Dear Customer,

Pursuant to Art. 13 of the European Regulation 2016/679 on the protection of personal data (GDPR), we inform you that the personal data you provide or otherwise acquired when signing the Loyalty Card will be processed in accordance with the legislation in force and the principles of fairness, lawfulness, transparency and protection of confidentiality provided therein.

DATA CONTROLLER

The Data Controller I VIAGGI DEL PERIGEO SRL, with headquarters in Rome, in the person of its legal representative who, within the scope of his prerogatives, may avail himself of the collaboration of specially identified managers or appointees. The owner can be contacted at the e-mail address info@iviaggidelperigeo.it

DATA COLLECTED.

The data collected by the Owner are those provided by the user (e.g., first name, last name, gender, date of birth, social security number, ID, e-mail, telephone, purchases made).

MODE OF TREATMENT

The data will be processed with the aid of computer and/or paper tools, according to logic strictly related to the purposes indicated above and in any case adopting procedures and measures suitable to protect their security and confidentiality.

PURPOSE OF PROCESSING

Data processing will be for the purpose of carrying out the activities listed below:

1. carrying out, subject to your express written consent, direct marketing activities, such as the sending – including by e-mail, SMS and MMS – of advertising material and communications having informative and/or promotional content in relation to products or services provided and/or promoted by the Owner or its business partners, including free gifts and free samples;
2. carrying out, subject to your express written consent, individual or aggregate profiling and market research activities aimed, for example, at the analysis of consumer habits and choices, the processing of statistics on the same or the evaluation of the degree of satisfaction with respect to the products and services offered.

NATURE OF PROVIDING DATA

For the purposes set forth in paras. (a) and b) of the preceding point, the provision of data is optional and any refusal to provide such data and to give the relevant consent will result in the impossibility for the Controller to follow up on the direct marketing and profiling activities indicated therein.

SCOPE OF DATA DISSEMINATION

Data processing will be carried out by personnel directly employed by the Data Controller and/or by natural or legal persons specifically identified by the Data Controller as data processors or persons in charge of processing. Under no circumstances will the data provided be disclosed or communicated to third parties, except for those whose right to access the data is recognized by provisions of the law or orders of the authorities.

STORAGE PERIODS

Personal Data will be retained by the Owner, for a period of three years.

The Controller may be obliged to keep the customer’s Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data and the customer’s acquired data will be deleted. Therefore, upon the expiration of this period, the right of access, deletion, rectification and the right to Data portability can no longer be exercised.

RIGHTS OF INTERESTED PARTIES

The individuals to whom the personal data refer may at any time exercise their rights against the Data Controller, in accordance with European Regulation 679/2016 (GDPR) and national legislation. In particular they will be able to:

1. To have confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and to have them communicated in an intelligible form;
2. Obtain information on the origin of the personal data, the purposes and methods of processing; the logic applied in case of processing carried out with the aid of electronic instruments; the identification details of the owner, managers and designated representative
3. Obtain updating, rectification or supplementation of data;
4. Obtain the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
5. To have certification that the aforementioned operations have been brought to the attention of those to whom the data have been communicated or disseminated, except where this proves impossible or involves the use of means manifestly disproportionate to the right protected;
6. Oppose, in whole or in part, for legitimate reasons, the processing of personal data concerning them, still relevant to the purpose of collection, and the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
7. Receive its data, and those entered into the application, in a structured form that can be read by a data processor and in a format commonly used by a computing device (data portability);

To exercise these rights, the data subject may contact the Data Controller directly.

CONSENT TO THE PROCESSING OF PERSONAL DATA

Having read this notice, the undersigned declares that he/she has understood its contents and gives his/her consent to the processing of personal data and to the management of activities that cannot be exercised anonymously and are necessary to enable subscribers to take advantage of and recognize discounts and promotions, offer and send prizes.