ADVISORY NOTICE requesting information regarding the protection of personal data PURSUANT TO ARTICLE. 13 of Legislative Decree 30.06.2003, n. 196
In compliance with the provisions pursuant to and for the purposes of art. 13 of Legislative Decree 30 June 2003, Taoticket S.r.l., informs those concerned on the purposes and methods of processing personal information collected, their scope of communication and dissemination, as well as the nature of their conferment.
The data, identification and accounting, collected from the interested parties, also referred to third parties, are the subject of treatment and are processed and used directly to follow the requests made by the interested party, as well as to fulfil the obligations arising from any contractual relationship that may be established with the interested party. The data may also be used, subject to consent, for purposes related to information and commercial promotion and direct marketing activities concerning the activities and services offered by the Owner and by the commercial Partners with whom the company has established specific contractual agreements that also govern this aspect, as well as for purposes instrumental to those described above, such as registration, organisation and storage of data collected for the service in question.
Data processing is performed through printed paperwork or computerised means by dedicated internal employees. The data is stored in paper and electronic archives, ensuring the minimum security measures as required by the legislature.
COMMUNICATION AND DISSEMATION
Personal data collected will not be disseminated, sold or exchanged with third parties other than the owner, by managers or agents without the express consent of the interested party, subject to communications with authorised third parties (committed to confidentiality or in the case of appointed data controllers pursuant to art. 29 of Legislative Decree No. 196/2003 and subsequent amendments). In particular, the data may be communicated to IT support companies and to accounting and tax consultants, as well as to cruise and airline companies, insurance companies, commercial partners and other carriers or service companies to whom transmission is necessary in order to comply with the requests of the interested party and for the performance of the obligations arising from any contractual relationship that may be established with the interested party. In any case where the data is be processed by authorised third parties, this will be in full compliance with the principles of lawfulness and fairness and the provisions of the law. The interested party is informed that, in the case of the establishment of a contractual relationship, the data processed by the Data Controller may be transferred abroad for the regular pursuit of the obligations deriving from the contract and in compliance with art. 42 of Legislative Decree no. 196/2003 and subsequent amendments.
RIGHTS OF THE INTERESTED PARTY
The interested party can assert his/her rights as expressed in articles 7, 8, 9 and 10 of Legislative Decree 30 June 2003 n. 196, contacting the Data Controller by sending an email to the address [email protected] More specifically, the interested party has the right to obtain confirmation of the existence of his/her personal data, even if not yet registered, and the communication of the same in an intelligible manner. The interested party has the right to be informed: a) of the source of the personal data; b) of the purposes and methods of processing; c) of the logic applied to the processing, if performed with the aid of electronic instruments; d) of the identification of the data controller, their employees, and the representative designated pursuant to article 5, paragraph 2; e) of the entities, or categories of entities, to whom the personal data may be communicated, or to whom it may be communicated in their capacity as designated representatives of the State, of managers, or employees. The concerned party has the right to obtain a) updating, rectification or, when desired, integration of data; b) cancellation, transformation into anonymous form or blocking of data processed unlawfully, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
c) certification that the operations as per letters a) and b) were made known, including their contents, to those to whom the data were communicated or disclosed, except where this is impossible or involves a commitment of resources clearly disproportionate to the protected right. The interested party has the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him/her, even if it is necessary for collection purposes; b) to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
Except for contractual relationships, against which the data will be stored in compliance with legal obligations, with particular reference to accounting and tax regulations, the data collected shall be retained for the time necessary to interact with the interested party for the release of information and to give feedback to the requests made regarding the services offered by the company, and in any case no later than two years from the date of registration. In the event that the interested party gives consent to the sending of commercial communications and the performance of direct marketing, the data will be retained for no longer than two years, unless the interested party objects.
NATURE OF PROVISION AND CONSENT
The provision of data is optional and is subject to the will of the subject who wants to request information and undertake negotiations with the Data Controller. Failure to provide data will make it impossible to follow up on requests.
Pursuant to and by effect of art. 24, paragraph 1, point b of Legislative Decree 196/2003 the consent to the processing of the aforementioned data is not necessary as they are collected and processed to fulfil requests coming directly from the interested party in a preparatory and functional way to establishing commercial and contractual relationships. Consent is also not required for the processing of data deriving from any contractual relationship that may be established with the interested party, including the methods of processing and the communication of data to third parties necessary to implement the related obligations. Consent to the processing is however necessary for the promotion, commercial communication and direct marketing activities concerning the activities and services offered by the Data Controller and the Commercial Partners. However, failure to issue consent does not affect the main purposes indicated in this statement. Consent to the processing for the purposes related to marketing activities and to the sending of promotional and commercial communications, including the methods of processing and communication to third parties is considered granted by ticking the box "I Give Consent".