Pursuant to EU Regulation 2016/679 called “European Regulation on the Protection of Personal Data” (GDPR) we inform users that personal data entered on the site are processed in the manner and for the purposes described below.
The processing of personal data according to the regulation means any operation or set of operations, carried out with or without the aid of electronic or automated means, concerning the collection, recording, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and distribution of data.
In compliance with the requirements of the new Regulation on the protection of personal data, we inform you as follows:
1. Data Controller
The data controller is Chris Tour srl VIA NAPOLI, 227/229 – 81059 Vairano Scalo (CE) – P.IVA: 03637090618, which will use them for the purposes indicated below. For further information you can contact us at the following e-mail address: firstname.lastname@example.org
2. Object of treatment
The personal and personal data (name, surname, email address) collected by us are provided by the user when sending a contact request, when subscribing to the newsletter service and / or contacting us via chat.
3. Purposes of treatment
Personal data are processed for purposes related or instrumental to the activity of Chris Tour srl such as storage in its databases or carrying out direct mail marketing activities. In particular:
With the express consent of the interested party:
The receipt of a message sent through the form. When filling out the form, personal data (name and email address) are requested with which the user will subsequently be identified in order to send a reply to the email address indicated.
Subscription to the newsletter service provided by the Owner.
4. Treatment modalities
Personal data are subject to treatment based on principles of correctness, lawfulness and transparency. The company ensures that the data processing carried out with or without the aid of electronic or automated means, will take place through instruments that guarantee the security and confidentiality of the person concerned, through the use of appropriate procedures that avoid the risk of loss, unauthorized access, illegal use and dissemination, in accordance with the limits and conditions set by EU Regulation 2016/679.
Personal data are subject to electronic and/or automated processing.
The data are processed by our staff, where engaged in the execution of the mandate given to us.
5. Access to data
The subjects who may become aware of your personal data as managers or agents (according to Article 13 Paragraph 1 of the GDPR) are:
The Data Controller
The staff of the Owner of the treatment, for the fulfillment of user requests (subscription to the newsletter, response to a request for information, contact via chat)
Personal data will not be disclosed to third parties.
6. Communication of data
The data may be disclosed to supervisory bodies, judicial authorities and other third parties to whom disclosure is required by law, including the prevention/repression of any illegal activity related to accessing the site and / or sending a request.
7. Data transfer
The management and storage of personal data will take place on servers located in Italy of the owner and / or third party companies and appointed as data processors.
The data will not be transferred outside the European Union.
8. Period of data retention
The personal data of users of the site who send a request for information via the contact form, will be kept for the time strictly necessary to fulfill the request, for the purposes described in paragraph 3.
The data collected for the activities of registration to the website and subscription to the newsletter service, will be included in the company database and stored for the duration of the service, after which they will be deleted or made anonymous within the time limits established by law.
If the data subject withdraws his consent to the specific processing, the data will be deleted or made anonymous within 72 hours of receipt of the withdrawal.
Pursuant to Art. 13, paragraph 2, letter (f) of the Regulation, we inform you that all data collected will not be subject to any automated decision-making process, including profiling.
9. Rights of the interested party
Users may always exercise the rights set forth in Articles 13 (Paragraph 2), 15, 18, 19 and 21 of the GDPR, summarized here in the following points:
The interested party has the right to obtain confirmation of the existence of data concerning him/her, even if not yet communicated, and to have them communicated in an intelligible form;
The interested party has the right to ask the Data Controller for access to personal data, their integration, rectification, cancellation or limitation of processing concerning him or her or to object to their processing, as well as the right to data portability;
Has the right to lodge a complaint with the Guarantor for the protection of personal data, following the procedures and directions published on the official website of the Authority at www.garanteprivacy.it;
The exercise of rights is not subject to any constraint of form and is free of charge.
From the receipt of this informative communication, it will be considered released the consent to the treatment of the personal data of which to the points above.
10. Methods of exercising rights
Users may exercise their rights at any time by sending an email to email@example.com