Information Notice regarding the processing of personal data

Why we are giving you this information

Pursuant to Articles 13 and 14 of the EU Regulation No. 2016/679 (herein after “GDPR”), Trentino Marketing S.r.l., in its capacity as Data Controller of your personal data as regards the purpose of requesting information or subscribing to the newsletter on www.visittrentino.info, hereby provides you with the following information regarding the processing of your personal information (herein after “Notice”).

1. Identity and contact data of the Data Controller
   Trentino Marketing S.r.l. (herein after ‘TM’) - Via Romagnosi, n. 11 - 38122 Trento
   Email: privacy@trentinomarketing.org
2. Contact data of the Data Protection Officer
   c/o Data Protection Officer (herein after ‘DPO’)
   Email: dpo@trentinomarketing.org
3. Categories of personal data processed
   Within the scope of the processing purposes indicated in Section 4 below, only the following types of personal data will be processed: first name and surname, e-mail address and country of origin.
4. Purposes and legal basis of processing
   
   4.1. Your personal data will be processed with your consent for the following purposes:
   4.1.1. Transfer of personal data as per para. 3 to the subjects indicated in Provincial Law No. 8 of 2002 under Articles 9 and 11 quater and/or accommodation for the purpose of requesting information on www.visittrentino.info. Such entities will become autonomous Data Controllers of the data.
   The legal basis of processing is Art. 6 letter a) of the GDPR: the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
   Supplying the data is not mandatory, but it is a pre-requisite for accessing the service itself. Therefore, should you not supply your personal data, you will not be able to use the service.
   4.1.2. To allow us to send you our newsletter regarding, for example, events, promotions and in general for tourist marketing activities within the Trentino area and to send you the best holiday proposals.
   The legal basis of processing is Art. 6 letter a) of the GDPR: the data subject has given consent to the processing of his or her personal data for one or more specific purposes. Supplying the data is not mandatory, but it is a pre-requisite for receiving the newsletter. Therefore, should you not give your personal data, you will not receive our newsletter.
   You may withdraw your consent at any time by unsubscribing from the newsletter.
   
   4.2. Your personal data also will be processed for the following purposes for compliance with a legal obligation to which the Data Controller is subject; the legal basis of processing is Art. 6 letter c) of the GDPR.
5. Categories of recipients of personal data
   As regards the purposes indicated in the paragraph 4 above, the personal data you will send us will be made accessible to internal employees authorised to process data within the limits of their duties, to external suppliers duly nominated Data Processors, and to all subjects that have the legal right to receive them or to other subjects for which specific authorisation is achieved in the event of request.
6. Processing methods
   Your personal data shall be processed as indicated in Art. 4, 2) of the GDPR – whether or not by automated means – such as: collection, recording, organization, structuring, updating, storage, adaptation or alteration, retrieval and analysis, consultation, use, disclosure by transmission, alignment, interconnection, restriction, erasure or destruction. In any case, the logical and physical safety and, more in general, the confidentiality, integrity and availability of the personal data processed shall be guaranteed by putting in place all of the necessary and appropriate technical and organizational measures.
7. Disclosure and profiling
   Your personal data shall not be disclosed or used for profiling.
8. Storage and transfer of personal data abroad
   The handling and storage of the personal data occurs in clouds and/or on servers located within the European Union and owned and/or available to the Data Processor and/or to third party enterprises, all duly nominated Data Processors.
9. Period of storage of personal data
   The personal data collected for the purposes indicated in para. 4.1.1 and 4.2 above shall be processed and stored for the time required to accomplish these purposes. At the end of this time period the data will be deleted unless Community or national regulations impose their further storage.
   The personal data collected for the purposes indicated in para.4.1.2 above shall be processed and stored for the time required to accomplish these purposes and anyhow up until they are erased by the data subject.
10. Rights of the data subject
    In compliance with the provisions of articles from 15 to 21 of the GDPR, you are entitled to exercise the rights indicated therein, and in detail:
    • Right of access (Art. 15, GDPR),
    • Right to rectification (Art. 16, GDPR),
    • Right to erasure (Art. 17, GDPR),
    • Right to restriction (Art. 18, GDPR)
    • Right to portability (Art. 20, GDPR)
    • Right to objection (Art. 21, GDPR)
    You may exercise these rights simply by sending your request to TM or to the DPO indicated above.
    Moreover, you have the right to lodge a complaint with the Supervisory Authority (Art. 77, GDPR).