INFORMATION FOR THE PROCESSING OF PERSONAL DATA
This information is provided pursuant to art. 13 EU Regulation 2016/679 for the protection of personal data.
The data controller
Travelbuy San Teodoro di Lorenzo Pinducciu
Loc. Suaredda 5, San Teodoro (SS)
Tax code PNDLNZ80P13H856Z
VAT number 01649790910
pec: [email protected])
Nature of the provision
The provision of data is optional. Refusal to provide data makes it impossible to be contacted for the purposes listed below. Provision for marketing purposes is optional and does not make it impossible to be contacted for other purposes.
Purpose of processing
a) execution of obligations arising from contracts stipulated with Travelbuy San Teodoro di Lorenzo Pinducciu and/or fulfillment, before the conclusion of the contract, of specific requests of the interested party;
b) fulfillment of obligations established by law, regulations or community legislation;
c) activities functional to marketing such as, by way of explanation but not limited to, sending newsletters; sending training and information material; sending marketing material via email, newsletter, paper mail, sms, mms and new communication platforms such as, by way of explanation but not limited to, WhatsApp, Twitter, Facebook, Viber, Telegram, Skype. Qualitative and quantitative surveys on customer satisfaction and their perception of the services offered by the owner, carried out periodically in order to improve the quality of the service and the relationship with the customer
With regard to purposes a) and b), we inform you that the processing and communication of your personal data by Travelbuy San Teodoro di Lorenzo Pinducciu does not require your consent as processing is necessary for the performance of obligations arising from the contract itself and/or for the performance of services requested by you before the conclusion of the contract as well as to comply with legal obligations.
With regard to the purpose C indicated, each Interested Party has the right to refuse Travelbuy San Teodoro di Lorenzo Pinducciu, at any time, their consent to the processing, without this entailing detrimental consequences in the contractual relationship and/or for the performance of services requested by you before the conclusion of the contract itself.
In reference to the possible customer satisfaction questionnaire, we confirm that the provision of data requested by the questionnaire is optional and any refusal to provide them will not have detrimental consequences. The data provided by you via the questionnaire will not be communicated to third parties and will be processed in an aggregate manner or communicated within the structures in an anonymous manner.
Methods for processing data
The data collected are processed using IT tools.
Suitable security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
Who processes your data
The processing of personal data takes place at the aforementioned headquarters and is handled by personnel in charge.
Period of retention of your data.
The data relating to marketing activities will be retained until the interested party requests cancellation. Personal data processed for contractual or economic purposes such as invoicing will be processed for the mandatory times established by the relevant laws.
Complaint
The right of the data subject to lodge a complaint with a supervisory authority remains unaffected.
Rights of data subjects pursuant to art. 15 EU 2016/679
The subjects to whom the personal data refer have the right to be informed whether or not personal data relating to them are being processed, and, where applicable, to obtain information regarding:
the purposes of the processing
the categories of data in question
the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular recipients in third countries or international organisations;
where possible, the envisaged period for which the personal data will be stored, or, if that is not possible, the criteria used to determine that period;
the existence of the right of the data subject to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning him or her, or to object to such processing;
the right to lodge a complaint with a supervisory authority;
where the data are not collected from the data subject, any available information as to their source;
the existence of automated decision-making, including profiling, referred to in Article 22, paragraphs 1 and 4, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Requests should be addressed