Francesco Calanca, as the data controller pursuant to Legislative Decree 196/2003 and subsequent amendments and of EU Regulation 679/2016, intends to inform you of the methods of managing the site or www.queertuscanytours.com with reference to the processing of the personal data of users who consult it.
The processing of your personal data will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and storage, minimization of data, accuracy, integrity and confidentiality. Your personal data will therefore be processed in accordance with the legislative provisions of the Applicable Legislation and the confidentiality obligations provided for therein.
The owner of the treatment of the Site is Francesco Calanca,with a tax domicile in Via Masaccio, n. 270 – 50132 Florence – Italy.
2. THE PERSONAL DATA BEING PROCESSED
“Personal Data” means any information concerning an identified or identifiable natural person with particular reference to an identifier such as name, identification number, location data, an online identifier or one or more elements characteristic of his physical, physiological, psychic, economic, cultural or social identity.
The Personal Data collected by the Site are as follows:
at. Navigation data
The Computer Systems of the Site collect some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with you, but which by their very nature could, through processing and associations with data held by third parties, allow you to be identified. These include the IP addresses or domain names of the devices used to connect to the Site, the Uniform Resource Identifier (URI) notation addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful , error, etc.) and other parameters related to your operating system and IT environment.
This data is used in order to obtain anonymous statistical information on the use of the Site and to check its correct functioning; to allow – given the architecture of the systems used – the correct provision of the various features requested by you, for reasons of security and verification of responsibility in case of hypothetical computer crimes against the Site or third parties and are deleted after 7 days.
b. Data provided voluntarily
Through the Site it has the possibility to voluntarily provide Personal Data such as name and email address for subscription to the newsletter service or to contact us. Specific information on the processing of your data is available in the relevant areas
c. Cookies and related technologies
3. FINALITY, LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
The Personal Data you provide through the Site will be processed by Francesco Calanca for the following purposes:
a) purposes related to the execution of a contract to which you are a party or to the execution of pre-contractual measures taken at your request (e.g. request for contact through the Contacts form)
b) purposes of statistical research/analysis on aggregated or anonymous data, without therefore the possibility of identifying the user, aimed at measuring the functioning of the Site, measuring traffic and evaluating usability and interest;
(c) purposes relating to the fulfilment of a legal obligation
(d) objectives necessary to establish, exercise or defend a right in court or whenever the courts perform their judicial functions;
The legal basis for the processing of Personal Data for the purposes referred to in point (a) is the provision of a service or the response to a request that does not require consent pursuant to the Applicable Legislation.
The provision of your Personal Data for the purpose listed above is optional, but failure to provide them may make it impossible to detect your request or fulfill a legal obligation to which the data controller is subject.
Your Personal Data may be communicated to subjects authorized by Francesco Calanca for the provision of services offered by the site to this end appointed as data controllers.
Personal data will not be transferred outside the European Economic Area
5. DATA RETENTION
Francesco Calanca will process your Personal Data for the time strictly necessary to achieve the purposes indicated in point 3.
6. HIS RIGHTS
As an interested party, he has the rights referred to in Art. 7 Privacy Code and Art. 15 and ss. GDPR, namely the rights to:
a) obtain confirmation from the data controller whether or not personal data concerning him or her is being processed and in this case to obtain access to personal data and the following information: the purposes of the processing; the categories of personal data in question; the recipients or categories of recipients to whom personal data has been or will be communicated, in particular if they are recipients of third countries or international organisations; where possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine that period; if the data are not collected from the data subject, all available information on their origin; the existence of automated decision-making, including profiling, and, at least in such cases, significant information on the logic used, as well as the expected importance and consequences of such processing for the data subject.
b) obtain from the data controller the rectification of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.
c) obtain from the data controller the deletion of personal data concerning him without undue delay, if there is one of the following reasons: a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; (b) the person concerned withdraws the consent on which the processing is based in accordance with Articles 6(1)(a) or 9(2)(a) and if there is no other legal basis for processing; (c) the person concerned objects to processing within the meaning of Article 21(1), and there is no prevailing legitimate reason for processing, or opposes processing within the meaning of Article 21(2); d) personal data has been illegally processed; (c) personal data must be deleted in order to fulfil a legal obligation under Union or Member State law to which the data controller is subject; (f) personal data have been collected in relation to the provision of information society services referred to in Article 8(1).
d) obtain from the data controller the limitation of the processing when one of the following hypotheses occurs: a) the data subject disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is unlawful and the data subject opposes the deletion of personal data and instead requests that its use be limited; (c) although the data controller no longer needs it for the purposes of processing, personal data are necessary for the data subject for the establishment, exercise or defence of a right in court; (d) the person concerned has objected to processing within the meaning of Article 21(1), pending verification of whether the legitimate grounds of the data controller are more important than those of the data subject.
c) receive in a structured format, common use and readable by automatic device, personal data concerning him provided to a data controller and transmit such data to another data controller without hindrance by the data controller to whom he provided them if: a) the processing is based on the or a contract b) the processing is carried out by automated means. In exercising his rights with regard to data portability, the data subject has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
(f) object at any time, for reasons connected with his particular situation, to the processing of personal data concerning him within the meaning of Article 6(1)(c) or (f), including profiling on the basis of those provisions. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him carried out for these purposes, including profiling to the extent that it is connected to such direct marketing.
(g) right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects that affect him or that has a similar significant impact on himself.
(h) right to lodge a complaint with a supervisory authority
Requests should be made by e-mail to the address: firstname.lastname@example.org