrative, commercial, marketing, system administrators, collaborators or employees) or external subjects may have access to data (as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies, legal, administrative and tax consultants) also appointed, if necessary, Data Processors by the Data Controller. The updated list of these subjects may always be requested from the Data Controller.
The Data Controller uses Mailerlite as a marketing platform. By subscribing to the “Amici della Cantina group”, the user acknowledges that his information will be transferred to Mailerlite for processing. Read more about Mailerlite’s privacy here.
Place of processing
The data are processed at the operating offices of the Data Controller and at any other place where the parties involved in the processing are located.
Your personal data may be transferred to a country other than the country where you are located. If one of the transfers described above takes place, the User can ask the Data Controller for information by contacting him at the contact details shown at the opening.
Retention period
The data are processed and stored for the time necessary to achieve the purposes for which they were collected and for the performance of administrative-accounting purposes. The Data Controller may be obliged to store personal data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, personal data will be deleted or anonymized, therefore, upon expiry of this period, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
Under the age of 18
The Site is not aimed at individuals under the age of 18, nor does the Owner knowingly collect personal data from individuals under the age of 18.
Rights of data subjects
Users may exercise certain rights with regard to the data processed by the Data Controller:
Right of access
The User has the right to obtain information on the data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the data processed. The User can verify the correctness of his data and request its update or correction.
Right of cancellation (right to be forgotten)
When certain conditions are met, the User may request the cancellation of their personal data by the Data Controller.
Right to restriction of processing
When certain conditions are met, the User may request the restriction of the processing of his data. In this case, the Data Controller will not process the data for any other purpose than their storage.
Right to data portability
The User has the right to receive their data in structured, commonly used and machine-readable format and, where technically feasible, to obtain the transfer to another holder. This provision is applicable when data is processed by automated means and the processing is based on the User’s consent, a contract of which the User is a party or on contractual measures connected to it.
Right of revocation and opposition
The User may request the withdrawal of consent to the processing of their personal data previously expressed at any time and may object to the processing of their data when it takes place on a legal basis other than consent.
How to exercise the rights
To exercise their rights, Users can address a request to the contact details of the Data Controller indicated in this document. Requests are processed by the Data Controller as soon as possible, in any case within one month.
Cookie Policy
This site uses Cookies. To learn more and to read the detailed information, the User can consult the Cookie Policy.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by giving publicity to Users on this page. In the event of non-acceptance of the changes made to this privacy policy, the User is obliged to cease using this site and may request the Data Controller to remove their Personal Data.