This information describes how to manage the site in relation to the processing of personal data of users who consult it, as well as the processing practices of data transmitted by the interested party to the Owner and / or Manager via this site.
This is an information that is provided pursuant to art. 13 EU Regulation 2016/679 – General Data Protection Regulation (“Regulation”) to those who interact with the Vintage Tours web services of Dario Rossi, with operational headquarters in the Pip Area – Località Fornaci, 53026 – Pienza (SI) ( Italy), accessible electronically starting from the address: http://www.vintagetours.it/blog/.
According to the rules of the Regulations, the treatments carried out by Vintage Tours of Dario Rossi will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and conservation, minimization of data, accuracy, integrity and confidentiality.

Data controller and data processor

Following consultation of this site, or voluntary registration in it, data relating to identified or identifiable persons may be processed. Personal data may be processed by Dario Rossi, as Data Controller and by Vintage Tours di Dario Rossi, with operations in Zona Pip – Località Fornaci, 53026 – Pienza (SI) (Italy), as Data Processor.

Personal data subject to processing

Following browsing the Site, we inform you that your personal data will be processed, which may consist of an identifier such as your name, surname, address, e-mail address, online identifier or one or more characteristic elements of his physical, economic, cultural or social identity suitable to make the interested subject identified or identifiable, in addition to any data necessary to make online payments (hereinafter also just “Personal Data”).

Processing methods

The Personal Data will be processed by means of the operations of collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data for the time strictly necessary to achieve the purposes for which they were collected. The provision of Personal Data is optional, but for some of them the provision is mandatory (ie necessary for those data whose fields are marked with an asterisk or otherwise marked as mandatory) so that the needs of the user can be met in the context of site functionality. Failure, partial or incorrect conferment of Personal Data, as necessary for the execution of the requested service, does not make such execution possible; while the failure, partial or incorrect conferment of the optional Personal Data does not entail any consequence. The provision of Personal Data may take place: a) by filling in the appropriate fields in the various sections of the site; b) browsing the Site or using cookies; c) Analytics Cookies. The Personal Data will be processed mainly in automated form, with logic strictly related to the aforementioned purposes, through the Data Base, the electronic Platforms managed by the Manager or by third parties appointed for the purpose of processing and / or integrated IT systems and / or websites owned or in use by the Manager. If the user expresses his consent, the personal data will be made visible and stored in a computerized archive for managing customer relations, so-called Customer Relationship Management (CRM), as well as possibly stored in one or more specific company archives or databases which other related companies can access. Since CRM is therefore a database for the shared management of the data contained therein, updating, rectification or deletion of any data supplied will lead to the updating of such data with respect to all the subjects to whom it is permitted. ‘access.
Specific security measures are observed to prevent the loss of data, unlawful or incorrect use and unauthorized access, including the SSL / https secure protocol for certain reserved parts of the site and applications and protections against unauthorized access to servers and other computers in use.
The personal data provided by users who voluntarily register or send requests to send informative material (newsletters, answers to questions, etc.) are used in order to perform the service or provision requested and to maintain the network of contacts and are communicated to third parties not appointed in charge or responsible by the Data Controller or the Data Supervisor only in the event that this is necessary for that purpose (subject to the consent of the interested party).

Types of data processed

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning (see also the paragraph on cookies). The data could be used by the competent authorities to ascertain responsibility in case of hypothetical computer crimes against the site.
Personal data provided voluntarily by the user (name, surname, address, email …) may also be processed.

Cookies

Cookies are text files that are stored on your computer and read remotely by our servers or third-party servers that we use. The use of permanent technical cookies or session cookies (ie that are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the technical provision of the service requested by the user and to the transmission of identifiers session (consisting of random numbers generated by the server) necessary to allow a safe and efficient exploration of the site and its applications.
The technical cookies used on this site avoid the use of other computer techniques that are potentially detrimental to the privacy of users’ browsing.
This website uses, with the prior consent of the user (except for strictly necessary technically or purely statistical cookies with aggregated data), also some systems – cookies, beacons – that analyze the users’ browsing to make statistics on visits or to improve the offer of content and possibly place targeted advertising on web pages. The systems currently used are Google Analytics and Facebook Pixel: the first is a web analysis service provided by Google, Inc. (“Google”), the second by Facebook, Inc. Google Analytics, like the other systems, uses “cookies” “. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google and Facebook servers, including in the United States. Google will use this information for the purpose of tracking and examining your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where this is required by law or where such third parties process the information on Google’s behalf. Google and Facebook declare that they do not associate your IP address with any other data held.
No other use is made of cookies for the transmission of information of a personal nature, nor are other persistent cookies of any kind used, or systems for tracing users. We remind you that you can set your browser software for the internet (eg Firefox, Internet Explorer, Safari, Chrome) in a way that does not accept cookies, even technical ones, activating the so-called anonymous browsing, and that in this case no data will be processed through these systems.

