Privacy Policy

PRIVACY POLICY INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA
In compliance with the obligations deriving from national legislation (Code regarding the protection of personal data coordinated and updated, most recently, with the changes made by Law 27 December 2019, n.160, by Legislative Decree 14 June 2019, n.53, by DM 15 March 2019 and Legislative Decree 10 August 2018, n.101) and European (General Regulation for the protection of personal data 2016/679), we wish to inform you that the personal data you have already provided and acquired and that you will be provided in the future as an “interested party” they will be processed in compliance with the aforementioned legislation and the confidentiality obligations to which Happy Tuscany Tours di Massai Fabrizi is bound.

Data Controller and Data Protection Officer
The Data Controller and Data Protection Officer is:

Happy Tuscany Tours di Massai Fabrizio
Via delle Burella, 4 – 50122, Florence
P.IVA 06303410481
E-mail: info@florenceinlimo.com – Phone: (+39) 339.61.99.070

Purpose of the treatment
The personal data you provide are necessary for:

  1. Sending information on the services marketed by the data controller
  2. Sending commercial offers of services distributed by the data controller
  3. Contractual or pre-contractual administrative data management

They are collected and processed electronically and / or mechanically with the aim of:

    1. Activate and maintain the procedures for the execution of what is requested for the customer;
    2. Create and keep a private customer archive;
    3. Create and keep a public archive of works (which can show: images of the works, the Client’s Happy Tuscany Tours di Massai Fabrizi, the Client’s web address);
    4. Profiling activities for sending personalized communications or to offer products or services that meet the user’s consumption habits

If not provided, they will not allow the fulfillment of what is requested;
They are processed by the Supplier himself or by his appointees for the sole purpose of guaranteeing the performance of the agreed services;
They may be communicated, in order to ensure the execution of the contract, to third parties, but they will not be sold or exchanged.

Legal basis of the processing
Happy Tuscany Tours di Massai Fabrizi processes your personal data lawfully, where the treatment:
it is necessary for the execution of the mandate, of a contract of which you are a party or for the execution of pre-contractual measures adopted upon request;
it is necessary to fulfill a legal obligation incumbent on the Data Controller
is based on the express consent for sending a newsletter, profiling activities for sending personalized communications or to offer products or services that meet the user’s consumption habits

Methods of treatment and conservation
The processing will be carried out in an automated and / or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679 regarding security measures, by persons specifically appointed and in compliance with the provisions of art. 29 GDPR 2016/679. The existence of an automated decision-making process is not envisaged, including the fully automated profiling referred to in art. 22 paragraphs 1 and 4 of EU Regulation 2016/679.
We point out that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, subject to your free and explicit consent expressed at the bottom of this information, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed, and in any case no later than terms established by tax laws, labor and social security regulations and by the relevant civil code and for a further ten years.

Communication and dissemination scope
We also inform you that the data collected will never be disclosed and will not be communicated without your explicit consent, except for the necessary communications that may involve the transfer of data to public bodies, to consultants expressly appointed and appointed by the Data Controller or to other subjects for the ” fulfillment of contractual and legal obligations.
Personal data may be disclosed to third parties such as:

    • Facebook e Instagram (Meta Platforms, Inc.)
    • WhatsApp Web e WhatsApp Business (WhatsApp, LLC)
    • Google LLC – (tra cui: Google Analytics, Google Drive, Google Maps, YouTube, Android, Google Search, Google Ads, Google My Business, Google Calendar, Google Foto, Google Image Search, Google Chrome, Gmail, Google Traduttore, ReCaptcha, Chrome OS, ecc.) Per quanto attiene il servizio di Google Fonts si precisa che il presente sito garantisce il suo utilizzo in locale, scaricando i font dalla libreria di Google Fonts nel server del sito, così da evitare la lettura e raccolta dei suoi dati personali da parte di Google.
    • 123formbuilder (123 Formbuilder S.r.l)
    • Agenzie delle entrate
    • Aruba Business s.r.l.

In this case, the use by third parties will take place in full compliance with the principle of correctness and the provisions of the law. As regards your images (photos or audio-video recordings), they can be processed on the Google Image Search site or other search engines.

Incorrect or no communication
The data controller announces that any failure to communicate, or incorrect communication, of one of the mandatory information, has as emergent consequences the impossibility of the same to guarantee the adequacy of the treatment itself to the contractual agreements for which it is performed. With regard to personal data relating to the execution of the contract of which you are a party or relating to the fulfillment of a regulatory obligation (for example the obligations related to the keeping of accounting and tax records), the failure to communicate personal data prevents the completion of the contractual relationship itself.

