Web site privacy policy
This page describes how the website is managed with regard to the processing of personal data of the users who consult it.
The information pursuant to Reg.(EU) 2016/679 and Recommendation No. 2/2001 of the WP29, provides the indications for the collection of personal data online, and, in particular, the manner, timing and nature of the information that the data controller must provide to users when they connect to web pages of its site, regardless of the purpose of the connection.
Data Controller
Following consultation of this site, data relating to identified or identifiable persons may be processed.
The “owner” of their processing is Stratosferica Srl Impresa Sociale, with registered office in Turin (Italy), via Regaldi 7 int. 12/A.
Place of data processing
Processing related to the web services of this site takes place at the Bellissimo srl headquarters of the provider of the site hosting services and is handled only by personnel in charge of processing, even for occasional maintenance operations.
No data deriving from the web service is disclosed.
The personal data provided by users are used only to perform the service or provision requested and are communicated to third parties only where this is necessary for that purpose.
Types of data processed
— Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.
— Data voluntarily provided by the user
The optional, explicit and voluntary sending of data through forms on the site or through electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, which is necessary to reply to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.
Cookies
No personal user data is acquired by the site in this regard.
The use of so-called session cookies (which are not permanently stored on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient exploration of the site.
The so-called session cookies used in this site avoid the use of other IT techniques potentially prejudicial to the confidentiality of users’ browsing and do not allow the acquisition of personal data identifying the user.
Lastly, the site incorporates cookies and other elements (tags, pixels, etc.) of third parties (autonomous and for which the Owner has no responsibility) that also carry out profiling activities and for which please refer to their respective sites:
https://www.google.com/policies/technologies/cookie/
https://www.facebook.com/about/privacy/cookie
Registration
To access the Urban Creative City-break trips, participants are required to register by paying the cost of the package through the PayPal platform.
The data collected by the PayPal platform (“First Name”, “Last Name”, “Email Address”) are used solely by the Data Controller to identify participants.
Please refer to PayPal’s privacy policy:
https://www.paypal.com/en/webapps/mpp/ua/privacy-full
The “Book now” buttons are only intended to facilitate navigation of the site. They do not require the input of personal data and the links they contain are not monitored in any way.
Newsletter
The e-mail contacts used to send the periodic newsletter originate from voluntary subscriptions by the addressee to which a confirmation request is always submitted, as well as from information acquired in the context of the sale of products or services of the data controller or similar for which there is a legitimate interest of the data controller in sending communications and information on its events, products, services and training courses.
It is emphasised that the contacts were not retrieved from public subscriber lists. Should the communications not be of interest to the recipient, it is possible to avoid any further contact by clicking on the appropriate link contained in each message, or by writing to the contact details below exercising your right to unsubscribe from the newsletter.
Sign up for the Urban Creative City-break newsletter at this link:
http://eepurl.com/gbjN_H
Optional supply of data
Apart from that specified for navigation data, the user is free to provide personal data for specific requests on products and/or services.
Failure to provide such data may make it impossible to obtain what has been requested.
For the sake of completeness, it must be remembered that in some cases (not object of the ordinary management of this site) the Authority may request news and information pursuant to art. 157 of Legislative Decree no. 196/2003, for the purpose of controlling the processing of personal data. In these cases, a reply is compulsory under penalty of administrative sanction.
Legal basis. Possible handling of consent to processing
When necessary, except in cases where the assumption of a pre-contractual or contractual obligation or the legitimate interest of both the data controller and third parties applies, and in any case after reading the information notice, the data subject shall be asked to express his/her consent to the processing and communication of his/her data for the purposes and within the limits described, failing which the data controller shall be unable to process the data in order to perform and implement the services requested by the data subject or proposed to him/her.
Treatment modalities
Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected and will be kept, in general, for as long as the purposes of the processing last according to the category of data processed.
Specific security measures are observed to prevent loss of data, unlawful or incorrect use and unauthorised access.
Rights of data subjects
At any time, the data subject may: exercise his/her rights (access, rectification, erasure, limitation, portability, objection, absence of automated decision-making processes) when provided for and where the conditions are met against the data controller, pursuant to Articles 15 to 22 of the GDPR; lodge a complaint with the Garante (www.garanteprivacy.it); and where the processing is based on consent, revoke such consent given, bearing in mind that revocation of consent does not affect the lawfulness of the processing based on consent before revocation.
Contact details
Requests should be addressed to the Data Controller Stratosferica Srl Impresa Sociale via the email address luca@stratosferica.org.