1 DATA CONTROLLER Martesana Travel Headquarters: V.le Assunta 3120063 Cernusco S/N -Milan-
in the person of its legal representative, e-mail contact: firstname.lastname@example.org
2.TYPES OF DATA PROCESSED
Personal data, meaning any information relating to an individual; in particular, an identifier such as a name, an identification number, location data, an online identifier or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing of personal data, meaning: “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.
Interested party, meaning: “an identified or identifiable natural person”.
3 PURPOSE AND LEGAL BASIS OF THE PROCESSING
The personal data provided will be processed in compliance with the conditions of lawfulness (legitimate interests) for the following purposes:
-browsing this website;
-optional filling in of the data collection forms for contact request and sending of information;
-optional filling in of the data collection forms in the private registered user/login area;
The data processing is based on Article 6(1)(f), Recital 47 and takes into consideration the data subject’s reasonable expectations at the time and in the context of the collection of the personal data that processing for that purpose may take place.
4 RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
The personal data provided will be communicated to recipients, who will process the data as managers and/or as natural persons acting under the authority of the Data Controller and the Data Processor for the purposes listed above in paragraph 3. Precisely, the data will be communicated to:
– subjects that provide services for the management of the information system and communication networks (including e-mail);
– competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request.
5 DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANISATION AND SAFEGUARDS
The personal data provided will not be transferred outside the EU.
6 DATA RETENTION PERIOD OR CRITERIA TO ESTABLISH THE PERIOD
Processing will be carried out automatically and/or manually, using methods and tools aimed at ensuring maximum security and confidentiality, by individuals specifically appointed to do so.
In compliance with the provisions of Regulation (EU) 2016/679, the personal data collected will be stored in a form that allows identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. Storage of the personal data provided depends on the purposes of the processing; the data subject may obtain information by writing to: email@example.com
7 DATA SUBJECT RIGHTS
You can assert your rights, as expressed in Regulation (EU) 2016/679, by writing to the following address: firstname.lastname@example.org. You have the right, at any time, to access your personal data and to request the rectification or erasure of personal data or restriction of processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, e.g. profiling) and to the portability of your data. Without prejudice to any other administrative and judicial appeal, you have the right to lodge a complaint with the Data Protection Authority and you have the right to withdraw the consent given at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
To object to the processing of your personal data or to exercise other rights, please write to: email@example.com.
Date of update: 23 May 2018