1. Data controller
(General Data Protection Regulation)
The Data Controller is Parco Natura Viva Garda Zoological Park S.r.l (P.IVA01771090238) with registered office in Bussolengo (VR), Figara 40 www.parconaturaviva.it/en
The Data Controller provides the interested party with complete information on the purposes and methods of processing personal data.2. Methods of processing personal data
Personal data (personal data, telephone number, email, etc.) are processed on IT media with the aid of computerized or automated tools in compliance with security measures in order to guarantee the integrity, security and confidentiality of the data themselves.3. Purpose of the treatment
The Data Controller will process your personal data for the following purposes:
- performance of contractual and pre-contractual activities
- fulfillment of fiscal or legal obligations
- carrying out investigations on the degree of customer satisfaction and on the quality of the services offered;
- direct and indirect marketing and market research;
- sending newsletters for information and promotional purposes;
- carrying out survey activities
Personal data will be processed for purposes strictly connected and instrumental to the fulfillment of the obligations inherent in the aforementioned points. The consent expressed by you is the legal basis of the treatment pursuant to art. 13, paragraph 1), letter c) of the GDPR.4. Nature of the provision
The provision of your data for the purposes referred to in points 1) and 2) of Article 3 does not require any consent as it is preparatory and essential to any contractual or pre-contractual relationship.
The provision of your data for the purposes referred to in points 3), 4), 5) and 6) of art. 3 is optional and requires your express consent. Failure to consent will imply the consequences described below: the inability to carry out surveys on the degree of customer satisfaction and the quality of the services offered, to carry out direct and indirect marketing and market research, to send newsletters for information and promotional purposes and to carry out survey activities.
If you have given express consent to authorize the Data Controller to pursue the purposes referred to in points 3), 4), 5) and 6) of art. 3, will in any case remain free to revoke it, by sending a communication to the email address email@example.com
. Following the receipt of the opt-out, the Data Controller will promptly remove and delete the data from the databases used for the processing for the purposes indicated above and to inform, for the same cancellation purposes, any third parties to whom the data have been communicated. The simple receipt of the cancellation request will automatically count as confirmation of cancellation.5. Recipients or category of recipients of personal data
The personal data you provide, for the purposes described above, may be brought to the attention of employees and / or collaborators of the Data Controller and communicated to the following subjects:
a) Natura Service S.r.l, Fondazione Arca Onlus, Natura Sviluppo S.r.l, joint data controllers;
b) companies possibly appointed by the Data Controller to carry out the obligations assumed by the latter for the implementation of the treatments envisaged by the purposes referred to in points 1) and 2) of Article 3;
c) all subjects (including public authorities) who have the right of access to data by virtue of regulatory or administrative measures;
d) companies that provide essential support services for processing and have direct or indirect access to your data;
e) companies appointed by the Data Controller for the processing of data provided for the purposes referred to in points 3), 4), 5) and 6) of Article 3;
All collaborators or suppliers used by the Data Controller for the processing of your personal data have been properly and legally authorized and responsible for the methods and purposes of the treatments attributed to them and will act in compliance with and in accordance with this information.
The personal data you provide, for the purposes described above, may be transferred to commercial partners for the processing of data provided by the purposes referred to in points 3), 4), 5) and 6) of Article 3.
The personal data you provide and subsequently processed in relation to the management of the service are not subject to disclosure.
For the subjects indicated in points b), d) and e) only the category of recipients is indicated, as the subject of frequent updates and revisions. Therefore, the interested parties can request the updated list of recipients by contacting the Data Controller through the channels indicated in art. 1 of this information.6. Data retention times
Your personal data will be kept for the times defined by the reference legislation, which are specified below pursuant to art. 13, paragraph 2, letter a) GDPR:
7. Exercise of rights by the interested party
- for the purposes indicated in points 1), 2) of Article 3 for the times prescribed by current laws and in any case for a period of not less than 10(ten) years
- for the purposes indicated in points 3), 4), 5) and 6) of art. 3 for 2 (two) years from the moment of the consent to the treatment
Pursuant to articles 13, paragraph 2, letters b) and d), 15, 18, 19 and 21 GDPR, the interested party is informed that he has the right to:
a) Access to personal data: obtain confirmation whether or not processing of data concerning you is in progress and, in this case, access to the following information: the purposes, the categories of data, the recipients, the retention period, the right to lodge a complaint with a supervisory authority, the right request the rectification or cancellation or limitation of the treatment or opposition to the treatment itself as well as the existence of an automated decision-making process;
b) Request for rectification or cancellation of the same or limitation of the treatments that concern you; "limitation" means the marking of data stored with the aim of limiting its processing in the future;
c) Opposition to processing: to oppose for reasons connected with your particular situation to the processing of data for the execution of a task in the public interest or for the pursuit of a legitimate interest of the Data Controller;
d) Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, to receive the data concerning you in a structured format, commonly used and readable by an automatic device; in particular, the data will be provided to you by the Data Controller in .xml format;
e) Revocation of consent to the processing for marketing purposes, both direct and indirect, market research and profiling; the exercise of this right does not in any way affect the lawfulness of the processing carried out before the revocation;
f) Propose a complaint pursuant to art. 77 GDPR to the competent supervisory authority based on your usual residence, workplace or place of violation of your rights; for Italy, the Guarantor for the protection of personal data is competent, which can be contacted through the contact data reported on the website http://www.garanteprivacy.it
The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in art. 1 of this information.
Requests relating to the exercise of your rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and in the number of requests can this term be extended by a further 2 (two) months.
It informs itself specifically and separately, as required by art. 21 GDPR that if personal data are processed for marketing purposes, the interested party has the right to object at any time and that if the interested party opposes the processing, personal data can no longer be processed for these purposes.
The exercise of rights is not subject to any form constraint and is free of charge. The email address for exercising the rights is firstname.lastname@example.org
Consent of the interested party
The undersigned, having read the information provided pursuant to EU Reg. 2016/679, declares to have understood the purposes and methods of the processing described therein.