(Rev. of 24/05/2018)
This privacy statement is prepared on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) relating to the protection of individuals with regard to the processing of personal data, as well as the free movement of such data.
Owner and data controller
Wild Tuscany Treks by Leonardo Gelli, Via di Campo, 943 – Orbicciano, 55041 Camaiore (Lucca).
Email address: firstname.lastname@example.org.
The data are processed at the owner’s operating offices and in any other place where the parties involved in the treatment are located. For further information, contact the owner at the address: email@example.com.
Purpose of processing
The data will be processed for the following purposes related to the performance of legislative or contractual obligations:
• Fullfilments required by law in the tax and accounting fields;
• Provision of requested services;
• Management of disputes;
• Planning and publication of activities.
The processing of functional data for the fulfillment of these obligations is necessary for proper management of the relationship between the owner and the customer and their provision is mandatory to implement the purposes indicated above. Failure to communicate or incorrect communication of one of the mandatory information may cause the impossibility for the owner to guarantee the fairness of the treatment itself and to provide the requested services.
Data collected automatically
Some data, expecially cookies and usage data, are collected automatically while browsing this site, directly or through third parties.
Usage data can be accessible to external parties (such as technical service providers, hosting providers, IT companies) and used to monitor and analyze web traffic and to keep track of visitor behavior.
Data voluntarily provided by the user
The optional, explicit and voluntary sending of personal data by the user through the forms on this site entails the subsequent acquisition of the data provided by the sender, necessary for the provision of the requested services.
Further details on the data collected are provided through specific information texts on the contact forms.
Mailing List or Newsletter
By subscribing to our mailing lists or newsletters, the user’s email address is included in a list of contacts to which can be sent email messages containing information about our activities.
Personal Data collected: email.
Booking of treks, hikes, summer camps or other activities
The data are provided voluntarily by the user through the specially prepared forms and are used for booking, provide and billing the requested services.
Personal data collected: name, surname, place and date of birth, tax code or VAT number, address, email, phone number, health self-certification.
Requests for information or quotation
The data are voluntarily provided by the user through the specially prepared forms and are used for the provision of the requested services.
Personal data collected: name, surname, email, telephone number (optional).
Data processing methods
The owner adopts the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data.
The processing is carried out through the use of suitable tools and procedures to ensure maximum security and confidentiality, through archives and paper supports, with the aid of digital supports, IT and telematic means. In addition to the owner, in some cases, other parties involved in the organization (lawyers, system administrators, etc.) may have access to data. The updated list of data processors can always be requested from the owner.
Personal data will not be used for purposes other than those described in this statement, other than by informing the customer in advance and, where necessary, obtaining his consent.
For no reason Wild Tuscany Treks sells or provide user data to third parties. The only uses of the data are those highlighted in this policy. Users are the sole owners of their data and can request their modification or cancellation at any time.
Sharing and disclosing of data
The collected data can be shared, only if necessary, with third parties specifically appointed as data processors, for the fulfillment of mandatory obligations or for the provision of the requested services.
In particular, the data could be shared with:
• Public administrations;
• Police force;
• Consultants and professionals, also in associated form;
• Banks and credit institutions.
The data are processed and stored for the time required by the purposes for which they were collected.
Personal data collected for purposes related to the execution of a contract between the owner and the user will be retained until the execution of this contract is completed.
Under art. 5 of the GDPR, the retention period of personal data can reach a maximum of 5-10 years, given the art. 2948 of the Italian Civil Code which provides for a 5-year prescription for periodic payments; art. 2220 of the Italian Civil Code which provides for the keeping for 10 years of the accounting records, and art. 22 of the Presidential Decree no. 600/1973.
When the treatment is based on the user’s consent, the owner can keep personal data longer until said consent is revoked.
At the end of the retention period, personal data will be deleted. Therefore, at the end of this term, the right of access, cancellation and the right to data portability can no longer be exercised.
Conditions for processing
The owner processes personal data relating to the user if one of the following conditions exists:
• The user has given consent for one or more specific purposes;
• Processing is necessary for the execution of a contract with the user;
• Processing is necessary to fulfill a legal obligation to which the owner is subject.
However, it is always possible to request the owner to clarify the legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for in a contract or necessary to conclude a contract.
As a user you can exercise the following rights, with reference to the data processed by the owner.
• Withdraw consent at any time;
• Object to the processing of your data;
• Access your data;
• Check and ask for the correction of your data;
• Obtain the limitation of the treatment;
• Obtain the cancellation or removal of your personal data;
• Receive your data or have it transferred to another holder;
• Make a complaint.
To exercise your rights, you can make a written request to be sent by email to the address: firstname.lastname@example.org.