PRIVACY POLICY AND PERSONAL DATA PROCESSING

DATA CONTROLLER

The Data Controller is IHE Tour Operator S.r.l. (Tax Code and VAT number 10599040960) with its registered office at 20145, Milan, Via Vincenzo Monti No. 57/4, e-mail: admin@italyhiddenexperiences.com.

TYPES OF DATA COLLECTED

Our form requires the following data: email (mandatory).

PROCESSING METHODS

User’s personal data is processed exclusively with electronic and automated tools and stored on servers located within the territory of the European Union. The processing is carried out under the authority of the Data Controller, only by individuals specifically appointed, authorized, and instructed for this purpose. Specific security measures are adopted to maintain the integrity of the collected data, prevent data loss and illicit use, and avoid unauthorized access.

LEGAL BASIS AND PURPOSE OF PROCESSING

User data may be used for the following purposes:

1. Subscription to the newsletter.
2. Periodic sending of emails (newsletter).
3. Compliance with legal or administrative obligations related to the activities carried out.
4. Data retention.
5. Sending marketing communications.

The legal bases on which the lawfulness of processing for the above activities is based are the consent of the data subject (pursuant to Art. 6(1)(a) of EU Reg. 679/2016 or GDPR) and the legitimate interest of the Data Controller (pursuant to Art. 6(1)(f) of EU Reg. 679/2016 or GDPR).

Consent to receive the newsletter is free and optional and can be revoked at any time by the data subject through unsubscription.

DATA TRANSMISSION

Personal data is not disseminated but may be communicated, within the territory of the European Union and in compliance with current regulations, to the following third parties: public authorities, when required by law or upon their legitimate request; third-party structures and companies used by the Data Controller for activities related to or instrumental to the purposes; external consultants. The Data Controller appoints third parties that process data on its behalf and for its account as Data Processors.

RETENTION PERIOD

Personal data are processed and retained only for the time required by the purpose for which they were collected, in compliance with applicable regulations.

USER RIGHTS

At any time, the user may exercise the rights under Art. 15 and following of Reg. EU No. 679/2016. The user can request access to their personal data and information related to it; the correction of inaccurate data or the completion of incomplete data; the deletion or restriction of the processing of personal data concerning them; object at any time to the processing of personal data under specific circumstances; withdraw consent at any time, limited to cases where processing is based on consent: processing based on consent and carried out before its withdrawal retains its lawfulness.

Requests can be addressed to the Data Controller at the email address admin@italyhiddenexperiences.com.

It is also possible to lodge a complaint with a supervisory authority, such as the Italian Data Protection Authority (www.garanteprivacy.it).

Date of publication: 14 May 2024

Last modified: 27 June 2024