1. WHY THIS INFORMATION
In accordance with EU Regulation 2016/679, this page describes the methods for processing the personal data of users who consult the Shop Sostravel website, which can be accessed electronically at the address: https://shop.sostravel.com.
This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the site but which refer to resources outside the Sostravel domain.
2. CONTACT DETAILS
Personal Data Controller Sostravel via Marsala, 34/A – 21013 Gallarate (VA) Tel +3903311587117 – Fax +39033111582452, mail: sostravel@pec.net
The person responsible for the protection of personal data is Virginia G. Basiricò via Marsala, 34/A – 21013 Gallarate (VA) Tel +3903311587117 – Fax +39033111582452, email: sostravel@pec.net
3. TYPE OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
Data communicated by the user
The optional, explicit and voluntary sending of messages to the company’s contact addresses, private messages sent by users to the company’s profiles/pages on social media (where this is possible), as well as the completion and submission of contact forms on the site, entail the acquisition of the sender’s contact data necessary to respond, as well as all the personal data included in the communications.
When the user decides to purchase one or more of the services available, the data required to purchase and pay for the service are also requested.
Finally, as regards the business area, users interested in becoming a partner of Sostravel are asked for the data necessary to send the request for the creation of a business account.
Redirecting to external sites
The website may use social plug-ins. Social plug-ins are special tools that make it possible to incorporate social network functions directly into the website (e.g. the Facebook “like” function). All social plug-ins on the website are marked with the respective logo of the social network platform (e.g. Facebook, Google, Twitter, Linkedin). When you visit a page on our website and interact with the plug-in (e.g. by clicking the “Like” button) or leave a comment, the corresponding information is transmitted from your browser directly to the social networking platform and stored there.
For information on the purposes, type and manner of collection, processing, use and storage of personal data by the social network platform, as well as on how to exercise your rights, please consult the privacy policy adopted by the individual social network.
4. PURPOSE AND LEGAL BASIS OF THE PROCESSING
Personal data are processed without the express consent of the data subject pursuant to art. 6 point b of EU Reg. no. 2016/679 (“Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the request of the data subject”) and art.6 point f of EU Reg. no. 2016/679 (“Processing is necessary for the purposes of pursuing the legitimate interests of the Data Controller or of Third Parties”), for the following purposes:
a) to allow users to contact Sostravel and obtain information about the services offered
b) to allow users to create an account and purchase the services offered
c) to allow the sending of a request for the creation of business accounts by potential partners
d) obtain statistical information on the use of the services in aggregate and anonymous form (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.)
e) to check the correct functioning of the services offered.
On the other hand, the data are processed exclusively with the express consent of the user pursuant to art. 1 point a of EU Reg. no. 2016/679 for the following purposes:
f) to subscribe to the newsletter and receive promotional communications for marketing purposes
g) to carry out profiling activities, i.e. the analysis and processing of information relating to the user, his/her preferences, habits, consumption choices and/or browsing experiences, also through the use of technologies such as cookies (for further information please refer to the paragraph “Cookie Policy” of this Policy).
5. MANDATORY OR OPTIONAL NATURE OF PROCESSING
The provision of data is necessary for the purposes indicated in point 4, letters a-e of this information notice. Any refusal to reply, at the time of collecting the information, may make it objectively impossible for the Controller to fulfil the purposes indicated in the aforementioned point. With regard to the purposes set forth in point 4 letters f-g, the information is provided only with the prior consent of the data subject and failure to provide such information does not affect in any way the navigation of the site and the use of the services offered.
6. RECIPIENTS
Personal data will not be “disclosed”, i.e. they will not be made known to unspecified persons; on the other hand, such data will be “communicated”, i.e. they will be made known to one or more specific persons, as explained below. In particular, they may be made accessible to
- to employees and collaborators of the Data Controller, in their capacity as appointees and/or system administrators;
- to third party companies such as: companies entrusted with the customer care service and management of social channels, IT companies for maintenance of the IT system, in their capacity as external data processors.
- to third party companies that manage the services offered and purchasable from the https://shop.sostravel.com/it/ website.
7. DATA RETENTION
We inform you that the data provided by you will be processed for the time necessary to fulfil the purposes set out in point 4 and further stored only for the period required to comply with legal obligations, provided that it is not necessary to store it further to defend or enforce a right or to comply with any further legal obligations or orders of the Authorities.
The data processed with the user’s consent will be processed for a maximum of two years and in any case until the user revokes his consent.
With regard to the retention period of cookies installed on the sostravel website, please refer to the “Cookie Policy” paragraph of this information notice.
8. SOURCES
The data subject to Processing may be acquired through the website.
9. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
One of our Responsible Provider (the Contact Center) is based in a non-EU country (Moldova). The transfer of data to that country is based on adequate safeguards established in accordance with Article 46 of EU Reg. 2016/679. The data subject may view the standard contractual clauses governing the guarantees established with suppliers and partners by contacting the references indicated in point 2 of the Notice.
10. RIGHTS OF THE INTERESTED PARTY
The interested parties have the right to obtain from Sostravel, in the cases provided for, access to their personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 and following of the Regulation). Requests may be sent to the addresses indicated in point 2.
Interested parties who believe that the processing of personal data relating to them carried out through this site is in breach of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to take legal action (art. 79 of the Regulation).