Privacy policy
SUBJECT OF THIS INFORMATION
In compliance with EU Regulation 2016/679 (hereinafter also just the "Regulation"), all the key information relating to the processing of the data of those who register, or otherwise transmit their personal data, to the site www. .idyllia.com (hereinafter also just "Interested Subjects"). In particular, the Data Controller identified below guarantees that such data will be used in compliance with the principles of correctness, lawfulness, transparency and protection of the confidentiality and rights of the Data Subjects.
The Data Controller reserves the right, at any time and at its sole discretion, to modify and / or update this information. If this information is changed, the new version will be published on the site and the "last update" date will be updated.
The following is not contractual in nature and therefore does not generate contractual obligations towards the user of the site.
1. HOLDER OF THE TREATMENT
The Data Controller of the data received from the Interested Subjects is the
Spartacus snc - Idyllia
Viale delle Milizie 76
00192 Rome
VAT number 11346401000
[email protected] (hereinafter also only "Data Controller"). The Data Controller may be contacted by email at the address, via a certified e-mail box (Pec) [email protected].
The Data Controller is aware of the importance of ensuring the security of the private information of which it becomes aware and, therefore, strives to protect the privacy of the Data Subjects using the most appropriate IT protection techniques. However, it cannot be held responsible for any unauthorized access, for data loss, illicit / incorrect use, or for alterations of personal information that occur outside of its control.
2. PURPOSE OF THE TREATMENT
The data provided by the Interested Subjects will be processed for the realization of the following purposes:
sale of tourist packages offered on the website www.idyllia.com
sending promotional / commercial communications relating to the products offered by the Data Controller;
profiling and identification of preferences.
If the Data Controller intends to process personal data for purposes other than those for which they were collected, it will submit a new and specific request for consent to the Data Subjects.
The processing of personal data related to the sale of tourist packages requires the express consent of the Data Subjects. Failure to provide or incorrect provision of personal data by the Data Subjects could make it impossible to provide the service.
3. LEGAL BASIS OF THE PROCESSING
Pursuant to Article 6 of the Regulations, the activity carried out by the Data Controller is based on:
on the contract stipulated at the time of receipt of the order confirmation by the customer, with regard to the purposes referred to in point 2.A above;
on the consent of the Data Subjects, with regard to the purposes referred to in points 2.B and 2.C above (consent that is expressed freely, specifically and unambiguously following the reading and understanding of this information).
4. TYPE OF DATA PROCESSED
The Data Controller will acquire the following personal data of the Interested Subjects:
name and surname;
address;
email address;
telephone number;
date of birth;
fiscal Code;
location;
profession.
The aforementioned data will be collected directly from the Interested Subjects (for example by filling in the online form or by sending it via email).
5. METHOD OF TREATMENT
The processing of the data of the Data Subjects, acquired by reason of the contractual relationship and / or the freely expressed consent, takes place at the registered office of the Data Controller identified above.
The processing is carried out directly by the Data Controller and his appointees exclusively electronically and always in such a way as to guarantee the security and confidentiality of the data, in compliance with the provisions of the Regulations.
The data collected through the form of the website www.idyllia.com are automatically forwarded to the internal staff of the Data Controller.
To achieve the purposes referred to in Article 2 above, the processing includes: the collection, storage, consultation, comparison and deletion of the data of the Data Subjects.
6. DATA RETENTION
The Data Controller retains the collected data for as long as such information is suitable for pursuing the purposes referred to in Article 2 above, or until the Data Subject requests its cancellation.
7. ASSIGNMENT AND / OR TRANSFER OF DATA TO A THIRD COUNTRY
The Data Controller does not provide for any assignment and / or transfer of data to third countries that are not part of the European Union and / or to international organizations.
8. RECIPIENTS OF DATA AND RESPONSIBLE
The personal data of the Data Subjects will not be disclosed by the Data Controller, however they may be disclosed to:
employees and collaborators of the Data Controller, located on the territory of the European Union;
subjects, physical or legal, who provide assistance and advice to the Data Controller in accounting, administrative, legal, tax and financial matters, located on the territory of the European Union;
subjects, bodies or authorities to whom the communication of personal data is mandatory by virtue of legal provisions or orders of the authorities.
