INFORMATION PURSUANT TO ARTICLES 13 AND 14 OF EU REGULATION No. 679 OF 2016 - WEBSITE

In accordance with the principles of fairness, lawfulness, transparency, protection of confidentiality and the rights of the data subject with regard to the processing of their data, pursuant to Article 13 of EU Regulation 2016/679 (hereinafter 'REG. EU 2016/679'), this page describes the methods of processing the personal data of users who consult the website of AZIENDA PER IL TURISMO DELLA VAL DI FASSA SOCIETÀ COOPERATIVA (hereinafter also referred to as the Data Controller or, for brevity, APT VAL DI FASSA), accessible electronically at the following address: www.fassa.com.

This information does not apply to other websites, pages or online services accessible via hypertext links that may be published on the website but refer to external resources.

DATA CONTROLLER AND DATA PROTECTION OFFICER

AZIENDA PER IL TURISMO DELLA VAL DI FASSA SOCIETÀ COOPERATIVA
Streda Roma, 36 38032 Canazei (TN)
T. +39 0462/609502 – F. +39 0462/602278
Email: direzione@fassa.com | Email PEC: aptfassa@pec.cooperazionetrentina.it

The Data Protection Officer designated pursuant to Article 37 of EU Regulation 2016/679 can be contacted at the following email address: dpo@apttrentino.it.

PURPOSE AND LEGAL BASIS OF THE PROCESSING

The user's personal data will be processed for the following purposes and on the legal bases indicated below:

1. promotion of the tourist image of the territory
   The legal basis for this type of processing is the legitimate interest of the Data Controller as provided for in Article 6(1)(f).
2. Intermediation and booking of services and tourist packages at accommodation facilities. These entities will become independent data controllers of the same data.
   The legal basis for the processing listed is represented by Article 6(1)(b) of EU Regulation 2016/679.
3. Responding to requests sent by the user via email and/or the form on the website.
   The legal basis for the processing operations listed is Article 6(1)(b) of EU Regulation 2016/679. The optional, explicit and voluntary sending of e-mails to the addresses indicated on the website or in the forms on the website entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the communication.
4. Subscription to our mailing list for the periodic sending of newsletters, relating, for example, to events, promotional initiatives and, in general, the promotion of tourism in the Trentino region and for the sending of the best holiday offers.
   The legal basis is consent, as provided for in Article 6(1)(a) of EU Regulation 2016/679.
   For this activity, see the specific information notice.
5. Carrying out retargeting activities and/or using email to intercept social media profiles (Facebook, Instagram) for personalised marketing campaigns.
   The legal basis is consent, as provided for in Article 6(1)(a) of EU Regulation 2016/679.
6. To enable and facilitate navigation of the website, as well as to ensure an adequate level of security, integrity and availability.
   The legal basis for this type of processing is the legitimate interest of the Data Controller as provided for in Article 6(1)(f).
7. Analysis of statistical data on aggregated or anonymous data, for the purpose of monitoring the proper functioning of the Website, traffic, usability and interest.
   The legal basis for this type of processing is the legitimate interest of the Data Controller as provided for in Article 6(1)(f).
8. Establishing, exercising or defending a right in court.
   The legal basis for this type of processing is the legitimate interest of the Data Controller as provided for in Article 6(1)(f).
9. To comply with obligations laid down by law, regulation, Community legislation or an order from the Authority.
   The legal basis for this type of processing is provided by the provisions of Article 6(1)(c).

NAVIGATION DATA

During normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers used by users connecting to the Site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) etc.) and other parameters relating to the user's operating system and IT environment. This data is used for the sole purpose of checking the correct functioning of the Site.
This data, which is necessary for the use of web services, is also processed for the purpose of:

• obtaining statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.);
• checking the correct functioning of the services offered.
• understanding how to improve the quality of navigation on the Website.

Browsing data does not persist for more than seven days and is deleted immediately after aggregation (except for any need to investigate crimes by the judicial authorities).

SHARING YOUR DATA WITH THIRD PARTIES

In order to fulfil your requests, your data may be disclosed to third parties (for example, regarding the availability and/or booking of accommodation). These parties may act as independent data controllers.
 
For the purposes referred to in the previous paragraph, the personal data provided will be accessible to internal collaborators authorised to process such data within the scope of their duties, to external suppliers duly appointed as data processors who provide services for the management of the information system and telecommunications networks, including e-mail, newsletters and website management, and to all parties for whom there is a legal obligation to communicate or other parties for whom specific authorisations are obtained in the event of a request.

STORAGE PERIOD

The data will be stored for the time strictly necessary to provide the data subject with the requested services. 
In any case, the data will be deleted following your request, except for further storage obligations required by law. Your data will not be disclosed.

DATA DISCLOSURE AND PLACE OF PROCESSING

Your personal data will not be disclosed in any way.
The computer archives on which the above data are processed are located within the European Union. Personal data are not transferred outside the European Union.
For strictly operational reasons related to the management of marketing services, your identification data may also be communicated to suppliers in third countries. Transfers to countries outside the EU, in addition to cases where this is guaranteed by adequacy decisions of the European Commission, will be carried out in such a way as to provide appropriate and adequate safeguards in accordance with Articles 46, 47 or 49 of the Regulation.

RIGHTS OF THE DATA SUBJECT WITH REGARD TO DATA PROCESSING

Pursuant to Articles 15, 16, 17, 18, 19, 20, 21, and 77 of the EU Regulation, the Data Subject is informed that:

• has the right to request access to personal data, rectification, erasure or restriction of processing concerning him/her, or to object to such processing, and to transfer his/her data to another controller in the cases provided for;
• any rectifications, erasures or restrictions on processing carried out at the request of the data subject - unless this proves impossible or involves a disproportionate effort - will be communicated by the writer to each of the data processors to whom the personal data have been transmitted;
• has the right to lodge a complaint with the Data Protection Authority, following the procedures and instructions published on the Authority's official website at garanteprivacy.it.

The exercise of these rights is not subject to any formal constraints and is free of charge.