Pursuant to European General Data Protection Regulation UE 2016/679 (GDPR)
Exploring Umbria
This Privacy Policy is intended to illustrate the methods adopted by Exploring Umbria S.r.l. for the collection, processing and protection of personal data provided by users via the company’s websites and mobile applications, via e-mail and through service providers and distribution partners. This Privacy Policy does not cover, and the company disclaims any responsibility for, the privacy, information or other practices of third parties, including distribution partners, suppliers and tour operators of third parties, and any third party that manages sites whose links are present on the Exploring Umbria websites. The user declares to have read and understood the terms and conditions of this Privacy Policy.
Privacy Laws
The Internet website of Exploring Umbria S.r.l. as well as the booking portal integrated therein (collectively „Website“) are operated by Exploring Umbria Srl, with registered office at via Santo Stefano Snc – 06033, Frazione Collemancio, Cannara (PG), Italy, Fiscal Code & registration No. 03602120549 (hereinafter „Exploring Umbria“ or „we“). We give great importance to the protection of the user’s personal data, which we highly evaluate and, with regard to collection, processing and use of the data, we strictly adhere to the legal provisions of the European General Data Protection Regulation, EU Reg. 2016 / 679 (GDPR) and to the Italian Legislative Decree n. 196/2003.
Collection of Personal Data
In the course of its business, Exploring Umbria collects and processes personal data in different ways. Data can be collected as provided directly by the user or by the recording of the interaction between the user and the services, for example with the use of cookies on this site. The company may also receive personal information from third parties.
The collected user data may include, without limitation: name, email address, postal address, telephone number, billing information, answers to surveys, reservation data and other information that the user provide on the site, the IP address and web browser software.
The user has the right to choose not to provide his personal data to Exploring Umbria. However, as a rule, some personal data are necessary to receive relevant offers from Exploring Umbria and its partners and to take advantage of the benefits reserved for registered users in execution of the service contract that users stipulate with Exploring Umbria and viewable on the Website (herein referred to as the „Service Contract“).
The processing of personal data takes place according to the following rules and provisions:
- a) Contractual relationship, pursuant to Article 6, par. 1, lett. b of the GDPR
We process personal data that have been transmitted on a voluntary basis and in execution of the Service Contract, pursuant to Article 6, par. 1, lett. b of the GDPR, for the contractual processing of orders and reservations as well as for the development of tourist packages, to open a customer account or as part of pre-contractual measures set out in the Service Contract.
In this regard, we need your name, email address and phone number. For the necessary execution of the payment, the following data may also be required: To pay for a service with a credit card, Exploring Umbria requires the full name, e-mail address and credit card data of the user.
- b) Legitimate Interest, pursuant to Article 6, par. 1, lett. b of the GDPR
By virtue of a legitimate interest within the meaning of Article 6 par. 1, letter. f and, if applicable, lett. b of the GDPR, we process the necessary data for the following purposes:
The data stored in order to perform the Service Contract and make reservations for the services and tourist packages are transmitted only to the extent necessary to Exploring Umbria for the execution of the task conferred by the user, to the accommodation and / or tourist facilities and other third parties (eg IT service providers, customer service, e-mail and newsletter delivery and payment execution) together with the registration and completion of the sale of the service. The transmitted data cannot be used by our service providers for any other purpose than the execution of their duties.
In addition to the execution of the main services of the Service Contract, Exploring Umbria also uses user data for advertising purposes as well as market studies and opinion polls, to communicate offers and news tailored to its interests by mail or newsletter. For this purpose, by virtue of a legitimate interest pursuant to art. 6 paragraph 1 letter. f GDPR, we perform a scoring of interest-based advertising strategy. It is possible at any time to object to the use of your data for advertising purposes, market studies and opinion polls as well as to score advertising, by sending a communication to Exploring Umbria Srl, with registered office at via Santo Stefano Snc – 06033, Frazione Collemancio, Cannara (PG), Italy or by e-mail at privacy@exploring-umbria.it.
When the payment is made, your data is eventually transmitted to the following payment service providers. The credit card number or other bank data are not saved on the Website, but directly transmitted to payment service providers:
the payments by credit cards are processed by Banca Sella S.p.A. having registered offices in Piazza Gaudenzio Sella, 1 – 13900 Biella.
Payments by PayPal are processed by PayPal (Europe) S.à r.l. & Cie, S.C.A., having registered offices in 5. Etage, 22-24 Boulevard Royal, L-2449 Luxebourg. More information on PayPal’s data protection can be found in PayPal’s privacy policy.
Processing of Personal Data
With us you can create a personal customer account. In the password-protected client account area, you can easily manage your reservations and save your data for future bookings.
The fields marked (*) as mandatory containing personal data will be used for creating and processing the user account. Initially, only the e-mail address is required, with which we verify the identity of the user. During registration, you may also voluntarily enter your name, address or other optional information.
Furthermore, here the user can voluntarily save his own phone number so that he can be contacted in case of delays or changes to the travel itinerary.io.