The personal data of the Data Subjects will also be communicated by the Data Controller to third parties appointed as Data Processors. These third parties are mainly the subjects who provide the services included in the tourist package sold by the Data Controller.
The complete list of Data Processors is immediately provided by the Data Controller upon simple request of the Data Subjects.
9. RIGHTS OF INTERESTED PARTIES
The Interested Subjects have, at any time, the following rights:
RIGHT OF ACCESS
The Data Subject has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to his personal data and the following information:
the purposes of the processing;
the categories of personal data in question;
the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the data retention period or the criteria used to determine this period;
a list of your rights;
if the data are not collected from the Data Subject, all available information on their origin;
the existence of an automated decision-making process.
RIGHT OF RECTIFICATION
The Data Subject has the right to obtain from the Data Controller the correction of their inaccurate personal data and the integration of their incomplete data, all without undue delay.
RIGHT TO BE FORGOTTEN
The Data Subject has the right to obtain from the Data Controller the deletion of personal data concerning him, without undue delay, in cases where:
the personal data are no longer necessary with respect to the purposes for which they were collected and / or processed;
decides to withdraw consent;
object to the processing;
the personal data have been unlawfully processed;
personal data must be deleted to fulfill a legal obligation under Union law or Italian law.
The Data Controller however points out that the request for cancellation presented by the Data Subject may be evaluated in accordance with the following recognized exceptions of the Regulation: freedom of expression and information, fulfillment of a legal obligation, public interest, scientific or historical research or for statistical, judicial reasons.
RIGHT TO RESTRICTION OF PROCESSING
The Data Subject may request the Data Controller to limit the processing of their personal data if:
you contest the accuracy of the data. In this case, the limitation will last the time necessary to allow the Data Controller to make the appropriate changes;
the processing is unlawful and the Data Subject, instead of requesting the deletion of personal data, requests that its use be simply limited;
the personal data is necessary for the ascertainment, exercise or defense of a right in court and the owner no longer needs it for the purposes of the processing;
has opposed the processing pursuant to Article 21 paragraph 1 of the Regulation for the time necessary to verify the legitimate reasons of the Data Controller with respect to those of the Data Subject.
RIGHT OF OBJECTION
The Data Subject has the right to object to the processing of his personal data. In this case, the Data Controller must refrain from further processing such data, unless he can demonstrate that there are legitimate reasons or interests to continue it, thus prevailing over the rights of the Data Subject. On the other hand, in the case of personal data processed for marketing purposes, the opposition of the interested party will be sufficient and the personal data will no longer be processed.
In the event of a generic exercise of the right of opposition for marketing purposes, the same will be considered as regards all methods of contact both by e-mail, telephone, paper mail, etc. without prejudice to the right of the Interested Subjects to rectify and exercise the right of opposition limited to one or more methods.
RIGHT OF COMPLAINT
The Data Subject, if he believes that the processing of his data is in violation of the current European legislation on the subject of privacy, has the right to lodge a complaint with the Guarantor for the protection of personal data.
RIGHT TO PORTABILITY
The Data Subject has the right to receive personal data concerning him in a format readable by an automatic device and has the right to transfer such data to a different data controller, without impediment by this Data Controller. , the Data Subject also has the right to obtain the direct transmission of data from this Data Controller to another.
RIGHT OF WITHDRAWAL OF CONSENT
The Data Subject can easily revoke his consent to the processing of data without the obligation to give reasons, in any case the lawfulness of the processing carried out by the Data Controller and based on the consent given before the revocation remains unaffected. Following the revocation, the treatment will be interrupted. To revoke the consent it will be sufficient to provide a clear and unequivocal communication / request to this effect to the Data Controller at the contacts listed in this information. With the revocation the right of cancellation is automatically triggered, for which the Data Controller will delete the data of the Data Subject, except for the conservation necessary for the purposes of law and / or tax.
