20 Regions of Italy S.n.c. respects customers and suppliers’ privacy and is committed to protecting personal data.
This privacy policy aims to give information on how we collect and process personal data through the use of our site, including any data provided through newsletters and purchase a product.
This privacy policy regards:
- Which personal data do we collect about you and where do we get
- How do we collect your personal data
- How do we use your personal data
- What cookies do we use on our sites
- What security measures do we undertake to protect your personal data
- Personal data collection follows UE and Italian laws.
+ Data controller
Data Controller is 20 Regions of Italy S.n.c., Via fratelli Lumiere 4, 20127 Milan (MI). For any further info regarding Privacy Policy, please contact Data controller:
travel@20regionsofitaly.com
Which personal data do we collect about you and where do we get
This is information about you that you give us by filling in forms on our sites or by corresponding with us by phone, e-mail, app or otherwise. It includes information you provide when you register to use our sites, subscribe to our mailing lists. The information you give us may include your Identity data and your Contact data.
- a. Personal and Contact ( Name, address, email address, phone number, ID data)
- b. Transaction and Financial data ( credit/debit card ar any other payment details)
- c. Information regarding the use of our website and/or app Information through emails, communications, chats, phone calls and social media
+ How do we use your personal data?
Most commonly, we will use personal data in the following circumstances:
- when we need to perform the contract;
- when we need to comply with a legal or regulatory obligation;
- when we need to comply with finance obligations.
The aforementioned data will be
processed both in paper form and through electronic tools. We will only process
your personal data if we have a legal basis.
We may therefore process your personal data for one or more of the following
reasons:
- Respect a legal or contractual obligation;
- The user gives his consent to use personal data;
- It is our interest to operate as a tour operator.
Marketing Purposes (Privacy Code art. 23 and 130 and GDPR art. 7) (email, promo newsletter, products).
If you are already a customer, we may send communications, promos, and products’ news, subject to your explicit dissent (Privacy Code Art.130, par. 4) to be sent to
travel@20regionsofitaly.com
Only
persons with more of 16 year can provide their consent. For children under this
age, consent from parents or legal guardians is required. We will not store
data for longer than is necessary to fulfill the purpose for which it was
processed. To determine the appropriate time, we take into consideration the
quantity, nature and sensitivity of personal data and the purposes.
We must also take into account the time for which we may need to retain
personal data in order to comply with our legal obligations. When we no longer
need your personal information, we will delete it or destroy it securely.
+ Data transfers
Personal data will be known to collaborators of our companies.
Data controller may communicate to thirdies parties, in particular:
- software of personal data management;
- Fiscal and legal assistance services;
- authorities (Police, Carabinieri, consulates, etc.).
+ Data protection rights
Under certain circumstances, users has the following rights:
- Request us if we have their personal information;
- Request access to personal information (commonly known as “data access request”);
- Personal data correction;
- Personal data cancellation;
- Opposition to personal data processing;
- Opposition to personal data profiling;
- Request the limitation of the processing of personal data;
- Request the transfer of personal data in an electronic format;
- Withdrawal of consent. Users may revoke the consent revocation notification and we will no longer process the personal data.
Users may exercise the rights listed above, sending an email to
travel@20regionsofitaly.com
Personal data access does not incur any cost; however, if the request is clearly unfounded or excessive, we may charge a reasonable cost. Alternatively, we may refuse to meet the request.
To help us to confirm the identity, we may need more information user. Users also have the right to file a complaint to Privacy Authority.