PRIVACY NOTICE

In compliance with the obligations deriving from national legislation (Legislative Decree 30 June 2003 n. 196, Code regarding the protection of personal data) and European Community legislation (European Regulation for the protection of personal data n.679/2016, GDPR) and subsequent amendments, this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe the rights of users.

This privacy policy applies exclusively to the online activities of this site and is valid for the visitors/users of the site. It does not apply to information collected through channels other than this website. The purpose of the privacy notice is to provide maximum transparency regarding the information the site collects and how it uses it.

Legal basis for processing
This site processes data based on consent. By using or consulting this site, visitors and users explicitly approve this privacy notice and consent to the processing of their personal data in relation to the methods and purposes described below, including any dissemination to third parties if necessary for the provision of a service.
The provision of data and therefore consent to the collection and processing of data is optional, the User can deny consent, and can revoke at any time a consent already provided (via the Contact link at the bottom of the page). However, denying consent may make it impossible to provide certain services and the browsing experience on the site may be compromised.
From May 25, 2018 (date of entry into force of the GDPR), this site will process some of the data based on the legitimate interests of the data controller.

Data collected and purposes
Like all websites, this site also makes use of log files in which information collected in an automated manner during user visits is stored. The information collected may be the following:
– internet protocol (IP) address;
– type of browser and parameters of the device used to connect to the site;
– name of the internet service provider (ISP);
– date and time of visit;
– web page of origin of the visitor (referral) and exit;
– possibly the number of clicks.

The aforementioned information is processed in an automated form and collected exclusively in aggregate form in order to verify the correct functioning of the site, and for security reasons (from May 25, 2018, this information will be processed based on the legitimate interests of the owner).
For security purposes (spam filters, firewalls, virus detection), the data recorded automatically may also include personal data such as the IP address, which could be used, in accordance with the laws in force, to block attempts to damage the site itself or to cause damage to other users, or in any case harmful or criminal activities. Such data is never used for user identification or profiling, but only for the purpose of protecting the site and its users (from May 25, 2018, this information will be processed based on the legitimate interests of the owner).

If the site allows the insertion of comments, or in the case of specific services requested by the user, the site automatically detects and records some identification data of the user, including the email address. Such data is voluntarily provided by the user at the time of requesting the service. By entering a comment or other information, the user expressly accepts the privacy notice, and in particular consents that the contents entered may be freely disseminated to third parties.
The data received will be used exclusively for the provision of the requested service and only for the time necessary to provide the service.
The information that site users deem to make public through the services and tools made available to them is provided by the user knowingly and voluntarily, exempting this site from any responsibility regarding any violations of the law. It is the user’s responsibility to verify that they have permission to enter personal data of third parties or content protected by national and international standards.
The data collected by the site during its operation is used exclusively for the purposes indicated above and stored for the time strictly necessary to carry out the specified activities. In any case, the data collected by the site will never be provided to third parties, for any reason, unless it is a legitimate request by the judicial authority and only in the cases provided by law. The data used for security purposes (blocking attempts to damage the site) are kept for 7 days.

Place of processing
The data collected by the site is processed at the headquarters of the Data Controller, and at the web Hosting datacenter. The web hosting (Serverplan s.r.l. – via Giacomo Leopardi 22 – 03043 – Cassino -FR – IT), which is responsible for data processing, processing the data on behalf of the owner, is located in the European Economic Area and acts in accordance with European standards.

Cookies
As is customary on all websites, this site also uses cookies, small text files that allow information on visitor preferences to be stored, to improve the site’s functionality, to simplify navigation by automating procedures (e.g., Login, site language), and for site usage analysis.
Session cookies are essential to distinguish between connected users and are useful to avoid that a requested functionality can be provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, that is, until the browser is closed. No consent is required for them.
The functionality cookies used by the site are strictly necessary for the use of the site, in particular, they are linked to an express request for functionality by the user (such as Login), for which no consent is required.

By using the site, the visitor expressly consents to the use of cookies.
Cookie disabling

Cookies are linked to the browser used and CAN BE DISABLED DIRECTLY FROM THE BROWSER, thus refusing/revoking consent to the use of cookies. It should be noted that disabling cookies may prevent the correct use of some functions of the site itself.

