PRIVACY POLICY
pursuant to art. 13 of EU Regulation 2016/679
This document contains important information on the personal data that is collected by visiting this website as a registered or unregistered user and describes how to use this data. The disclosure must be read carefully before forwarding any type of personal information and/or filling out any electronic form on the site itself. The information is provided pursuant to art. 13 of EU Regulation 2016/679 (RGDP) only for this site and not for other websites that may be consulted by the user via a specific link.
The information covers the following
A) Data Controller and Co-Data Controller
B) Personal data collected
C) Legal basis and purpose of the processing
D) Processing methods and data retention period
E) Categories of data recipients
F) Nature – mandatory or optional – of the provision of users' personal data
G) The rights of the interested party and the methods of exercising them
A) Data Controller and Co-Data Controller
The Data Controller is Costa Edutainment SpA, with registered office in Riccione (RN), via Ascoli Piceno n. 6, and administrative office in Genoa, Porto Antico area – Ponte Spinola, Tax Code and VAT number 03362540100. If the site uses the online ticket service, newsletter registration, filling out the contact form or simple registration on the site, the data will be processed also from C-WAY srl, based in Genoa, Porto Antico area – Ponte Spinola, VAT number 03789020108, tour operator owned by CE, as co-owner of the treatment. The Data Protection Officer can be contacted at the email address dpo@costaedutainment.it. If you believe that the processing of your data has occurred in violation of the law, you can lodge a complaint with the Guarantor for the protection of personal data.
B) Personal data collected
B.1.) Navigation data
The computer systems and software procedures used to operate the site acquire, during normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. This is the case of the Internet Protocol (IP) addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the file size obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the user's operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
B.2) Data provided voluntarily by the user/visitor
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as other personal data included in the message which will be used exclusively to respond to the request. or for the provision of the service. Specific summary information on privacy are reported or displayed on the pages of the site set up for particular services on request.
C) Legal basis and purpose of data processing
The legal basis on which the processing of your data is based is your consent, depending on the purposes for which it was expressed. In some cases, such as for example the purchase of tickets online, your lack of consent could make it impossible to provide the requested service. Except as indicated below in relation to the cookie policy, personal data will be processed by CE and/or C-WAY, exclusively for the purposes connected to those requested by the form filled in by the interested party and, in particular:
C.1) REGISTRATION ON THE SITE: subject to the user's consent and until the revocation of the same, to allow registration on the site, which may be necessary for access to particular sections of the site itself and to provide and manage the various services offered (purchase and reservation of tickets, reservation of parking, etc…).
C.2) NEWSLETTERS AND MARKETING ACTIVITIES: subject to the user's consent and until the revocation of the same, to carry out communication, dissemination and marketing activities (such as, by way of example but not limited to, sending the informative newsletter, promotion and advertising and carrying out related analyzes on registered users, which allow CE E c Way Srl to improve the services and products offered to its customers);
C.3) MARKETING AND PROMOTIONAL ACTIVITIES OF THIRD PARTIES: subject to the user's consent and until the revocation of the same, to allow the use of the data provided for marketing and promotional activities of third parties;
D) Processing methods and storage period
The data acquired by the Data Controller are processed with lawfulness, correctness, transparency, purpose limitation and retention, data minimization, accuracy, integrity and confidentiality. Data processing will be carried out manually (using paper media) and electronically (using IT media), with the use of security measures designed to guarantee the confidentiality of personal data and to avoid undue access by unauthorized parties. Personal data will be kept for the duration of the commercial relationship and for as long as necessary to pursue the purposes described in this Privacy Policy (for example, where the user subscribes to a newsletter, for the duration of this subscription, or where have a user account, until you close it). After this period, your personal data will be kept only to comply with legal and regulatory obligations (for example, for 10 years, in the case of accounting purposes; for the duration of the mandatory retention obligation, in the case of tax purposes ; etc.) or to allow the Company to maintain proof of their respective rights and obligations.
E) Categories of data recipients
Within the limits pertinent to the processing purposes indicated, personal data may, with adequate guarantees, be brought to the attention of public or private subjects, natural or legal persons which the Joint Controller uses to carry out the activities instrumental to the achievement of the purposes referred to above or to which the Joint Controllers are required to communicate personal data by virtue of legal or contractual obligations. For some types of purchases (e-commerce: purchase of entrance tickets, reservations for guided tours, etc.) the user will be sent, with a specific notice, to the link of the company in charge (Joint Data Controllers) C.WAY srl It is specified that the personal data provided with prior authorization by users by filling in the online forms will not be disclosed to third parties or disclosed, except in the case of inclusion on the site of the names of winners of any competitions or prize or promotional operations promoted by the Joint Controllers through the sites.
F) Nature – mandatory or optional – of the provision of users' personal data
The provision of some personal data is optional, but it is partly necessary (ie for those data whose boxes are marked with an asterisk) so that the Joint Controllers can meet the user's needs within the site's functionality. Failure, partial or incorrect provision of personal data marked with an asterisk, as necessary for the execution of the requested service, does not make such execution possible; while the missing, partial or incorrect provision of unnecessary optional personal data does not entail any consequences. Any requests for data exceeding the indispensable ones will be proposed separately with specifications of the processing purposes and any communications in order to allow their eventual denial.
G) The rights of the interested party and the methods of exercising them
We inform you that at any time, and in the presence of the legal conditions, you will have the right to ask CE to allow you access to your personal data, the rectification or cancellation of the same, revoke the consent, as well as the limitation of the treatment. You can also oppose the processing and take advantage of data portability by means of a simple communication via email below.
These rights may be exercised by e-mail communication to the e-mail address privacy@costaedutainment.it and/or privacy@c-way.it, or by writing to the address of the data controller specified above. Furthermore, if you have consented, the user may oppose the processing for the purpose of sending digital material (newsletters, informative/advertising material, etc.) via the user's e-mail address, by clicking on a specific “link” present in every e-mail message.
If you believe that the processing of your data has occurred in violation of the law, you can lodge a complaint with the Guarantor for the protection of personal data.
