Data Controller

Rivatur Srl (hereinafter also the Controller), with its registered office at Viale Rovereto, 101 – 38066 Riva del Garda (TN), as Data Controller, guarantees compliance with personal data protection regulations by providing the following information regarding the processing of data communicated or otherwise collected while browsing this website.

Data processed, purposes and legal bases of processing

Data generated by access to the site

The IT systems and software procedures responsible for the functioning of this site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. These data (such as, for example, domain names, IP addresses, operating system used, type of device and browser used for the connection) are not accompanied by any additional personal information and are used to obtain anonymous statistical information on the use of the site, manage requirements for monitoring how the site is used and ascertain responsibility in the event of hypothetical computer crimes. The legal basis that legitimises the processing of such data is the necessity of making the site’s functionalities usable following the user’s access.

Data voluntarily provided by the user

The personal data provided by the user via forms are collected and processed for the following purposes:

a. to carry out activities relating to relations with the data subject (e.g. responding to information requests, acquiring preliminary information aimed at defining a contractual relationship, preparing commercial offers, etc.);

b. for administrative purposes and to fulfil activities strictly connected and instrumental to the management of relations with the data subjects and to comply with legal obligations such as, for example, accounting or tax requirements, or to comply with requests from the judicial authority;

c. with specific consent, for the periodic sending, via e-mail, of newsletters and advertising material;

d. with specific consent, to send updates on activities;

e. with specific consent, to send promotional communications and invitations to events or special promotions;

f. in the case of sending a curriculum vitae, exclusively for selection purposes.

The legal basis that legitimises the processing is the performance of a contract to which the data subject is party, or the performance of pre-contractual measures adopted at the data subject’s request. In the cases expressly indicated (points c, d, e) the legal basis is the freely given consent of the data subject.

Cookies

For all information, please see the site’s cookie policy.

Nature of the provision of data

Apart from what is specified for browsing data, the provision of data:

– with regard to the purposes referred to in letters a, b and f is optional, but any refusal will make it impossible for the Controller to fulfil the contractual commitments undertaken;
– with regard to the purposes referred to in letters c, d and e is also optional and their use is subject to the provision of explicit consent. Any refusal will make it impossible for the Controller to send newsletters and advertising material or invitations to events and initiatives.

Methods of processing and data retention periods

The data collected will be processed by electronic or otherwise automated, IT and telematic tools, or by manual processing with logics strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee the security of the data in all circumstances.

Persons authorised to process, processors and disclosure of data

The processing of the data collected is carried out by personnel authorised to process data according to specific instructions given in compliance with current legislation. The data collected, where necessary or instrumental for the execution of the indicated purposes, may be processed by third parties appointed as processors, or, as the case may be, communicated to them as autonomous controllers, namely:

– persons, companies, associations or professional firms that provide assistance and consultancy to our Company, for the purposes referred to in the second section of this notice (Data processed, purposes and legal bases of processing);
– companies, entities, associations that provide services connected and instrumental to the execution of the purposes indicated above (e.g. maintenance of IT systems).

The data collected will not be transferred outside the EU.
In any case, personal data will never be disseminated unless explicitly authorised by the data subject.

Data subject’s rights

At any time it is possible to access the data, object to processing or request the deletion, rectification or updating of all personal information collected by the controller, exercising the right to restriction of processing and the right to data portability, by sending an e-mail to info@lorarivadelgarda.com.

The supervisory authority’s contact details are as follows: urp@gdp.it.