Information on the processing of personal data, pursuant to art. 13 of Legislative Decree no.196 / 2003 2003 and of Regulation (EU) 2016/679 (GDPR). This information is provided by S.I.T. S. r.l. (now also the “Company”) and its subsidiaries as owners of the processing of personal data. The information refers to the overall processing carried out online on the institutional site and therefore also in relation to the data entered through the registration procedures on the site itself.
Data Controller and Data Processor
The Data Controller of your personal data is S.I.T .. S. r.l., VAT number 05070830756, with registered office in Corte dei Romiti 6, 73100 Lecce.
Nature of the data processed
We process personal, fiscal and economic data that are necessary for the conduct of relationships with customers and / or potential customers. Generally we do not process any data that can be classified as sensitive (or “particular” as defined by article 9 of the GDPR) or of a judicial nature pursuant to art. 4, paragraph 1, of Legislative Decree no. 196/2003 and article 10 of the GDPR. Should it be necessary to process data of this type, the Company, with the prior consent of the interested parties, will ensure that the obligations and procedures provided for in Legislative Decree no. 196/2003 and in the GDPR.
Purpose of processing
The data of our customers and / or potential customers are processed to send information newsletters and to carry out the requested services, in relation to contractual requirements and the consequent fulfillment of legal and tax obligations, as well as to allow effective management. financial, commercial and administrative relations. The data will be processed for the entire duration of the relationship and also subsequently, for the fulfillment of legal obligations and for administrative and commercial purposes.
Methods of processing
The processing of data takes place through the use of tools and procedures suitable for ensuring its security and confidentiality and can be carried out both on paper and with the aid of electronic tools.
Obligation or right to provide data and consequences of any refusal
As regards the data we are obliged to know, in order to fulfill the obligations established by laws, regulations and community legislation, or by provisions issued by Authorities legitimated for this by law and by supervisory and control bodies, failure to provide them by the member will make it impossible to establish or continue the relationship, to the extent that such data are necessary for the execution of the same. As for the data that we are not obliged to know, their failure to obtain will be evaluated by us from time to time, and will determine the resulting decisions related to the importance for us of the data requested and not provided by you.
Communication and dissemination
The data we collect from our users is not “disclosed” by us, with this term meaning the disclosure of it to indeterminate subjects in any way, including by making them available or consulting. The personal data of the interested party may instead be “communicated” by us, with this term meaning the disclosure of it to one or more specific subjects, in the following terms: to subjects appointed within our structure to process the data; business partners of the Company (i.e. service providers, property owners, etc.) for the purpose of executing contracts; to subjects who can access the data by virtue of legal provisions, or community legislation, within the limits established by law; to subjects who need to access data for purposes auxiliary to the existing relationship, within the limits strictly necessary to carry out the auxiliary tasks entrusted to them (eg credit institutions and freight forwarders); to our consultants, within the limits necessary to carry out their assignment with us, subject to our letter of appointment which imposes the duty of confidentiality and security in the processing of data.
Rights of the interested parties
Pursuant to art. 7 of Legislative Decree no. 196/2003 and articles 15-22 of the GDPR, the interested party may exercise the following rights towards us:
the interested party’s right of access (pursuant to Article 15 of the GDPR);
right of rectification (pursuant to Article 16 of the GDPR);
right to be forgotten (pursuant to Article 17 of the GDPR); right to limitation of processing (pursuant to Article 18 of the GDPR); right to request communication from the data controller on the corrections or deletions of their personal data transmitted to the recipients (pursuant to Article 19 of the GDPR);
right to data portability (pursuant to Article 20 of the GDPR); right to object (pursuant to Article 21 of the GDPR); right not to be subjected to a decision based on automated processing (pursuant to Article 22 of the GDPR).
Exercise of rights
For the exercise of the rights in point 7, the User may send a written request directly to the Data Controller, identified in the company S.I.T .. S. r.l., VAT number 05070830756, with registered office in Corte dei Romiti 6, 73100 Lecce. To exercise these rights, you can contact the Privacy Delegate appointed for this purpose in the person of Mr. Francesco Corvaglia, who can be found at the email address: francesco.corvaglia@salentoinfotour.com.