In compliance with EU Regulation 2016/679 (hereinafter also just the "Regulation"), all the key information relating to the processing of the data of those who register, or otherwise transmit their personal data, to the site www. .idyllia.com (hereinafter also just "Interested Subjects"). In particular, the Data Controller identified below guarantees that such data will be used in compliance with the principles of correctness, lawfulness, transparency and protection of the confidentiality and rights of the Data Subjects.
The Data Controller reserves the right, at any time and at its sole discretion, to modify and / or update this information. If this information is changed, the new version will be published on the site and the "last update" date will be updated.
The following is not contractual in nature and therefore does not generate contractual obligations towards the user of the site.
1. HOLDER OF THE TREATMENT
The Data Controller of the data received from the Interested Subjects is the
Spartacus snc - Idyllia
Viale delle Milizie 76
00192 Rome
VAT number 11346401000
[email protected] (hereinafter also only "Data Controller"). The Data Controller may be contacted by email at the address, via a certified e-mail box (Pec) [email protected].
The Data Controller is aware of the importance of ensuring the security of the private information of which it becomes aware and, therefore, strives to protect the privacy of the Data Subjects using the most appropriate IT protection techniques. However, it cannot be held responsible for any unauthorized access, for data loss, illicit / incorrect use, or for alterations of personal information that occur outside of its control.
2. PURPOSE OF THE TREATMENT
The data provided by the Interested Subjects will be processed for the realization of the following purposes:
sale of tourist packages offered on the website www.idyllia.com
sending promotional / commercial communications relating to the products offered by the Data Controller;
profiling and identification of preferences.
If the Data Controller intends to process personal data for purposes other than those for which they were collected, it will submit a new and specific request for consent to the Data Subjects.
The processing of personal data related to the sale of tourist packages requires the express consent of the Data Subjects. Failure to provide or incorrect provision of personal data by the Data Subjects could make it impossible to provide the service.
3. LEGAL BASIS OF THE PROCESSING
Pursuant to Article 6 of the Regulations, the activity carried out by the Data Controller is based on:
on the contract stipulated at the time of receipt of the order confirmation by the customer, with regard to the purposes referred to in point 2.A above;
on the consent of the Data Subjects, with regard to the purposes referred to in points 2.B and 2.C above (consent that is expressed freely, specifically and unambiguously following the reading and understanding of this information).
4. TYPE OF DATA PROCESSED
The Data Controller will acquire the following personal data of the Interested Subjects:
name and surname;
address;
email address;
telephone number;
date of birth;
fiscal Code;
location;
profession.
The aforementioned data will be collected directly from the Interested Subjects (for example by filling in the online form or by sending it via email).
5. METHOD OF TREATMENT
The processing of the data of the Data Subjects, acquired by reason of the contractual relationship and / or the freely expressed consent, takes place at the registered office of the Data Controller identified above.
The processing is carried out directly by the Data Controller and his appointees exclusively electronically and always in such a way as to guarantee the security and confidentiality of the data, in compliance with the provisions of the Regulations.
The data collected through the form of the website www.idyllia.com are automatically forwarded to the internal staff of the Data Controller.
To achieve the purposes referred to in Article 2 above, the processing includes: the collection, storage, consultation, comparison and deletion of the data of the Data Subjects.
6. DATA RETENTION
The Data Controller retains the collected data for as long as such information is suitable for pursuing the purposes referred to in Article 2 above, or until the Data Subject requests its cancellation.
7. ASSIGNMENT AND / OR TRANSFER OF DATA TO A THIRD COUNTRY
The Data Controller does not provide for any assignment and / or transfer of data to third countries that are not part of the European Union and / or to international organizations.
8. RECIPIENTS OF DATA AND RESPONSIBLE
The personal data of the Data Subjects will not be disclosed by the Data Controller, however they may be disclosed to:
employees and collaborators of the Data Controller, located on the territory of the European Union;
subjects, physical or legal, who provide assistance and advice to the Data Controller in accounting, administrative, legal, tax and financial matters, located on the territory of the European Union;
subjects, bodies or authorities to whom the communication of personal data is mandatory by virtue of legal provisions or orders of the authorities.
