Treatment of customer's personal data
Enjoylive Travel srl is commited to protect partners and clients privacy according to art. 13 Regulation UE 679/2016-GDPR (Regulation from now on).
This policy explains what information about you we will collect, how we will use it, the conditions under which we may disclose it to others, and how you can control, change, delete it.
To learn more visit the website www.youronlinechoices.com
IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER:
ENJOYLIVE TRAVEL S.R.L., with offices in Via XI Febbraio, 42 - 61122 Pesaro (PU) - VAT 02537740413 is the data controller. To exercise all your rights concerning personal data treatment you can contact the data controller sending an e-mail at info@enjoylive.travel
PURPOSES OF THE TREATMENT:
Your personal data will be processed for the following purposes:
-
Fullfilment of pre-contractual and contractual obligations related to the provision of the requested services. (By way of example, non-exhaustive: booking and management of the chosen tourist service such as: ticket for sport and music events, hotel reservations. Guided tour, thematic events, etc…);
-
Fullfilment of obligations required by law, national and EU regulation, current administrative directive (for example fiscal obligations) to which the Data Controller is obliged to respond.
-
Detection, exercise or defence of the right or interest in a court of law (including credit recovery) or anytime the Courts are acting in their judicial capacity.
-
Marketing Purposes: provide a service of constant information about offers and activity about the Data Controller company via e-mail newsletter (promotional material or product and marketing comunications).
In case of further or different purposes in the use of your personal data, not mentioned above, the Controller must inform you in advance of the different purposes to obtaine the required costumer’s consent
LAWFUL BASIS OF PROCESSING
The processing of your personal data regarding the purpose a) is based on the execution of the contract you are part of.
The processing of your personal data regarding the purpose b) is based on the fullfilment of a legal obligation affecting the Controller.
The processing of your personal data regarding the purpose lettera c) is based on the legitimate interest of the Controller (legal defence of its own right)
The processing of your personal data regarding the purpose d) is based on the free consent of the costumer.
DATA OBJECT OF TREATMENT:
The Personal Data object of the treatment might be:
• Identification data (such as first name, last name, home address, date and place of birth, tax code, phone, e-mail, bank and payment references or other personal identification);
PERSONAL DATA RECIPIENTS CATEGORY
The mentioned personal data may be communicated to:
- Natural persons authorized by the Data Controller - ex art. 29 of the Regulation and art. 2-quaterdecies under D'Decree 196/2003 and subsequent amendments and additions (e.g.: employed saff and comparable, collaborators, etc.);
- External subjects, formally appointed Data Processor on its behalf by the Controller, who shall process personal information on behalf of the Controller and of which you can request a list.
- Subjects, institution, authorities to whom the comunication of your personal data is mandatory under legal provision and orders from authorities.
Therefore, data, in digital and paper form, may be comunicated to the following recipients category:
- Company’s accountant and tax advisor;
- Consultants, companies, associations or consulting firms providing the Data Controller with assistance or consultancy services in the areas of administration, accounting and legal;
- Companies providing the Data Controller with provision of services and activities related
- Credit Institution banks and insurance institution;
- Public bodies;
- Development and maintenance of Informatic systems Companies
METHODS OF DATA TREATMENT:
The Treatment of your personal Data will undergo principles of fairness, legitimacy, transparency provided for in Regulation, in automatic or manual/on paper format
The data processing will be carried out by internal staff explicitly authorized and in charge pursuant to Article. 29 of the Regulation and by external subjects, formally appointed Data Processor, ex art. 28 of the regulation, who shall process personal information on behalf of the Controller and of which you can request a list.
IMPLICATIONS IN THE EVENT OF REFUSAL TO PROVIDE DATA:
Provision of Data for the purposes referred to in points a), b), c) is mandatory. The failure, partial or inaccurate, a/o refusal to provide personal data will make it impossible for the Controller to to fulfil the contract, to comply with its legal obligations. And to pursue the legitimate interest (as defence before the courts of its own right).
Provision of Data for the purposes referred to in point d) is voluntary and in the event of refusal to provide data, it will make it impossible to process them for the purpose described. In any case, as Data Subject has the right to withdraw his/her consent anytime, without affecting the lawfulness of processing based on consent before its withdrawal.
DATA RETENTION PERIOD
Processed Data for the purposes referred to in points a), b), c) will be kept for in a comprehensive way for the entire period of the execution of the contract; The data will be stored, subsequently, over a period of ten years in compliance with legal obligations. The possible continued storage of such data might be disposed in order to assert or defend their rights in every potential instance, especially in courts.
Processed Data for the purposes referred to in points d) will be kept until the revocation of consent and in any case not longer than three years from the initial collection date.
DATA SUBJECTS’ RIGHTS
Being a Data subject you can exercise any of the rights displayed in artt. 15 (right of access), 16 (right to rectification), 17 (right to erasure “right to be forgotten"), 18 (right to restriction of processing), 19 (notification obligation regarding rectification or erasure of personal data or restriction of processing), 20 (right to data portability), 21 (right to object) of the Regulation. In details you may request to the Data the document entitled “Procedure for data subjects to exercise their rights”.
Moreover, being a Data subject you have the right to lodge a complaint with a supervisory authority, based on art 77 of the Regulation, whenever the above written rights were not acknowledged.
In order to exercise the above mentioned rights, please send your request via e-mail to the Data Controller at the e-mail address info@enjoylive.travel
TRANSFERS OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS
National boundaries delimit the processing data environment and there is no intention to transfer them to a third country or to an international organization
AUTOMATED PROCESSING OF PERSONAL DATA AND PROFILING
No automated processing of personal data are used (profiling included).
PRIVACY POLICY CHANGES AND UPDATES
We keep our Privacy Policy under regular review. If we change our Privacy Policy we will post the changes on this page, and place notices on other pages of the website, so that you may be aware of the information we collect and how we use it at all times.
This Privacy Policy was last updated in January 2020.