Social plug-in

The “social buttons” are visible on the site to allow the user to use the registration information of social networks, including LinkedIn, Facebook, Twitter, Google+, to request registration / registration for the services offered or to share the published content, through the user’s social profiles.
These platforms may store cookies on the user’s device through the site (third-party cookies), in order to gather information about the user’s navigation.

Optional supply of data other than navigation data

Apart from that specified for navigation data, the user is free to provide personal data contained in the registration / registration forms, by e-mail or via the instant chat service (some with specific and separate request for consent for treatments that the require) or indicated in contacts, to request the sending of informative material or other communications (eg the management of personal contact requests for information and / or for available materials). The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site, or through the communication forms, entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message .
In particular, the user’s personal data, as inserted in the various forms present on the site, will be processed to respond to requests sent by the interested party and / or for the purpose of providing the periodic newsletter and / or information material and / or whitepapers / desired reports, downloading other content. The provision of data is optional. However, failure to enter the necessary data makes it impossible to execute the request. The data transmitted in this way can be processed, only for the time necessary for the purposes indicated, also by electronic means, by our employees and subjects identified as data processors.
The data so conferred may also be used to inform interested parties about developments or new editions of newsletters, reports, events, as well as initiatives related to them, including promotional or commercial events with automated tools (SMS, MMS, email, fax, autoresponders, messaging on social networks) and non-automated (telephone with operator or paper mail).
The interested party has the opportunity to oppose such processing at any time, initially or during subsequent communications, easily and free of charge, also by writing to the e-mail address: info@vintagetours.it, as well as to obtain an immediate reply that confirm the interruption of this treatment (Article 15 of the Regulation).
In the event that the user requests registration / registration through the use of plug-in technologies of social networks (eg LinkedIn), he consents to the communication of data of his profile / account by the social network, to the extent necessary to registration / registration management.

Appointees, managers and data processing offices

Personal data may be shared with individuals who typically act as data processors pursuant to art. 28 of the Regulation ie:

persons, companies or professional offices that provide assistance and consultancy services in the field of organization, reception and execution of the services requested, as well as in accounting, administrative, legal, tax, financial and credit recovery relating to the provision of services;
subjects with which it is necessary to interact for the provision of services (for example hosting providers);
or subjects delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks); (collectively “recipients”);
subjects, bodies or authorities, autonomous data controllers, to whom it is mandatory to communicate personal data pursuant to legal provisions or orders of the authorities;
persons authorized to process personal data pursuant to art. 29 of the Regulations necessary to carry out activities strictly related to the provision of the Services, which are committed to confidentiality or have an adequate legal obligation of confidentiality.
The Personal Data are mainly processed at the offices of the Data Controller, Dario Rossi and the Data Processor, Vintage Tours di Dario Rossi. For more information, contact the owner.

Transfers of personal data

As regards the possible transfer of Data to Third Countries, it is announced that the treatment will take place according to one of the methods allowed by the law in force, such as the consent of the interested party, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for the free circulation of data (eg EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. It is possible to obtain further information, upon request, from the contacts indicated above.

Data retention

The personal data processed will be kept for the time strictly necessary to achieve those same purposes in compliance with the principles of minimization and limitation of conservation pursuant to Articles. 5.1.e) of the Regulations.

Rights of interested parties

Pursuant to articles 15 and following of the Regulations, the user has the right to request at any time, access to his personal data, the correction or deletion of the same, the limitation of processing in the cases provided for by art. 18 of the Regulation, to obtain in a structured format, commonly used and readable by automatic device, the data concerning him, in the cases provided for by art. 20 of the Regulation. At any time, the user can revoke pursuant to art. 7 of the Regulation the consent given; to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR (Guarantor for the Protection of Personal Data) pursuant to art. 77 of the Regulation, if it considers that the processing of your data is contrary to the legislation in force.
The user can formulate a request for opposition to the processing of his personal data pursuant to Article 21 of the GDPR in which to give evidence of the reasons justifying the opposition: he reserves the right to evaluate the request, which would not be accepted in case of existence of legitimate cogent reasons to proceed with the processing that prevail over the interests, rights and freedom of the user.
Requests should be sent in writing to the following address: info@vintagetours.it.