Instructions for disabling cookies can be found on the following web pages: Mozilla Firefox – Microsoft Internet Explorer – Microsoft Edge – Google Chrome – Opera – Apple Safari

Third-party cookies
This site also acts as an intermediary for third-party cookies, used to provide additional services and features to visitors and to improve the use of the site itself, such as social buttons or videos. This site has no control over third-party cookies, entirely managed by third parties. Consequently, the information on the use of these cookies and their purposes, as well as the methods for their possible disabling, are provided directly by the third parties on the pages indicated below.
In particular, this site uses cookies from the following third parties:

– Google Analytics: a Google analysis tool that, through the use of cookies (performance cookies), collects anonymous navigation data (IP truncated to the last octet) and exclusively aggregated for the purpose of examining the use of the site by users, compiling reports on site activities and providing other information, including the number of visitors and pages visited. Google may also transfer this information to third parties where required by law or where such third parties process the information on Google’s behalf. Google will not associate the IP address with any other data held by Google. The data transmitted to Google is stored on Google’s servers in the United States.
According to a specific agreement with Google, which is designated as the data processor, it undertakes to process the data according to the requests of the Owner (see at the bottom of the notice), imparted through the software settings. According to these settings, advertising and data sharing options are disabled.

Further information on Google Analytics cookies can be found on the page Google Analytics Cookie Usage on Websites.

The user can selectively disable the collection of data by Google Analytics by installing the appropriate component provided by Google (opt-out) on their browser.

– Youtube: a platform owned by Google, for video sharing, which uses cookies to collect information about users and browsing devices. The videos on the site do not convey cookies upon page access, as the “enhanced privacy (no cookie)” option has been set, whereby YouTube does not store information about visitors unless they voluntarily play the video. cookie: test_cookie .doubleclick.net is not a permanent cookie, but is used to check if the user’s browser supports cookies.
For more information on the use of data and their processing by Google, it is recommended to view the information on the specific page provided by Google, and the page on How Google uses data when you use partner sites or apps.

Social Network Plugins
This site also incorporates plugins and/or buttons for social networks, to allow easy sharing of content on your favorite social networks. These plugins are programmed not to set any cookies when accessing the page, to safeguard users’ privacy. Cookies are eventually set, if so provided by social networks, only when the user makes actual and voluntary use of the plugin. Please note that if the user navigates while logged into the social network, they have already consented to the use of cookies conveyed through this site at the time of registration on the social network.
The collection and use of information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer.
– Facebook – (cookie policy link)
– Twitter – (cookie policy link)
– LinkedIn – (cookie policy link)
– Google+ – (cookie policy link)

Data transfer to non-EU countries
This site may share some of the data collected with services located outside the European Union area. In particular with Google, Facebook, and Microsoft (LinkedIn) through social plugins and the Google
Analytics service. The transfer is authorized based on specific decisions of the European Union and the Data Protection Authority, in particular decision 1250/2016, for which no further consent is required. The aforementioned companies guarantee their adherence to the Privacy Shield.

Security measures
This site processes user data lawfully and correctly, adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of data. Processing is carried out using IT and/or telematic tools, with organizational methods and with logics strictly related to the purposes indicated. In addition to the owner, in some cases, categories of persons involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.

User rights
Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the User can, according to the methods and within the limits provided by the current legislation, exercise the following rights:
– request confirmation of the existence of personal data concerning them (right of access);
– know its origin;
– receive intelligible communication;
– have information about the logic, methods, and purposes of processing;
– request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the purposes for which they were collected;
– in cases of processing based on consent, receive at the sole cost of any support, their data provided to the owner, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
– the right to lodge a complaint with the Supervisory Authority;
– and, more generally, exercise all the rights recognized by the current legal provisions.
Requests should be addressed to the Data Controller.

In the event that the data is processed based on legitimate interests, the rights of the data subjects are in any case guaranteed (except for the right to portability which is not provided
by the regulations), in particular the right to object to processing which can be exercised by sending a request to the data controller.

Data Controller
Tourist Association PRO ACQUASANTA TERME – via Salaria, 43/A
63095 – Acquasanta Terme – AP