You can update or delete your client account, and therefore your saved personal data, at any time from your personal customer account.
This elimination does not concern the personal data necessary for the fulfillment of the contract pursuant to the retention periods mandatory by applicable laws.
Marketing
The personal data collected when you subscribe to the newsletter, pursuant to art. 6 paragraph. 1 letter a of the GDPR are used for communications with the user (eg service communications, system messages, e-mails for confirmation of registration, for transmission of user account information as well as for sending newsletter).
Users will receive marketing messages from the company only if they have given their consent, if they have requested them, or if they have purchased goods or services at the company and have chosen not to withdraw their subscription to receive marketing messages.
When users are no longer interested in receiving marketing communications via e-mail from Exploring Umbria, they have several options to withdraw their consent to receive future e-mails, they can unsubscribe at any time by following the instructions and clicking on the link included in each marketing message sent by Exploring Umbria.
If the consent to the receipt of marketing communications is withdrawn, the company will nevertheless continue to send emails relating to purchases and reservations, containing service and administrative information such as the modification of the terms, conditions and policies.
Cookies
Exploring Umbria collects personal data through cookies and similar technologies. „Cookies“ are small pieces of information stored by the web browser on the hard disk of the user’s computer, for data record keeping purposes.
For more information on cookies in general, on how to display the cookies installed on your device (mobile) and how to manage and delete them, see the websites www.allaboutcookies.org and http://www.youronlinechoices.com/it/.
Users’ Rights
The user has the right to check, integrate and update the data provided to Exploring Umbria or choose to close his account at any time, in both cases he can write to privacy@exploring-umbria.it. If you decide to close your account, Exploring Umbria will deactivate and delete the profile information and reviews. Exploring Umbria will send an e-mail confirming the request. Once the account is closed, it will no longer be possible to access your personal data. However, you can open a new account at any time.
You can change your marketing preferences at any time.
In compliance with the laws in force, the user has the right to access, to rectify, to cancel, to limit the processing of his data, as well as the right to data portability and the right to object. Below are more details and information on how and when you can exercise your rights. If these rights exist, requests will be answered within one month.
In accordance with the law in force, the user may have the following rights regarding his personal data:
- Right to request access to your personal data.
- Right to request correction of your data if incorrect.
- Right to request the deletion of personal data if:
- they are no longer necessary for the purposes for which they were collected or processed;
- the user revokes the consent, where the processing of personal data is subject to consent and there are no further legal bases;
- the user is opposed to the processing of his personal data and the company has no legitimate reasons above to continue processing;
- personal data have been processed unlawfully;
- personal data must be deleted for the purpose of compliance with legal obligations.
- Right to object to the processing of personal data. The company undertakes to act in the interests of users, unless there are legitimate interests overlying the processing of data or the need to continue processing in order to establish, exercise or defend a legal complaint.
- Right to restrict the processing of your personal data, if:
- the accuracy of the data is disputed by the user, during the period in which the company is required to verify its accuracy;
- the processing is illegal and the user opposes the elimination of his personal data requesting the limitation;
- the company no longer needs the user’s personal data for processing purposes, but these are necessary for the user for legal complaints;
- the user has opposed the processing, for the period in which the company is required to verify the presence of legitimate overlying bases.
- Right to data portability. The user can request to receive the personal data concerning her/him. This right can be exercised only if it relates to the personal data provided to the company, if the processing is subject to consent or necessary for the execution of a contract between the user and the company and if the processing is carried out through automatic means.
You can exercise your rights by sending a request by e-mail to privacy@exploring-umbria.com.
Protection of Personal Data
Exploring Umbria stores users‘ personal data in secure operating environments that are not accessible to the general public and implements security measures at its physical facilities to protect personal data from loss, improper use or alteration by its employees.
However, there is no absolute guarantee of security for transmissions via the Internet or the storage environment, therefore Exploring Umbria makes no guarantee that the personal data provided by users will be secure at any time. Exploring Umbria relies on users who have the right to report any unusual events that could indicate a security breach in their information. In case of reporting, Exploring Umbria will verify if the event can be connected to data transmissions from or to Exploring Umbria and will inform the interested party of the measures that can be implemented or implemented to solve the problem.
Information related to under-age children
Exploring Umbria does not offer services for minors. If Exploring Umbria detects the transmission of personal data by children under the age of 13, this information will be destroyed or eliminated as soon as possible.
Contacts
In the event of questions or complaints regarding the processing of personal data by the company, contact the Data Protection Officer at privacy@exploring-umbria.com. The user also has the right to make complaints about the processing of personal data by the company to the competent authorities. However, we urge users to give the company the opportunity to address any concerns by contacting them before contacting the competent authorities.
Contacts:
Data Protection Officer:
Exploring Umbria S.r.l.
via Santo Stefano Snc – 06033
Frazione Collemancio, Cannara (PG), Italy
E-mail: privacy@exploring-umbria.com