FF

Information for Customers and Suppliers


MARCHE HOLIDAY S.P.A.

Corso Roma 75 – 61041 Acqualagna (PU)

VAT No.  02403260413

 

INFORMATION ON THE PROCESSING OF PERSONAL DATA



Information in compliance with art. 13 pursuant to (EU) Regulation 2016/679 of the European Parliament and of the Council, dated 27th April 2016, Legislative Decree No.101/18 dated 10th August 2018 concerning the protection of natural persons with regard to personal data processing (for the sake of brevity GDPR 2016/679)

 

1. Data controller and data processors - art. 13 par. 1 lett. [a] [b] GDPR 2016/679


The data controller is MARCHE HOLIDAY S.P.A., that can be contacted to exercise the rights recognized by the GDPR and to know the updated list of all data processors.



2. Purpose and legal basis of data processing - art. 13 par. 1 lett. [c] [d] GDPR 2016/679


The personal data provided may be processed only for the sole following purposes:


The legal basis of the aforementioned ways of processing is art. 6.1 [b] GDPR - the processing is necessary for the performance of a contract of which the party concerned is a party, or for the accomplishment of pre-contractual measures taken upon request from the same.

 


3. Types of data processed


General data

Personal data (name, surname, physical address, nationality, province and municipality of residence, telephone, fax, tax number, e-mail address, etc.)

Payment data (IBAN and bank/postal data)

Navigation data (Log, IP address of origin)



Specific Data

Data relating to the state of health


 

4. Data notification and dissemination  - art. 13 par. 1 lett. [e] [f] GDPR 2016/679


The data may be communicated only to the party concerned and to persons explicitly indicated by the party concerned, or to fulfill a legal obligation to which the data controller is subjected, or in the case, it is necessary for the performance of a task of public interest of which the data controller is invested. The data will not be further disclosed except to persons duly authorized by the data controller. The data will not be disclosed.

The data may be transferred to a third country or to an international organization only if the recipient guarantees a level of data protection appropriate to the European one.

In the case of data transfer in the United States, this will only happen with companies in compliance with the Privacy Shield.

 


5. Data processing methods and storage time - art. 13 par. 2 lett. [a] GDPR 2016/679


The processing of personal data consists of collecting, registering, organizing, storing the same data.

The processing of personal data is carried out for the purposes set out above, in accordance with the provisions of Article 5 of the European Regulation on personal data processing, as follows:

in compliance with the rules of lawfulness, legitimacy, confidentiality and security required by current legislation.

The data will be stored for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed in accordance with the provisions of the legal obligations.


 

6. Rights of the party concerned - art. 13 par. 2 lett. [b] [c] [d] GDPR 2016/679


In the cases provided by law, the party concerned has the right to obtain access to personal data and to rectify them. For legitimate reasons, the party concerned has the right to obtain the cancellation of the same data or the limitation of the processing of data concerning him/her or to oppose their processing.

The party concerned has the right to lodge a complaint with the supervisory authority - Guarantor for the protection of personal data.

 

7. Nature of personal data provision and consequences of a refusal to respond - art. 13 par. 2 lett. [e] [f] GDPR 2016/679


The provision of personal data is optional. Any refusal to provide them will make it impossible to perform the professional service.

 

8.Profiling


The personal data of the party concerned may also be processed for profiling purposes (such as analysis of the data transmitted and the Services/Products chosen, to propose advertising messages and/or commercial proposals in line with the choices expressed by the users) only in case the party concerned has provided an explicit and informed consent. The legal basis of such processing is the consent given by the party concerned prior to processing, which can be revoked by the party concerned freely and at any time.