Privacy Policy

This Privacy Policy applies in all cases in which you access the https://parkforfun.com website  and decide to browse it.

This policy, in fact, provides all the information useful to understand how data is collected and processed by PARKFORFUN.COM S.R.L. (hereinafter also referred to as "PARKFORFUN").

Information pursuant to art. 12 and 13 of EU REG. 2016/679

The information is provided only for the PARKFORFUN website and not for any third-party websites consulted by the user through links.

PREMISE

This site is the property of PARKFORFUN.COM S.R.L., with registered office in Via Jacopo Salamonio, 3, 30175 – Venice - info@parkforfun.com.

PARKFORFUN, depending on the services rendered through the use of this platform, may play the role of Independent Data Controller, Joint Data Controller or External Data Processor.

In cases where PARKFORFUN assumes the role of data controller, it will decide autonomously on the purposes and methods of processing, as well as on the security procedures to be applied to ensure the confidentiality, integrity and availability of the data and provides the following information.

APPOINTMENT OF THE DATA PROTECTION OFFICER (RDP or DPO)

Parkforfun has appointed a Data Protection Officer (DPO) who can be contacted at the following email address: dpo@parkforfun.com.

PURPOSE OF THE PROCESSING

The data acquired by PARKFORFUN may be processed for:

1. manage the booking services offered on the https://parkforfun.com website;
2. manage requests for information and/or assistance from the user/customer;
3. to fulfil legal obligations related to the contractual relationship with PARKFORFUN;
4. (if any) protect your contractual rights;
5. send newsletters and/or communications, including those with commercial content, through various channels, both electronic and telematic (e-mail, SMS), and traditional (paper mail, telephone). We remind you that, as provided for by Article 130, paragraph 4, of Legislative Decree 196/2003, the Data Controller may use the data to send advertising e-mails about its products and services, similar to what has already been purchased, unless you expressly refuse such use ("soft spam");

Furthermore, such data may be transferred to third parties - located in EU countries - for the purpose of sending communications, including those with commercial content.

METHODS OF DATA PROCESSING AND STORAGE

Personal data will be processed mainly electronically.

The processing operations will be carried out in such a way as to guarantee the logical, physical security and confidentiality of your personal data.

The data acquired will be kept for the time strictly necessary to achieve the purposes for which they were collected. At the end of this period, the data will be permanently deleted or in any case irreversibly anonymised.

Specifically, the data will be stored:

• those collected for the purposes referred to in points nos. 1 and 3: for a period of 10 years. In particular, the data related to invoicing will be kept for ten years from the date of invoicing;
• those collected for the purpose referred to in point no. 2, until the user/customer's request is satisfied;
• those collected for the purpose referred to in point no. 4: for the time necessary for the prescription of the rights arising from the contractual relationship;
• the data of the user registered for the newsletter service (purpose indicated in point no. 5): until the request for cancellation of the same and in the event that no request to this effect is received, the registration will remain active for a total period not exceeding 10 years;
• data collected on the services purchased to send newsletters and/or personalized commercial communications: no later than 24 months, unless a request for withdrawal of consent is made before this deadline, if the processing is carried out on the basis of this condition of lawfulness; or a request for objection - in the case of "Soft spam" - in which the processing is carried out on the basis of legitimate interest.

MANDATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA AND LEGAL BASIS (CONDITION OF LAWFULNESS)

In the case of the purposes indicated in points nos. From 1 to 4, the provision of data is mandatory and failure to provide them will make it impossible to execute what has been requested.

The provision of data for subscription to the newsletter and for marketing purposes is optional.

The legal basis and/or condition of lawfulness of the processing is as follows:

• the contract, for the purposes indicated in points 1 and 2;
• the fulfilment of a legal obligation for the purpose indicated in paragraph 3;
• the legitimate interest of the Data Controller for the purposes indicated in no. 4;
• for the purposes indicated in point 5, it is the consent given, in the absence of which PARKFORFUN will not be able to: send newsletters/commercial/promotional communications. On the other hand, with reference to cases in which users have provided their contact details in the context of a previous contractual relationship with PARKFORFUN, the latter may use their data to send communications about its services, similar to what has already been purchased, even without having acquired specific consent for this, unless such use is refused (so-called "soft spam"" - art. 130, paragraph 4, Legislative Decree 196/2003; Article 6, paragraph 1, letter f) of EU Reg. 2016/679). In this case, in fact, the legal basis justifying the processing is the legitimate interest of the Data Controller (Recital (47) of EU Reg. 2016/679).
• For the transfer of data to third parties for the sending of communications, including for marketing purposes, is the consent given by the interested party.

Scope of communication and dissemination of data

The data may be communicated to:

• all subjects to whom the right of access to such data is recognized by virtue of regulatory provisions;
• to our collaborators, employees, within the scope of their duties, authorized to process the data provided.
• To third parties:

• banking institutions for the management of collections;
• tax administrations and other companies or public bodies in compliance with regulatory obligations;
• any companies/firms involved that use our services for their employees/collaborators;
• any intermediaries used in relation to any aspect of the service requested;
• any affiliate program operators who offer our services.

• To suitably selected third parties with experience, skills and reliability, who offer a suitable guarantee of full compliance with the provisions in force on processing, including the data security profile. These third parties have been appointed as "data processors" and carry out their activities according to the instructions given by PARKFORFUN. To date, among these, there are companies for the provision of services for the development, delivery and operational management of the technological platforms used.

