PRIVACY POLICY

ITALY TRAVELS - TOUR OPERATOR - FLORENCE

MUSEUMS FLORENCE

by Italy Travels

1 - Introduction

Italy Travels S.r.l.takes the privacy and security of your personal data seriously. We collect and process it with particular care and attention, while adopting specific technical and organizational measures to ensure full processing security.
Pursuant to art. 13 of European Regulation 2016/679 ("Regulation"), we would like to inform you that your personal data is processed in a way that ensures security and confidentiality and is carried using paper, computerized and/or telematic tools, as detailed in this policy.

This policy is provided pursuant to Recommendation no. 2/2001 which the European authorities for the protection of personal data, within the Working Group established by Art. 29 of Directive 95/46/EC, adopted on May 17, 2001.

2 - Definitions

Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;

Special categories of personal data mean data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation.

Data controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Data processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

3 - Data controller:

The processing of your personal data is carried out by Italy Travels S.r.l. ("Italy Travels" or "Company"), with registered office in Florence at Via Livorno 54/2, in its capacity as Data Controller pursuant to and for the purposes of the EU Regulation.

For any question or request related to the processing of your personal data you may contact usat any time by sending a request to the following contacts:

Data controller


Company Name: Italy Travels Srl
Registered office: Via Livorno 54/2, Florence
Data contact telephone number: +39 055 5321180
Data contact email: privacyitalytravels@gmail.com

4 - Purposes and legal basis of processing

The personal data that Italy Travels processes are those that you provide us with when you place an order to purchase goods or services and those that we collect while you browse or use the online services offered by Italy Travels.

Italy Travels may therefore collect data about you such as personal data such as first and last name, email, shipping address and billing address, navigation data, and your buying habits.

After being collected, your personal data are processed for the following purposes:

	Purposes	Legal Basis
A	Fill your purchase orders for one or more products available on the site, then execute, manage and/or fulfill contractual obligations.	The processing carried out for these purposes is necessary for fulfilling of contractual obligations, and do not require specific consent from the data subject.
B	Carry out statistical surveys, market research, and promotionale activities.	The processing carried for these purposes is sone explicit consent given by the user.
C	Fulfilling obligations required by laws, regulations, and European legislation.	The processing carried out for these purposes is necessary to fulfill legal obligations and let you use the requested services//goods, and do not require explicit consent from data subjects.
D	To measure your experience of using our web services and our products and services and ensure the proper functioning of web pages and thei content.	The processing carried out for these purposes is based on a legitimate interest of the Data Controller and does not require explicit consent from the data subject.
E	Carry out direct promotional activities by periodically sending newsletters and other promotional materials to the email address that you spontaneusly provided us when registering to the Website.	The processing carried out for these purposes is done with the explicit consent of the user, except for the commercial communications relating to products and/or services similar to those already purchased and/or subscribed to by the user whose processing is based on a legitimate interest in Data Controller.

The processing of your personal data is carried out using paper, computer or telematic tools and with adequate security measures to ensure the security and confidentiality of your personal data. The data are currently processed and stored at the registered office of the Data Controller and are also processed on behalf of the Data Controller, by professionals and/or companies in order to execute technical, development, management, and administrative/accounting activities.

5 - Modalities of processing

Your personal data will be processed by the specifically authorized staff of Italy Travels and exclusively on the basis of specific instructions from the Data Controller.
The processing of your personal data is carried out using paper, computer or telematic tools and with adequate security measures to ensure the security and confidentiality of your personal data. The data are currently processed and stored at the registered office of the Data Controller and are also processed on behalf of the Data Controller, by professionals and/or companies in order to execute technical, development, management, and administrative/accounting activities.

6 - Disclosure of personal data

Your personal data will also be transmitted to third parties that we use to provide our services. These parties have been chosen in a suitable manner, and they provide an adequate guarantee of compliance with the rules governing the processing of personal data. These parties have been appointed Data Processors pursuant to art. 28 of the Regulation and are required to carry out their activities according to the specific instructions given by Italy Travels and under its control.

These third parties may belong to the following categories: financial operators, companies specializing in IT services; couriers; marketing companies; companies specializing in market research and data processing.

Your data may also be transferred to the police, judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, the prevention and protection against threats to public security, and to allow Italy Travels to exercise or protect a right of its own or third parties before the competent authorities, as well as for other reasons related to the protection of the rights and freedoms of others.

7 - Data transfer outside the EU

Some of the third parties referred to in paragraph 4 above may be based in countries outside the European Union, which, nonetheless, provide an adequate level of data protection, as required by specific decisions of the European Commission.

The transfer of your personal data to third parties resident or located in countries that do not belong to the European Union and that do not ensure adequate levels of protection will be done only with your consent or prior stipulation between Italy Travels and these parties of specific agreements, containing safeguards and appropriate guarantees for the protection of your personal data, known as "standard contractual clauses," also approved by the European Commission, or if the transfer is necessary for the conclusion and execution of a contract between you and Italy Travels or for the management of your requests.

8 - Data Retention

We inform you that your data will be retained for a limited period of time, which varies depending on the type of processing and its specific purposes, as described below:

data collected to conclude and execute contracts for the purchase of goods or services: the data will be kept until the conclusion of administrative-accounting formalities. Billing data will be retained for ten years from the date of invoice;
User data registered on a portal/website: the data will be stored until you request your profile be erased;
payment data: the data will be kept until payment is received and the relevant administrative and accounting formalities are concluded;
data collected in the context of using services offered by Italy Travels: these data are stored until the termination of the service or cancellation of registration to the service by the User;
data related to user requests to Italy Travels 's Customer Service: data useful to assist you will be kept until your request has been fulfilled;
data provided for commercial communication, opinion polls and market research: until the user requests an end to the activity and, regardless, within 2 years from the last interaction of any kind from the data subject with Italy Travels.

At the end of that period, your data will be permanently deleted or otherwise made irreversibly anonymous by Italy Travels.

9 - Your rights

We inform you that you have the right to exercise the following rights in relation to the personal data covered by this notice, as provided and guaranteed by the Regulations:

Right of access and rectification (articles 15 and 16 of the Regulations): you have the right to access your personal data and to request that it be corrected, modified, or integrated. If you wish, we will provide you with a copy of your data in our possession.
Right to erasure of data
Right to restriction of processing
Right to data portability

ight to object Italy Travels must evaluate the reasons for your request.
Right to lodge a complaint

At any time, you may exercise your rights with regard to the specific processing of your personal data by Italy Travels.

Further information about the rights of the data subject can be obtained by asking the Data Controller for the full excerpt of the articles mentioned above.

10 - Security Measures

Italy Travels adopts appropriate and preventive security measures to safeguard the confidentiality, integrity, completeness, and availability of personal data of the data subject. Technical, logistical, and organizational measures are implemented with the aim of preventing damage, including accidental damage, losses, alterations, improper and unauthorized use of the processed data.

The Data Controller cannot be held responsible for any untruthful information sent directly by the user (for example: correctness of the email address or of the credit card or postal address details), or for any information concerning him or her that has been provided by a third party, including fraudulently.

11 - Changes to this privacy policy

As our services regularly evolve, there may be changes to the characteristics of the processing of your personal data described herein. This privacy policy may be subject to changes and additions over time, as necessary due to new regulations regarding the protection of personal data, or the development/modification of our services. We, therefore, suggest that you periodically check the content of our policy; when possible, we will seek to inform you promptly of the changes made and their consequences. The updated version of the privacy policy will always be posted on the page https://www.museumsflorence.com/en/privacy.php
indicating the date of its last update.

12 - Date of last update

01/01/2021