Greatestours by Claudio Nava, with registered office in Modena, VAT number 0352915363 (hereinafter, “Owner”), as data controller, informs you pursuant to art. 13 EU Regulation 2016/679 (hereinafter, “GDPR”) that your data will be processed in the manner and for the following purposes:

1. Object of the Treatment
The Data Controller processes personal, identification data (for example, name, surname, company name, address, telephone number, e-mail address, bank and payment details) subsequently, “personal data” or even “data”, communicated by you in occasion of the conclusion of contracts for the services or services in general of the Owner.

Information collected automatically
This includes information that is collected by cookies and other session management tools (site visits). Such as, for example, your IP address, your acceptance of the use of cookies, etc. This information is used both to improve your site experience and to ensure the site is protected from cyber attacks.

2. Purpose of the treatment
Your personal data are processed:

A) Without your express consent in accordance with the provisions of art. 6, for the following purposes:

1) Conclude the contracts for the services of the Owner;

2) Fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships with you;

3) Fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as in the field of anti-money laundering);

4) Manage your request for information sent by e-mail or telephone

5) Exercise the rights of the owner, for example the right to defense in court;

B) Only with your specific and distinct consent (Article 7), for the following Marketing Purposes: to send you via e-mail, post and / or text message and / or telephone contacts, newsletters, commercial communications and / or advertising material on products o services offered by the Data Controller and detection of the degree of satisfaction with the quality of services.

We inform you that if you are already our customer, we will be able to send commercial communications relating to the Controller’s services and products similar to those you have already used, unless you disagree.

C) Cookies and other technologies we use
This website uses technical and statistical cookies to ensure the proper functioning of the procedures and improve the user experience of the same. This document provides information on the use of cookies and similar technologies, on how they are used by the site and on how to manage them.

Definitions
Cookies are small text files that the sites visited by users send to their terminals, where they are stored before being re-transmitted to the same sites on the next visit. The cookies of the so-called “Third parties”, on the other hand, are set by a website other than the one the user is visiting. This is because on each site there may be elements (images, maps, sounds, specific links to web pages of other domains, etc.) that reside on servers other than that of the site visited.

Types of cookies
Based on the characteristics and use of cookies, different categories can be distinguished:
– Technical cookies. These are cookies used for the sole purpose of “carrying out the transmission of a communication over an electronic communications network, or as strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide this service. “(See Article 122, paragraph 1, of the Code). They are not used for other purposes and are normally installed directly by the website owner or manager. They can be divided into navigation or session cookies, which guarantee the normal navigation and use of the website; analytics cookies, similar to technical cookies when used directly by the site manager to collect information, in anonymized and aggregate form, on the number of users and how they visit the site;
functionality cookies, which allow the user to browse according to a series of selected criteria in order to improve the service provided. The prior consent of users is not required for the installation of these cookies, while the obligation to provide information pursuant to art. 13 of the Code, which the site manager, if he uses only such devices, will be able to provide in the manner he deems most suitable (see the Guarantor’s FAQ).

– Statistical cookies. Statistical cookies allow you to know information on the navigation of the site by users, such as the date and time of the last time the user (anonymized) visited our site or access to the contents chosen by the User (anonymized) during his last visit to our site. These cookies are assimilated to technical cookies only if used for the purpose of optimizing the site directly by the owner of the site, who can collect information in aggregate form on the number of users and how they visit the site. Under these conditions, the same rules apply to analytics cookies, in terms of information and consent, provided for technical cookies (see FAQ of the Guarantor).
To compile the usage statistics of our site we use statistical tools with a limited scope that allow us to know the frequency of visits of our users (anonymized) and the content of greatest interest, as well as technical data useful for improving the performance of the site and server (waiting times for page loading, navigation errors, etc ..). In this way we can focus our efforts on improving site performance and help the user find what they are looking for more easily and quickly. The website may use the information collected to carry out evaluations and statistical calculations on anonymous data and to ensure the continuity of the service or make improvements. This information will not be used for any other purpose.

– Profiling cookies. Profiling cookies (which we do not use) are designed to create user profiles and are used in order to send advertising messages in line with the preferences expressed by the user while surfing the net. Due to the particular invasiveness that such devices may have in the private sphere of users, European and Italian legislation provides that the user must be adequately informed about their use and thus express their valid consent. They are referred to in art. 122 of the Code where it provides that “the storage of information in the terminal equipment of a contractor or a user or access to information already stored is permitted only on condition that the contractor or user has given his consent after being been informed with the simplified procedures referred to in article 13, paragraph 3 “(article 122, paragraph 1, of the Code). This site does not use profiling cookies.

3. Processing methods
The processing of your personal data is carried out by means of the operations indicated in art. 4 paragraph 2 and more precisely: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing.

The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the Service Purposes and for no more than 5 years from the collection of data for the Marketing Purposes.

4. Access to data
Your data may be made accessible for the purposes referred to in art. 2.A) and 2.B) of this information:

1) To any employees and collaborators of the Data Controller or associated companies in Italy or abroad, in their capacity as persons in charge and / or internal managers of the processing and / or system administrators;

2) To third-party companies or other subjects who carry out outsourced activities on behalf of the Data Controller, in their capacity as external data processors.

5. Communication of data
Without the need for express consent (Article 6), the Data Controller may communicate your data for the purposes referred to in art. 2.A of this information to Supervisory Bodies, Judicial Authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes.

These subjects will process the data in their capacity as independent data controllers. Your information will not be disseminated.

6. Data transfer
Personal data is stored on servers located within the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller ensures from now on that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

7. Nature of the provision of data and consequences of refusing to respond
The provision of data for the purposes referred to in art. 2.A of this information is mandatory. In their absence, we will not be able to guarantee the services of art. 2.A.

8. Rights of the interested party
In your capacity as an interested party, you have the rights referred to in Article 15 and precisely the rights of:

1) Obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;

2) Obtain the indication: a) of the origin of personal data; b) the purposes and methods of the processing; c) of the logic applied in case of processing carried out with the aid of electronic tools; d) the identity of the owner, managers and designated representative pursuant to art. 3, paragraph 1; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents;

3) Obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data which need not be kept for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means that are manifestly disproportionate to the protected right;

4) To object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail.

It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the interested party to exercise the right of opposition also only partially.

Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or neither of the two types of communication.

Where applicable, you also have the following rights:

1. Right of rectification (Article 16)
2. Right to cancellation (“right to be forgotten”) (Article 17)
3. Right to restriction of processing (Article 18)
4. Obligation to notify in case of rectification or cancellation of personal data or limitation of processing (Article 19)
5. Right to data portability (Article 20)
6. Right to object (Article 21)
7. As well as the right of complaint to the Guarantor Authority.

9. Procedures for exercising rights
You can exercise your rights at any time by sending:

A registered letter a.r. at Greatestours, Viale Autodromo 80, 41.126 Modena
An e-mail to info@greatestours.com
By accessing the website of the Privacy Guarantor http://www.garanteprivacy.it
10. Owner, manager and appointees
The Data Controller is Greatestours di Claudio Nava.
The updated list of data processors is kept at the registered office of the Data Controller.