Prices and availability
1. Data controller
2. Categories of personal data processed
We will process the following categories of personal data: first name, last name and email address.
3. Purposes of the processing, legal basis and storage period
Personal data will be processed by the Joint Data Controllers for the purposes and under the conditions set out below.
Advertising activities aimed at users: for sending email communications containing information on the data controller’s products, services and special offers.
Consent of the data subject.
Data storage period
For twenty-four months after the last sending, unless the user revokes or exercises the right to object at an earlier time.
4. Consent and possible refusal
Data processing is based on the customer’s consent, who is free to grant or refuse it and possibly revoke it at any time, with the only consequence, in the event of refusal or revocation, of not receiving periodic newsletter communications.
5. Processing methods
Joint Data Controllers have adopted specific security measures to prevent the loss of personal data, unlawful or incorrect use thereof and unauthorised access thereto.
6. Categories of recipients of personal data
For the fulfilment of the purposes indicated at point 5, the Data Controller may communicate the data collected to the categories of subjects indicated below: providers of IT services, such as internet services and cloud computing; subjects that perform customer service activities; professional offices and other subjects that provide assistance, consultancy and communication services. Where necessary, data recipients will be designated as data controllers, in accordance with the provisions of Article 28 of the GDPR.
7. Transfer of data to third countries
Personal data processed by the Joint Data Controllers may be transferred to other companies based in the United States of America (USA) solely for the purposes indicated above. Said transfer will take place exclusively following the signing between Biasuzzi S.p.A. – Divisione Turismo and the companies receiving the data of standard contractual clauses (S.C.C.) adopted by the Commission of the European Union (Art. 46, paragraph II, points C and D of the GDPR).
8. Rights of data subjects