Privacy Policy

Privacy Policy

This report is delivered pursuant to art. 13 of the European Regulation 2016/679 ("Regulation"), which establishes rules concerning the protection of individuals with regard to the processing of personal data, as well as rules concerning the free movement of such data.

This report only concerns the website www.girolibero.it (the "Website") and does not cover other websites, which might be available via any links on the Website.

  1. Data processed
    Personal and identification data

    Personal data means any information concerning a natural person, identified or identifiable also indirectly by reference to any other information. In particular, the personal data, which may be collected through the Website, are the following: name, surname, date of birth, address, e-mail address, telephone number. Sensitive data (i.e. those concerning religious beliefs, union membership, sexual preferences and other information listed in Article 9 of the Regulation) are not processed through the Website, hence, we kindly ask all users to not include them while sending a contact via the Website, or in other forms of interaction provided by the Website. Should it be necessary to process data of this kind, we will request prior consent from the data subject /user.

    #bucketlistpics 2020 Contest

    Participating in the contest is free, open to everybody with no age limit, and the contest’s aim is describing a holiday thanks to its images, whether a personal one or a tour purchased through Girolibero.

    The winner of each category (Girolibero, “On my own”) will earn an 8-day “bike&barge” tour for 2 people. The destination is a surprise and will be communicated to the winners after the contest’s expiry date (January 6th, 2021).

    Each participant is responsible for his/her own pictures sent to take part in the contest and confirms to be the only author of these images, which are original and do not prejudice any third parties’ rights. Should the pictures portray subjects requiring authorization or consent, the participant must have obtained it before participating in the contest.

    Girolibero may exclude from the contest and from publication any pictures not in compliance with the normally recognized rules in terms of public morality, ethics and decency. Therefore, any images considered as offensive, inappropriate or detrimental to human and social rights will not be accepted.

    The pictures’ author is the only owner of the pictures’ rights; he/she agrees to authorize the use of his/her images for events or publications connected to the contest and for Girolibero’s promotional activities (such as brochures, newsletters, advertising banners).

    Each participant is entitled to contact Girolibero, asking us to remove his/her own pictures.


    Web-surfing data

    The computer systems and software procedures used to operate the Website, acquire some kind of personal data whose transmission is implicit in the use of Internet communication protocols during their normal operation. This kind of information is not collected to be associated with identified interested parties, however due to its very nature, it might allow users to be identified by means of processing and association of data held by third parties.

    This category of data includes, for instance, the IP addresses or domain names of the computers used by the users connecting to the Website, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the IT environment of the data subject/user.

    Data provided voluntarily by the data subject / user

    Transmission (always optional and at the discretion of the data subject/user) of e-mails to the e-mail addresses indicated on the Website and/or through other interactions with the Website, entails the acquisition of the sender's address, necessary to respond to requests, as well as of any other personal data entered by the data subject/user. Specific information may be displayed on the pages of the Website with regard to particular services provided by the controller.
     
  2. Purposes of the Processing and its Lawfulness

    The processing of personal data is based on principles of correctness, lawfulness and transparency, on the protection of the privacy and rights of users and in accordance with the corporate privacy policy. The purposes for which personal data collected through the Website are used include:



    Each data subject/user is free to provide personal data in e-mails sent to the e-mail addresses indicated on the Website, or through other interactions with the Website. In the event in which the data required to subscribe to the newsletter or to provide a quotation has not been provided, we will be unable to follow up on the request.
    THE CONSENT ABOVE INDICATED MIGHT BE VALIDLY PROVIDED ONLY BY THOSE WHO HAVE ALREADY REACHED THE AGE OF 16. THOSE WHO HAVE NOT YET REACHED THE AGE OF 16 MUST COLLECT THE CONSENT OR AUTHORIZATION OF THEIR PARENTS, OR OF THE PERSON WHO EXERCISES THE PARENTAL AUTHORITY.
    Finally, for the sake of transparency we point out that the data collected through the Website might be used, in a strictly anonymous and/or aggregated form, to understand the behaviour or the preferences of the users. For example, to identify similar profiles based on browsing preferences.
     
  3. Processing methods
    The processing of personal data is carried out using paper and IT tools in compliance with the provisions on the protection of personal data and, in particular, the appropriate technical and organizational measures pursuant to art. 32.1 of the Regulation, and with the observance of every precautionary measure that guarantees their integrity, confidentiality and availability.
     
  4. Categories of Addressees
    Personal data may be communicated, in strict relation to the purposes indicated above, to the following subjects or categories of subjects:
    a) addressees in relation to which the current legislation imposes the duty of communication, in compliance with the provisions of the tax and accounting legislation;
    b) professionals and third-party companies with which the controller cooperates, should it be necessary for the functioning of the Website.
    With regard to paragraph b), we undertake to rely exclusively on subjects who provide adequate guarantees regarding data protection and to appoint such professionals and third parties as Data Processors pursuant to art. 28 of the Regulation. Upon request, the complete list of the Data Processors will be made available by the controller. Personal data will not be transferred outside the European Union.
     
  5. Retention Period
    Personal data are kept in the archives of the controller and are stored for a period of 10 (ten) years from the last interaction with the data subject/user, in consideration of the limitation period of any claims arising from the contact between the controller and the data subject/user, as set forth by law.
     
  6. Rights recognized to the data subject

    At any time, the data subject/user may assert the rights provided by the articles 15 to 22 of the Regulation against the controller, i.e. the right to request:
    • access to personal data, i.e. the right to be acquainted with his/her personal data held by the controller, the purposes for which they are processed, their origin and other information required by art. 15 of the Regulation;
    • rectification of personal data in case of inaccuracy of the same;
    • erasure of personal data (so-called 'right to be forgotten');
    • restraint of the processing of personal data, or the right to obtain the suspension of the processing of personal data for a period necessary to verify the request for rectification of personal data, or in other cases provided for by art.18 of the Regulation.
    • Furthermore, the data subject/user has the right to:  
    • data portability, i.e. the right to receive personal data in a structured, commonly used and machine-readable format - and to request the direct transfer to another controller;
    • the right to lodge a complaint with the Italian Supervisory Protection Authority or with the Supervisory

    Authority of the place of residence or work, or of the place where the violation occurred, where it considers that the processing of personal data violates the Regulation.
     

  7. Amendments to the Privacy Policy
    The controller reserves the right to amend, update, add or remove sections of this privacy statement, at his discretion and at any time. In order to facilitate examination of any revisions/updates, the statement will specify the update date.
  8. Identity and contact details of the Controller
    The controller is Girolibero S.r.l., having its registered office in Via Conforto da Costozza 7, 36100 Vicenza (VI). Requests for clarification on this Privacy Policy and the exercise of the rights described herein can be referred to the following contacts: tel. 0444 1278.400 - privacy@girolibero.it
     
  9. Contact details of the Data Protection Officer
    The Data Protection Officer (DPO - Data Protection Officer) as required by art. 37 of the Regulation can be contacted at: Via Conforto da Costozza 7, 36100 Vicenza (VI) tel. 0444 1278.400 - privacy@girolibero.it.
    The contact details of DPO, constantly updated, are available on the Website in the appropriate section.

    Data of the update: May 22, 2018