Transfer of personal data
Your data will not be transferred either to member states of the European Union or to third countries not belonging to the European Union.
Or if in your case they are transferred outside the Union you will have to write:
Happy Tuscany Tours di Massai Fabrizi may transfer your personal data to third parties located in countries outside the European Union or the European Economic Area.
In this circumstance, these third parties will be appointed as Data Processors pursuant to and for the purposes of article 28 of the GDPR and the transfer of your personal data to these subjects, limited to the performance of specific processing activities, will be regulated in compliance to the provisions of Chapter V of the GDPR. All necessary precautions will therefore be taken in order to guarantee adequate protection of your personal data by basing this transfer: (a) on the adequacy decisions of the recipient third countries expressed by the European Commission; (b) on adequate guarantees expressed by the third party recipient pursuant to Article 46 of the GDPR; (c) on the adoption of binding corporate rules, so-called corporate binding rules. Users can request information regarding these guarantees by sending a request to info@florenceinlimo.com
Following the ruling of the Court of Justice of the European Union of 16 July 2020 in case C311 / 18, with reference to third countries that are not recipients of one of the adequacy decisions by the European Commission, Happy Tuscany Tours di Massai Fabrizi carries out assessments specifications regarding the additional guarantees to be adopted, in order to prevent interference by local public authorities that could compromise the level of essential equivalence of protection of the data transferred there, compared to the level enjoyed under European law.

Special categories of personal data
Pursuant to articles 9 and 10 of EU Regulation no. 2016/679, you could give the data controller data that can be qualified as “particular categories of personal data”, that is, data that reveal “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person “. These categories of data may be processed only with your free and explicit consent, expressed in writing at the bottom of this information.

Existence of an automated decision-making process, including profiling
The data controller does not adopt any automated decision-making process, including profiling, referred to in Article 22, paragraphs 1 and 4, of EU Regulation no. 679/2016.

Redirect to external sites
The website can use the so-called social plug-in. Social plug-ins are special tools that allow you to incorporate the functions of the social network directly into the website (eg the “like” function of Facebook).
All social plug-ins on the site are marked with the respective logo owned by the social network platform (eg Facebook, Google, Twitter, Linkedin, Instagram, WhatsApp).
When you visit a page of our site and interact with the plug-in (eg by clicking the “Like” button) or decide to leave a comment, the corresponding information is transmitted from the browser directly to the social network platform and stored therefrom.
For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as for the methods by which to exercise their rights, please consult the privacy policy adopted by the individual social network.

Cookie policy
This website uses technical cookies to ensure the proper functioning of the procedures and improve the experience of using online applications. Technical cookies that do not require consent. Instead, your consent is required for the so-called cookies. profiling, for which you can choose to modify or revoke the consent given in whole or in part. For complete information on the use of cookies and how to manage them, please cliccare qui

Rights of the interested party referred to in Articles 15, 16, 17 18, 20, 21 and 22 of the REG. EU 2016/679
We inform you that as an interested party, in addition to the right to lodge a complaint with a supervisory authority, you also have the rights listed below, which you can assert by making a specific written request to the Data Controllers.
Art. 15 – Right of access
The interested party has the right to obtain from the data controllers confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and information regarding the processing.
Art. 16 – Right of rectification
The interested party has the right to obtain from the data controllers the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Art. 17 – Right to cancellation (right to be forgotten)
The interested party has the right to obtain from the data controllers the cancellation of personal data concerning him without undue delay and the data controllers are obliged to cancel the personal data without undue delay.
Art. 18 – Right to limit the processing
The data subject has the right to obtain from the data controllers the limitation of the processing when one of the following hypotheses occurs: a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controllers to verify the accuracy of such personal data; b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited; c) although the data controllers no longer need it for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court; d) the interested party opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
Art. 20 – Right to data portability The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments by the data controller to whom he provided them. In exercising their rights regarding data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 – Right to object
The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.
Art. 22 – Right not to be subjected to automated decision-making, including profiling
The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way. To exercise the rights provided for in articles 15 and following of Regulation 2016/679 must write to info@florenceinlimo.com for the attention of the Data Controller of personal data.

You can exercise your rights with a written request sent to Happy Tuscany Tours di Massai Fabrizi to the postal address of the registered office or to the email address info@florenceinlimo.com

Right to lodge a complaint (Article 13.2.d Regulation 679/2016 / EU)
The interested party is informed that he has the right to lodge a complaint with a supervisory authority (in particular the Authority
Italian Data Protection Authority www.garanteprivacy.it).

Changes to the information
The possible entry into force of new sector regulations, as well as the constant examination and updating of services to the user, could lead to the need to change the methods and terms described in this Notice. It is therefore possible that this document may undergo changes over time. We therefore invite you to periodically consult this page. We will publish any changes to this Notice on this page and, if the changes are relevant, we will notify you with a more visible notification.

The undersigned having been informed:
– the identity of the data controller
– the identity of the Data Protection Officer
– of the measure, modalities with which the treatment takes place
– the purposes of the processing for which the personal data are intended

◻ I express my consent ◻ I DO NOT express my consent

pursuant to and for the purposes of art. 7 and ss. of Regulation (EU) 2016/679 to the processing of personal data in the manner and within the limits set out in the attached information including those considered as special categories of data.