SOURCE OF COLLECTION OF PERSONAL DATA AND TYPE OF PERSONAL DATA PROCESSED

The data is collected when you access this website.

As Data Controller, PARKFORFUN will process personal data (name, surname), contact data (e-mail, telephone number, address...), vehicle license plate and any billing data.

It should also be noted that the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data - NAVIGATION DATA - the transmission of which is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, and other parameters relating to the operating system and the user's IT environment. For further information on the processing of such data, please refer to the Cookie policy: https://www.parkforfun.com/it/informative/cookie.

Safety Precautions

PARKFORFUN has adopted appropriate security measures in order to minimise the risks of destruction or loss - even accidental - of data, unauthorised access or processing that is not permitted or does not comply with the purposes of collection indicated.

RIGHTS OF DATA SUBJECTS pursuant to art. 7, 15, 16, 17, 18, 20, 21 and 22 of EU REG. 2016/679

In addition to the right to lodge a complaint with a supervisory authority, the data subject has the rights listed below, which he or she may assert by making a specific request to the Data Controller.

Art. 7 - Revocation of consent to processing

The interested party also has the right to revoke consent to the processing of his or her personal data.

At the end of this operation, your personal data will be removed from the files as soon as possible.

Art. 15 - Right of access

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data and information concerning the processing.

Art. 16 - Right to rectification

The data subject shall have the right to obtain from the controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject shall have the right to obtain the completion of incomplete personal data, including by providing a supplementary statement.

Art. 17 - Right to erasure (right to be forgotten)

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase the personal data without undue delay.

Art. 18 - Right to restriction of processing

The data subject has the right to obtain from the data controller the restriction of processing when one of the following applies:

a) the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;

b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be restricted;

c) although the controller no longer needs the personal data for the purposes of the processing, the personal data are necessary for the data subject to establish, exercise or defend legal claims;

(d) the data subject has objected to the processing pursuant to Article 21(1), pending verification as to whether the legitimate grounds of the controller override those of the data subject.

Art. 20 - Right to data portability

The data subject shall have the right to receive the personal data concerning him or her which he or she has provided to a controller in a structured, commonly used and machine-readable format and shall have the right to transmit those data to another controller without hindrance from the controller to which he or she has provided them.

When exercising his or her rights in relation to data portability pursuant to paragraph 1, the data subject shall have the right to obtain the direct transmission of personal data from one controller to another, where technically feasible.

Art. 21 - Right to object

You shall have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(e) or (f), including profiling on the basis of those provisions.

Art. 22 - Right not to be subjected to automated decision-making, including profiling

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him/her.

*

If you wish to have more information on the processing of your personal data, or to exercise the rights referred to in the previous point, you may contact the Data Protection Officer by writing to: dpo@parkforfun.com.

Before you provide, or amend any information, you may need to verify your identity by answering a few questions. A response will be provided as soon as possible, within a maximum period of 30 days from the request.

PARKFORFUN AS JOINT CONTROLLER OR EXTERNAL DATA PROCESSOR

PARKFORFUN as Joint Data Controller

In cases where PARKFORFUN establishes the purposes and means of processing jointly with other data controllers, a hypothesis of Joint Data Controller pursuant to Article 26 of EU Reg. 2016/679 will be implemented, which will be governed by specific Agreements, which - in compliance with the principle of transparency - will be made available on the relevant website.

*

PARKFORFUN as External Data Processor

For the management of PASSES in Limited Traffic Zones ("ZTLs") PARKFORFUN has been appointed as an external data processor pursuant to art. 28 of EU Reg. 679/2016, so this information is not provided pursuant to art. 12 EU REG. 679/2016 (obligation incumbent on the local authority as Data Controller; to view the relevant information links) and has the sole objective of providing its users with further clarifications.

It should be noted that the data acquired for the management of the issuance of PASSES to the ZTL will not be used for marketing purposes.

For other booking services provided to private parties, PARKFORFUN processes the data both as an external data processor, for purposes strictly related to the provision of the service, and as an independent data controller for marketing purposes.

As an External Data Processor, PARKFORFUN processes data on behalf of the data controllers and on the instructions of the latter to:

• manage the booking services offered on the https://parkforfun.com website;
• manage the ZTL pass issuance service;
• manage requests for information and/or assistance from the user;
• to fulfil legal obligations related to the contractual relationships put in place by PARKFORFUN.

As an external Data Processor of some Data Controllers, Parkforfun will also process special data pursuant to Article 9 of EU REG. 2016/679, acquired during the management of booking services provided to people with disabilities. This data processing will be carried out in full compliance with the privacy legislation and the instructions received from the Data Controller. Among these, it is worth mentioning the data processing on behalf of L'Integrazione- Cooperativa sociale Onlus, for which see the information available (https://lintegrazione.it/privacy-cookie-policy/).

The storage of the data collected as an external data processor will take place according to the terms and methods indicated by the respective data controllers in the instructions referred to in the appointment pursuant to Article 28 of EU REG. 679/2016.

The data will be shared with entities or companies that organize the events for which Parkforfun manages the services provided through the www.parkforfun.com website .

PARKFORFUN.COM S.R.L.

Via Jacopo Salamonio, 3

30175 – Venice