privacy-policy

PRIVACY POLICY

This page describes how to manage the site in reference to the processing of personal data of users who consult it.
This information is also provided pursuant to art.13 of the EU 2016/679 European Regulation (GDPR) to those who interact with the web services of the Data Controller, accessible electronically from the address: www.visitlessinia.eu.

Please note that the information is provided only for the above site and not for other websites that may be consulted by the user through links. The information is also inspired by the Recommendation n. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of Directive 95/46/EC, adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data on-line, and in particular, the manner, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the link.

2. Purpose of data processing

1. The data provided by the User will be processed, without the prior consent of the User pursuant to art.6 lett. b) GDPR, for the following Service purposes:

a. for the management and development of statistical surveys on the use of the Site;

b. for the maintenance and technical assistance necessary to ensure the proper functioning of the Site and related services;

c. to improve the quality and structure of the Site, as well as to create new services, features and/ or features of the same;

d. to process any request for contact forwarded by the User through the compilation of appropriate forms or by email;

e. to allow the Company to exercise its rights in court and to repress unlawful conduct;

f. to fulfil legal or regulatory obligations.

2. The data provided by the User will be processed, without the prior consent of the User pursuant to art.6 lett. a) GDPR, for the following purposes:

g. for the correct management of the request for information sent through the Tourist Portal Visit Lessinia for the fulfillment of the request;

h. for sending concerning for example newsletters, for example, events, promotional initiatives and in general for the tourist promotion of the territory of Lessinia and for sending the best holiday proposals.

OPTIONAL NATURE OF THE PROVISION OF DATA

The provision of data for the purposes set out in point 1) is mandatory. The lack of data and/or the express refusal to the treatment the possible violation of requests of the competent Authorities.
The provision of data for the purposes referred to in point 2) is optional, with the consequence that you may decide not to provide your consent, or to revoke it at any time, unless it is impossible for the Owner to perform the service you requested.

CATEGORIES OF DATA PROCESSED

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment. These data are used for the only purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes to the detriment of the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mail to the addresses indicated on this site or the compilation of specific data entry forms to receive services/ information or make requests, involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information and any requests for consent, if necessary, will be progressively reported or displayed on the pages of the site prepared for particular services on request. As part of the purposes of the processing outlined in paragraph 2, only personal data will be processed.

MODALITIES OF THE PROCESSING

The processing of Users' data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and in particular: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, access, use, interconnection, blocking, communication, cancellation and destruction of data.
The data of the Users are processed with automated tools and not and, in any case, in order to ensure the security and confidentiality of the data, only for the time strictly necessary to achieve the purposes for which they were collected and, in any case, no later than 10 years from their collection for the purposes of the Service referred to in point 1 and no later than 2 years from their collection for the commercial purposes referred to in point 2.

SCOPE OF COMMUNICATION

Without the express consent of the User art. 6 lett. b) and c) GDPR), Consorzio Proloco della Lessinia may communicate the data of the User for the purposes of Service to supervisory bodies, Judicial authorities as well as all other subjects to whom communication is mandatory by law for the accomplishment of the aforementioned purposes, as autonomous data controllers. User data will not be disseminated.
Personal data may become aware of the persons in charge of the processing.
The personal data will not be communicated to other subjects, nor will they be disseminated except for the support structures related to the Company, as well as to professional firms or companies as it is necessary to participate in the completion of our. activities, as well as the fulfilment of regulatory and tax obligations related to it.

STORAGE AND TRANSFER OF PERSONAL DATA ABROAD torage and transfer of personal data abroad

The management and storage of personal data takes place in the cloud and on servers located within the European Union owned by and/or in the availability to the Data Controller and/or entrusted third-party companies, duly appointed as data processors.

RETENTION PERIOD OF PERSONAL DATA

The personal data collected for the purposes indicated in paragraph 1. above will be processed and stored for the entire duration of any relationship established.

From the date of termination of this relationship, for any reason or cause, the data will be kept for the duration of the applicable statutory limitation periods.

The personal data collected for the purposes indicated in the previous paragraph 2. will be processed and stored for the time necessary to fulfil these purposes and in any case until actual cancellation by the user.

7. Exercisable rights

In accordance with the provisions of articles 15 to 22 of the GDPR, you can exercise the rights indicated therein and in particular:

• Right of access - To obtain confirmation as to whether or not your personal data are being processed and, if so, to receive information relating, in particular, to: purposes of processing, categories of personal data processed and storage period, recipients to whom these may be disclosed (Article 15, GDPR),

• Right to rectification - Obtain, without undue delay, the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16, GDPR),

• Right to erasure - Obtain, without undue delay, the erasure of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR),

• Right of limitation - Obtain from the Co-data Controllers the limitation of processing, in the cases provided for by the GDPR (Article 18, GDPR)

• Right to portability - To receive in a structured, commonly used and readable format from an automatic device, the personal data concerning you provided to the Joint Data Controllers, as well as to ensure that they are transmitted to another holder without hindrance, in the cases provided for by the GDPR (Article 20, GDPR)

• Right to object - Object to the processing of personal data concerning you, unless there are legitimate reasons for the Joint Data Controllers to continue processing (Article 21, GDPR)

• Right to lodge a complaint with the supervisory authority - Lodge a complaint with the Guarantor Authority for the protection of personal data.

You may exercise these rights by simply sending a request to the Data Controller, using the references below.

IDENTIFICATION DETAILS OF THE HOLDER, THE PROCESSOR AND THE HOLDER’S REPRESENTATIVE IN THE TERRITORY OF THE STATE

The Data Controller is Consorzio Proloco Lessinia in the person of the Legal Representative, with headquarters Roverè Veronese (VR) in Piazza San Rocco 16, mail: consorzio.proloco.lessinia@gmail.com, to which the communications referred to in Articles 15 and following of the GDPR must be forwarded.
The complete list of Managers and Persons in Charge is available at the registered office.

COMPETENT COURT

For any dispute that may arise between the user and the data controller or other parties who have cooperated, cooperate or will cooperate with Consorzio Proloco Lessinia, the user accepts the jurisdiction of the Italian State and, in any event, the application of Italian law irrespective of one’s domicile or place of business. The place of jurisdiction is VERONA.