INFORMATION MADE ACCORDING TO ART. 13 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (27.4.2016) FOR THE PROCESSING OF PERSONAL DATA OF NATURAL PERSONS
This statement informs you of the concrete ways of managing the website in relation to the processing of personal data of connected users.
Data processing is always carried out according to the principles of lawfulness, transparency and correctness and appropriate security measures are adopted to guarantee data protection. Further and specific information on the processing of personal data may be obtained by sending a request to the Data Controller using the contact form.
ARTICLE 13 OF REGULATION (EU) 2016/679
Information to be provided where personal data are collected from the data subject
1. Where personal data relating to a data subject are collected from the data subject, the controller shall, at the time when personal data are obtained, provide the data subject with all of the following information:
(a)| the identity and the contact details of the controller and, where applicable, of the controller’s representative;
(b)| the contact details of the data protection officer, where applicable;
(c) | the purposes of the processing for which the personal data are intended as well as the legal basis for the processing;
(d) | where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party;
(e) | the recipients or categories of recipients of the personal data, if any;
(f) | where applicable, the fact that the controller intends to transfer personal data to a third country or international organisation and the existence or absence of an adequacy decision by the Commission, or in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means by which to obtain a copy of them or where they have been made available.
2. In addition to the information referred to in paragraph 1, the controller shall, at the time when personal data are obtained, provide the data subject with the following further information necessary to ensure fair and transparent processing:
(a) | the period for which the personal data will be stored, or if that is not possible, the criteria used to determine that period;
(b) | the existence of the right to request from the controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability;
(c) | where the processing is based on point (a) of Article 6(1) or point (a) of Article 9(2), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
(d) | the right to lodge a complaint with a supervisory authority;
(e) | whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data;
(f) | the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
3. Where the controller intends to further process the personal data for a purpose other than that for which the personal data were collected, the controller shall provide the data subject prior to that further processing with information on that other purpose and with any relevant further information as referred to in paragraph 2
4. Paragraphs 1, 2 and 3 shall not apply where and insofar as the data subject already has the information.
Contact information – Owner and Data Controller
Vincenza Danila Castro
Palermo Via Pisa n.6 (90133)
Sicily – Italy
Owner contact email: firstname.lastname@example.org
Owner contact mobile: +39 3382394015
Types of Data collected – Mode and place of processing the Data
When visitors leave comments on the site www.danilatourguide.com , we collect the data shown in the comment – forms as well as the visitor’s IP address and browser user agent string to facilitate spam detection.
Collecting additional data the computer system on which the operation of this website is based acquires some personal data during its operation. These data are not collected to be associated with identified users, but by their nature through the processing-association with data held by third parties may allow the identification of the user. This category of data includes, for example, IP address, domain name, access time, parameters relating to the operating system used by the user. These data are collected for the sole purpose of obtaining statistical information on the use of the website and on its correct functioning or to ascertain any cybercrimes against the website. DANILATOURGUIDE.COM does not collect or process special categories of personal data, namely sensitive data, health data (including genetic or biometric data) and criminal data.
The data you enter in the form are exclusively used to give a precise response to what you requested and, for this purpose, it is necessary to give your express consent. The data you have provided will be kept for a period of 24 months and then deleted from our systems.
When you spontaneously send an e-mail to one of the e-mail addresses indicated on our site, we acquire the sender’s address and any other personal data that you have entered in the message and in its attachments. The e-mail boxes corresponding to the addresses indicated on our sites and any other e-mail address of DANILATOURGUIDE.COM are not of a personal nature even when they mention the name and / or surname of an individual. They belong to the Data Controller and have the primary purpose of allowing the effective performance of working activities. By sending an e-mail to the e-mail addresses indicated on the website, you declare that you have read and accepted the processing conditions contained in this statement.
Failure to provide the optional data in the collection forms does not affect the achievement of the requested service. The fields where it is optional to enter the data are recognizable as they are not marked by the asterisk that marks the mandatory fields.
DANILATOURGUIDE.COM takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data; the Data is processed at the Owner’s operating offices and in any other places where the parties involved in the processing are located.
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
The Data concerning the User is collected to allow the DANILATOURGUIDE.COM to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity,
The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.
Google Analytics (Google Ireland Limited)
Google Analytics is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Application, to prepare reports on its activities and share them with other Google services.
Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
The rights of Users – How to exercise these rights
Users may exercise certain rights regarding their Data processed by the Owner.
In particular, Users have the right to do the following:
Withdraw their consent at any time. Users have the right to withdraw consent where they have previously given their consent to the processing of their Personal Data.
Object to processing of their Data. Users have the right to object to the processing of their Data if the processing is carried out on a legal basis other than consent. Further details are provided in the dedicated section below.
Access their Data. Users have the right to learn if Data is being processed by the Owner, obtain disclosure regarding certain aspects of the processing and obtain a copy of the Data undergoing processing.
Verify and seek rectification. Users have the right to verify the accuracy of their Data and ask for it to be updated or corrected.
Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data. In this case, the Owner will not process their Data for any purpose other than storing it.
Have their Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to obtain the erasure of their Data from the Owner.
Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that the Data is processed by automated means and that the processing is based on the User’s consent, on a contract which the User is part of or on pre-contractual obligations thereof.
Lodge a complaint. Users have the right to bring a claim before their competent data protection authority.
Any requests to exercise User rights can be directed to the Owner through the contact details provided in this document. These requests can be exercised free of charge and will be addressed by the DANILATOURGUIDE.COM as early as possible and always within one month.