The personal data of the Data Subjects will also be communicated by the Data Controller to third parties appointed as Data Processors. These third parties are mainly the subjects who provide the services included in the tourist package sold by the Data Controller.
The complete list of Data Processors is immediately provided by the Data Controller upon simple request of the Data Subjects.
9. RIGHTS OF INTERESTED PARTIES
The Interested Subjects have, at any time, the following rights:
RIGHT OF ACCESS
The Data Subject has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to his personal data and the following information:
the purposes of the processing;
the categories of personal data in question;
the recipients or categories of recipients to whom the personal data have been or will be disclosed;
the data retention period or the criteria used to determine this period;
a list of your rights;
if the data are not collected from the Data Subject, all available information on their origin;
the existence of an automated decision-making process.
RIGHT OF RECTIFICATION
The Data Subject has the right to obtain from the Data Controller the correction of their inaccurate personal data and the integration of their incomplete data, all without undue delay.
RIGHT TO BE FORGOTTEN
The Data Subject has the right to obtain from the Data Controller the deletion of personal data concerning him, without undue delay, in cases where:
the personal data are no longer necessary with respect to the purposes for which they were collected and / or processed;
decides to withdraw consent;
object to the processing;
the personal data have been unlawfully processed;
personal data must be deleted to fulfill a legal obligation under Union law or Italian law.
The Data Controller however points out that the request for cancellation presented by the Data Subject may be evaluated in accordance with the following recognized exceptions of the Regulation: freedom of expression and information, fulfillment of a legal obligation, public interest, scientific or historical research or for statistical, judicial reasons.
RIGHT TO RESTRICTION OF PROCESSING
The Data Subject may request the Data Controller to limit the processing of their personal data if:
you contest the accuracy of the data. In this case, the limitation will last the time necessary to allow the Data Controller to make the appropriate changes;
the processing is unlawful and the Data Subject, instead of requesting the deletion of personal data, requests that its use be simply limited;
the personal data is necessary for the ascertainment, exercise or defense of a right in court and the owner no longer needs it for the purposes of the processing;
has opposed the processing pursuant to Article 21 paragraph 1 of the Regulation for the time necessary to verify the legitimate reasons of the Data Controller with respect to those of the Data Subject.
RIGHT OF OBJECTION
The Data Subject has the right to object to the processing of his personal data. In this case, the Data Controller must refrain from further processing such data, unless he can demonstrate that there are legitimate reasons or interests to continue it, thus prevailing over the rights of the Data Subject. On the other hand, in the case of personal data processed for marketing purposes, the opposition of the interested party will be sufficient and the personal data will no longer be processed.
In the event of a generic exercise of the right of opposition for marketing purposes, the same will be considered as regards all methods of contact both by e-mail, telephone, paper mail, etc. without prejudice to the right of the Interested Subjects to rectify and exercise the right of opposition limited to one or more methods.
RIGHT OF COMPLAINT
The Data Subject, if he believes that the processing of his data is in violation of the current European legislation on the subject of privacy, has the right to lodge a complaint with the Guarantor for the protection of personal data.
RIGHT TO PORTABILITY
The Data Subject has the right to receive personal data concerning him in a format readable by an automatic device and has the right to transfer such data to a different data controller, without impediment by this Data Controller. , the Data Subject also has the right to obtain the direct transmission of data from this Data Controller to another.
RIGHT OF WITHDRAWAL OF CONSENT
The Data Subject can easily revoke his consent to the processing of data without the obligation to give reasons, in any case the lawfulness of the processing carried out by the Data Controller and based on the consent given before the revocation remains unaffected. Following the revocation, the treatment will be interrupted. To revoke the consent it will be sufficient to provide a clear and unequivocal communication / request to this effect to the Data Controller at the contacts listed in this information. With the revocation the right of cancellation is automatically triggered, for which the Data Controller will delete the data of the Data Subject, except for the conservation necessary for the purposes of law and / or tax.