PRIVACY POLICY
Dear User, the “Giroinmongolfiera S.r.l.” has a big respect for your privacy.
The data that will be eventually communicated by the site, will be treated by the principles of legality, fairness, transparency, limitation of finalities and of the conservation, minimisation of the data, accuracy, integrity, confidentiality and with all instruments aimed to ensuring safety, in full respect of the Europian Regulation 2016/679 (following for brevity "GDPR").
In accordance with artt. 13 and 14 of GDPR, therefore, we inform you that:
- OWNER OF PERSONAL DATA TREATMENT
The owner of the treatment is the “GIROINMONGOLFIERA S.r.l.” (P. I.V.A.: 03861160046)
with registered office in Carrù (CN), ), Strada Benevagienna n. 5,
C.A.P. 12061 – Italy
Phone contact: 333 84 38 665
E-mail address: amministrazione@giroinmongolfiera.com
P.E.C address: giroinmongolfiera@pec.it
The owner, does not need to have appointed a responsible person for the protection of personal data
- CATEGORIES OF PERSONAL DATA OBJECT OF THE TREATMENT
1) Data given voluntarily by the interested
The voluntary sending of the requested data at the moment of the purchase of a flight ticket or a flight box implies acceptance of the processing of personal data, described therein, following a specific request.
The data strictly necessary, provided and treated by the owner at the moment of the purchase of the service, are:
- identification data (name, surname of the buyer and the passenger, and bodyweight of the passenger);
- contact data ( e-mail address and phone number of the buyer and the interested party);
- Eventual counting data (details of the bank transfer or the credit card of the buyer);
- every other necessary data for the performance of the assignment.
2) Cookies:
The data collected thank to cookies used by this website can be used to access to some parts of the website or to make the experience of the internet browsing more efficient in the future, trying to value the behavior of the users. For more information a specific cookie policy is available.
3) Browsing data
Informatic systems and software procedures, responsible for the operation of this site, acquire, during their normal exercise, some personal data whom transmission is complicated in the use of protocols of communication of internet.
Anyway, we talk about information that isn't collected for being associated with identified data sujects.
This category of data includes IP's addresses or the domain names of computers used by the users that connect with the website, the addresses in URI notation (Uniform Resource Identifier) of the requested resources, the timetable of the request, the method used when submitting the request to a server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server ( succeed, error ecc.) and others parameters related to the operating system and the user's IT environment.
- FINALITIES AND LEGAL BASES OF THE TREATMENT OF PERSONAL DATA
- For the Data given voluntarily by the interested, the legal base in particular,
- - for personal data of the passenger given by the interested buyer, the treatment provides that privacy policy is provided at the first useful meeting between the owner and the person concerned;
- - for the date concerning the personal e-mail address, the user, prior consense, can be added at a mailing list (after the first purchase or after a specific request by a section of the home page of the site) and receive a newsletter to obtein some information, also of commercial and promotional nature, related to different services offered by “Giroinmongolfiera S.r.l.”
- For cookies: is necessary confront the specific cookie policy.
- For the Browsing data, the legal base is formed by the legitimate interest of the owner and the finality is to guarantee and improve the experience of the browsing data. In fact, this data is only used for obtaining anonimous statistical information of the use of the website and to control the correct operation. Therefore, the data can be used for the ascertain responsibility in case of hypothetical computer crime to damage the site.
- SOURCE OF PERSONAL DATA AND THE GATHERING PLACE
The own personal data or of the third party passengers, in possess of the owner, are collected directly from the buyer concerned
The buyer concerned take the responsability of personal data of the third part published or shared by this site and guarantees to have the right of communicate or spread them, freeing the owner from any responsability.
In addition to the telematic procedures, in fact, in case the service isn't purchased directly from the person concerned , at the first meeting useful between this last and the owner , we will proceed with the lecture and the viewing of the paper privacy policy.
- METHODS OF PROCESSING OF PERSONAL DATA
According to the articles 12 e 32, GDPR, personal data provided by the person concerned object of operations of treatment in the respect of the aforementioned legislation and of the confidentiality obligations whom is inspired the activity of the owner.
The treatment can consists in any operation or compex of operations among those listed in the art.. 4, co. 1, point 2, GDPR and it will be able to be carried out directly through third parties from the owner.
Moreover, personal data for the proper management of the contractual relationship and compliance with legal obligations, they could be added in the internal documentation of thev owner.
Personal data will be treated either on paper or any other suitable medium (for example: systems in cloud, storage systems and substitutive conservation, digital replacement storage), in respect of appropriate technical and organisational measures of safety provided by GDPR and with logics strictly related to purposes indicated.
Specific security measures are observed to avoid loosing data, illegal and improper uses and unauthorised access in accordance with the obligation of compliance with minimum security measures.
In order to provide a complete service, the site includes links and other websites, not managed by the owner, who won't be responsible of mistakes, contents, cookies, adds, banners or files that not comply with the current regulatory provisions. To improve the service provided an immediate report of malfunctions is welcome, abuse or suggestions at the regular e-mail address: amministrazione@giroinmongolfiera.com o certificata: giroinmongolfiera@pec.it
- PROVISION OR REFUSAL TO PROVIDE OF PERSONAL DATA
Unless otherwise specificated, all requested data from the site for the purchase of the service are compulsory.
The provision or not of proper personal data or of third party passengers, is, optional, with the consequence that, if the user refuses to communicate them, it will be possible, for the owner, to provide the requested service.
In cases where some data are indicated like optional, the interested parties are free to refrain from communicate them, without this has any consequences with the disponibility of the service or with the execution.
