Information on the processing of personal data pursuant to art. 13 of EU Regulation 679/2016
The legal representative of the company that owns and registers the domain civitatours.com is Andrea Amir Ibrahim Bacha.
In accordance with the legislative provisions of the aforementioned Regulation, the processing of the user’s personal data by the owner of the site is based on correctness, lawfulness, transparency and limitation of purpose and storage, minimization and accuracy, integrity and confidentiality.
Processing of personal information shall mean all operations, including collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.
The Data controller is CIVITATOURS SRL with VAT identification number 14699681004, with registered office in Lungo porto Antonio Gramsci, 00053 Civitavecchia (Rm) and operational headquarters in Via Apollodoro 16, 00053 Civitavecchia (Rm).
2-PERSONAL DATA COLLECTED AND PROCESSED
- Browsing data
The computer systems and software procedures used to operate a site acquire, in the normal course of their activities forecasted by the site, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category includes IP addresses and domain names of the PC that browse the web pages of the site, operating system and browser software used by the user, the URL addresses of the requested resources, date and time of such requests and their outcome.
Although such data can potentially identify the user, the data controller ensures the use of such anonymous statistical information on the use of the site only to check its proper functioning, identify any anomalies and ascertain liability in case of computer crimes against the site. These data are deleted immediately after processing.
- Voluntarily data provided by the user
By filling in user registration forms, for the purpose of commenting on published posts or posting as a blogger, we collect the following personal information
- Last Name
- Email address
Through the purchase area we request the following data (functional to payment, service performance and billing)
Date of arrival (to the port of Civitavecchia)
Ship (arriving to the port of Civitavecchia)
Personal data voluntarily provided by users may be disclosed to third parties, such as companies related to CIVITATOURS SRL, only for any needs essential for activities closely related and instrumental to the provision of service or provision requested.
- Data processed in the interaction with social networks
Our web pages may contain social networks plugins (e.g. Facebook, Twitter, Google+, Pinterest, etc.).
When you access it, your internet browser connects directly to the servers of the social network and the plug-in is displayed on the screen thanks to the connection with the browser. If an interested social network user visits our web pages while they are linked to their social account, their personal data may be linked to their social account.
Further information on the collection and use of data by social networks in general, as well as on the rights and methods available to protect the privacy of the person concerned in this context, can be found on the social network pages of the account, on data protection.
If you do not wish to associate the visit to our web pages with your social account, you must log out of the social network.
For example, we list the main social networks in question, their interactive services and personal data collected
The +1 button and social widgets of Google+ (Google)
The +1 button and the social widgets of Google+ are services of interaction with the social network Google+, provided by Google Inc.
Facebook “Like” button and social widgets (Facebook)
The Facebook “Like” button and social widgets are social networking services provided by Facebook Inc.
Personal Data Collected: Cookies and Navigation and Usage Data.
Place of Treatment: USA
“Tweet” button and Twitter social widgets (Twitter)
The “Tweet” button and Twitter’s social widgets are Twitter social networking interaction services provided by Twitter Inc.
Personal Data Collected: Cookies and Navigation and Usage Data.
Place of Treatment: USA
3-PURPOSE OF THE TREATMENT
The user’s personal data will be processed with the prior consent of the user for the following purposes:
3.1. to allow the navigation of the site and the provision of information services of the same.
3.2. to check specific requests addressed to the owner;
3.3. fulfil any obligations under applicable laws, regulations or Community legislation, or meet requests from authorities;
3.4. for statistical purposes, without it being possible to trace the identity of the user (through the use of anonymous statistical software).
4-COMMUNICATION AND DATA SECURITY
CIVITATOURS SRL has adopted all the minimum security measures provided for by Articles 33, 34 and Annex B of the Code on the protection of personal data (Legislative Decree no. 196/2003) for the processing of personal data by electronic means. Such personal data will be processed for the time strictly necessary to achieve the purposes for which they were collected.
Whoever exercises parental authority over them. Once the validity of the aforesaid consent has been verified, it follows that the rights referred to in Article 7 of the Code are attributed to those exercising parental authority.
STORAGE OF PERSONAL DATA
The personal data processed will be kept for the time strictly necessary to achieve their purposes and in any case for the period of time provided for and allowed by Italian law to protect its own interests. (Article 2946 c.c. e ss.).
7- THE RIGHTS OF THE DATA SUBJECT
As an interested party, the user under Article 7 Privacy Code and Art. 15 GDPR has the right to:
obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form;
obtain the indication:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied in case of processing carried out with the aid of electronic instruments;
d) the identification details of the data controller, data processors and the representative designated pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1 of the GDPR;
e) the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative in the State’s territory, data processor or person in charge of the processing;
a) the updating, rectification or, when you are interested, the integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
oppose, in whole or in part:
a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of collection;
b) to the processing of personal data concerning him/her for the purpose of sending advertising materials or direct selling or for the performance of market or commercial communication surveys, through the use of automated calling systems without the intervention of an operator by email and/or through traditional marketing methods by telephone and/or paper mail.
It should be noted that the right of opposition of the person concerned, as set out in point b) above, for direct marketing purposes by means of automated methods extends to the traditional ones and that, in any case, the possibility for the person concerned to exercise the right of opposition even only in part remains unaffected.
Therefore, the interested party may decide to receive only communications by traditional means or only automated communications or neither of the two types of communication.
Where applicable, you also have the rights under Articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limitation of processing, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.
8-CONTACTS AND REVOCATION OF CONSENT
With reference to art. 23 of Legislative Decree 196/2003 and art. 6 of GDPR 679/16, the interested party may revoke the consent at any time.
In the event that information on minors is unintentionally recorded, the Owner will delete it in a timely manner, at the request of users.
Methods of exercising rights:
With reference to art.7 of Legislative Decree no. 196/2003 and art. 15 “right to access”, art. 16 “right of rectification”, art. 17 “right to erasure”, art. 18 “right to limitation of processing”, art. 20 “right to portability”, art.21 “right to object to the automated decision-making process of GDPR 679/2016, the person concerned exercises his rights by writing to the Data Controller at the following address:
Registered office Lungoporto Antonio Gramsci, 00053 Civitavecchia (Rm)
Or by communicating it by email to email@example.com or to the following pec: firstname.lastname@example.org