- AUTOMATHISED DECISIONAL PROCESSES AND PROFILING OF PERSONAL DATA
Personal data given by the interested party aren't subject to spread or at any fully automated decision making, including profiling.
- RECIPIENTS OF PERSONAL DATA
Besides the owner, personal data given by the interested party can be communicated, if strictly necessary, to:
- Third parties involved in the organisation of the site and in the completed providing of the requested on line services
(for example: banking and insurance intuitions, in particular "Regiondo", institution used by the owner for the software managements of booking of hot air balloon flights. For more details about how the data are elaborated and used from the same, the relative privacy policy is available on https://pro.regiondo.com/it/);
- public authorities when the communication is predicted by a law obligation
(for example: aeronautical and customs authorities)
- Third parties whom the owner entrusts the performance of specific activities, as tax obligations, consultations in informatic, commercial or legal field, for which the details about the use of personal data is returned to its privacy policy.
- RIGHTS OF THE INTERESTED PARTY
The interested party that provides its own personal data has always right to:
- oppose to data treatment when it occurs on a legal base different from the one explained here;
- access to provided data, ex art. 15, GDPR, and obtain information about the data processed by the owner, abput specific aspects of the treatment, as well as receive a copy of the processed data, upon specific request;
- verify and ask the rectification of provided data, ex art. 16, GDPR, as well as ask the update or correction;
- obtain the limitation of the treatment of the data, the use of conditions set out in art. 18, GDPR; in that case the owner won't process the data for any purpose if not their conservation;
- obtain the deletion or removal of provided data i, ex art. 17, GDPR, upon the occurrence of specific conditions and in the respect of exceptions provided in the 3 paragraph of the same article (c.d. right to be forgotten);
- receive provided data, in structured format, commonly used and readable from an automatic dispositive and, where technically feasible, make them move to an other owner without obstacles i, ex art 20, GDPR (c.d. right to portability of personal data). This disposition is applicable when the data are processed with automated tools and the treatment is based on the consent or the contract of which the interested party is a part or on contractual arrangements related to it;
- Submit a complaint to the guarantor for the protection of personal data(ganteprivacy.it), as the competent data protection supervisory authority.
To carry out those exercises, the interested party can send a communication to the owner by e-mail address: amministrazione@giroinmongolfiera.com, P.EC. address: giroinmongolfiera@pec.it or through a registered letter at the adress of the registered office.
The owner he will endeavour to answer in 30 days from the receiving of the formal request. In any case, the exercise of the rights is subordinated to the verification of the identity of the person concerned that will be consulted by the owner to verify the legetimate request.
- PERIOD OF CONSERVATION
In view of the principle of limitation of the conservation of personal data, in accordance with the article 5, GDPR, the verification of obsolescence of stored data in relation to the purposes for which they are collected, is carried out periodically. in particular,
- The Data given voluntarily by the interested are stored for a period of time not exceeding the achievement of the purposes for which they are processed, which is 3 months from the execution of the service or based on a legitimate interest of the owner, the duration of which can be up to a year.
Moreover, the owner can be obligated to stored the personal data for a longer period in compliance with a legal obbligation, also temporary and urgent , or by order of an authority.
The data could be also stored for for a further period determined by the tax provisions.
At the end of the conservation period the personal data are deleted. With the above deletion, the right of access, deletion, rectification and the right to portability of personal data, in the person concerned, cannot be exercised.
- For the Data collected through cookies,it is necessary to refer to the specific cookie policy.
- The Browsing data can be treated for the strictly necessary time, to obtain statical information of the use of the site or to control the regular operation, also for security purposes or based on legal time limits.
- TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
There is no transfer of personal data provided by the user to a U.E. country or extra U.E.
- FINAL NOTES AND UPDATE MODE
This policy is made only for this site and not for others websites eventually consulted by the user through links contained in it.
Is also advised that the policy can be subject to changes due to an introduction of new legal conditions in this respect. Therefore, the user is invited to control periodically the present page to be always updated about the protection of personal data.
- MORE INFORMATION
More information about treatment of personal data could be requested at any time at the owner of the treatment, using the contact details given above.
Definitions and legal references
Personal data:any information that, directly or indirectly, also in connection with any other information, identify or be identifiedan individual.
Browsing data:any information collected automatically through the website, including: IP addresses or computer domain names used by the user who connects with this website, addresses URI notation, timetable of the request, the method used in forwading the request to the server, file dimensions obtain in response, numerical code indicating the response status from the server (good ending, error, ecc.) the country of origin, browser and operative system characteristics used by the visitor, temporal connotations of the visit (for example: time spent on every page) and related details of the itinerary followed him inside the site, with particular reference at the sequence of the pages consultated, at related parameters of the operative system and IT environment of the user.
User:the individual who uses this website; except where differently specificated, it coincides with the interested person.
The person concerned:the individual to which they refer personal data provided by the site.
Owner of the treatment (or owner):natural or legal person, public authority, the service or an other body that, individually or with others, determines the purposes and the means of processing of personal data and tools adopted, where security measures related to the operation and use of this site are included.
Website (or site):hardware tools or software with which personal data are collected and treated, given by the users.
Service:performance given by the owner with the website, that is the purchase and/or booking of hot air balloon tickets or gift boxes.
Cookies: tracking tools consisted in small portions of the data stored inside the browser of the user.
The present privacy policy is drawn up in the light of European Regulation (UE) 2016/679 in the field of protection of personal data published on the Official Journal of the Europian Union the 4th May 2016, entered into force the 24th May 2016 and directly applied in all UE countries and since the 25th May 2018 ( in Italy, through the d.lgs. n. 101/2018 that has integrated the d.lgs. n. 196/2003, called "Privacy Code").
Date of the last change:16th March 2021