This Privacy Policy applies in all cases when accessing the website https://parkforfun.com and deciding to navigate within it.
This policy provides all necessary information to understand how data is collected and processed by PARKFORFUN.COM S.R.L. (hereinafter also referred to as "PARKFORFUN").
INFORMATION PURSUANT TO ARTICLES 12 AND 13 OF REGULATION (EU) 2016/679
This information is provided only for the PARKFORFUN website and not for any third-party websites accessed by the user via links.
PREMISE
This website is owned by PARKFORFUN.COM S.R.L., located at Via Jacopo Salamonio, 3, 30175 – Venice – info@parkforfun.com.
Depending on the services provided through the use of this platform, PARKFORFUN may act as an Autonomous Data Controller, Co-controller, or External Data Processor.
In cases where PARKFORFUN assumes the role of data controller, it will make independent decisions regarding the purposes and methods of data processing, as well as the security procedures to apply to ensure the confidentiality, integrity, and availability of the data, and provides the following information.
APPOINTMENT OF THE DATA PROTECTION OFFICER (RDP or DPO)
PARKFORFUN has appointed a Data Protection Officer (DPO) who can be contacted at the following email address: dpo@parkforfun.com.
PURPOSE OF THE PROCESSING
The data collected by PARKFORFUN may be processed for the following purposes:
To manage the booking services offered on the website https://parkforfun.com;
To manage user/customer requests for information and/or assistance;
To comply with legal obligations related to the contractual relationship with PARKFORFUN;
(If applicable) safeguard one's contractual rights;
To send newsletters and/or communications, including commercial content, through various channels, both electronic and telematic (email, SMS), as well as traditional (postal mail, phone). Please note that, as per Article 130, paragraph 4 of Legislative Decree 196/2003, the data controller may use the data to send advertising emails regarding its own products and services similar to those already purchased, unless the individual expressly refuses such use ("soft spam");
Furthermore, such data may – with the consent of the data subject – be transferred to third parties located in EU countries for the purpose of sending communications, including those with commercial content.
METHODS OF DATA PROCESSING AND STORAGE
Personal data will be processed primarily through electronic and telematic means.
The processing operations will be carried out in a way that ensures the logical, physical security, and confidentiality of your personal data.
The data collected will be stored for the time strictly necessary to achieve the purposes for which they were collected. After this period, the data will be permanently deleted or anonymized irreversibly.
Specifically, the data will be stored as follows:
Data collected for the purposes referred to in points 1 and 3: for a period of 10 years. In particular, billing data will be stored for ten years from the date of invoicing;
Data collected for the purpose referred to in point 2: until the user/customer's request is fulfilled;
Data collected for the purpose referred to in point 4: for the time necessary for the prescription of rights arising from the contractual relationship;
Data of users registered for the newsletter service (purpose referred to in point 5): until the user requests cancellation, and if no such request is made, the registration will remain active for no more than 10 years;
Data collected on purchased services for sending newsletters and/or personalized commercial communications: no more than 24 months, unless an earlier revocation of consent is made (if processing is based on consent), or a request to object (in the case of "soft spam," if processing is based on legitimate interest).
MANDATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA AND LEGAL BASIS (CONDITION OF LAWFULNESS)
In the case of the purposes indicated in points 1 to 4, the provision of data is mandatory, and failure to provide the data will result in the inability to fulfill the request.
Providing data for newsletter subscription and marketing purposes is optional.
The legal basis and/or condition of lawfulness for the processing is as follows:
The contract, for the purposes indicated in points 1 and 2. For the purpose in point 2, the legal basis may also be the consent of the data subject, given by submitting the same request, if the individual has not used the services offered by PARKFORFUN;
Compliance with a legal obligation for the purpose indicated in point 3;
The legitimate interest of the Data Controller for the purpose indicated in point 4;
For the purposes indicated in point 5, it is the consent given by the data subject, without which PARKFORFUN will not be able to send newsletters/commercial/promotional communications. However, if users have provided their contact details in the context of a previous business relationship with PARKFORFUN, the latter may use their data to send communications regarding its services, similar to those already purchased, even without having obtained specific consent, unless the individual refuses such use (so-called "soft spam" - Article 130, paragraph 4 of Legislative Decree 196/2003; Article 6, paragraph 1, letter f) of EU Regulation 2016/679). In this case, the legal basis for the processing is the legitimate interest of the Data Controller (Recital (47) of EU Regulation 2016/679).
For the transfer of data to third parties for sending communications, including for marketing purposes, it is the consent provided by the data subject.
Scope of communication and dissemination of data
The data may be communicated to:
• All subjects to whom access to such data is granted by virtue of legal provisions;
• Our collaborators and employees, within the scope of their duties, are authorized to process the data provided.
• Third parties:
Any banking institutions for the management of collections;
Financial administrations and other public companies or entities for compliance with regulatory obligations;
Any companies/entities involved that use our services for their employees/collaborators;
Any intermediaries used in relation to any aspect of the requested service;
Any operators of affiliate programs offering our services.
Third parties who have been appropriately selected and have the experience, ability, and reliability to ensure full compliance with the applicable provisions on data processing, including data security. These third parties have been appointed as "data processors" and carry out their activities according to the instructions provided by PARKFORFUN.
To date, among these are the companies providing development, delivery, and operational management services for the technological platform used.
SOURCE OF COLLECTION OF PERSONAL DATA AND TYPE OF PERSONAL DATA PROCESSED
The data is collected when accessing this website.
As the Data Controller, PARKFORFUN will process personal data such as identification details (first name, last name), contact information (email, phone number, address), vehicle license plate, and any billing data.
It is also specified that the IT systems and software procedures responsible for the operation of this website acquire, during their normal operation, some personal data – BROWSING DATA – the transmission of which is implicit in the use of Internet communication protocols.
These are information that are not collected to be associated with identified data subjects, but that, by their nature, could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, and other parameters related to the user’s operating system and IT environment. For further details on the processing of such data, please refer to the Cookie Policy: https://www.parkforfun.com/it/informative/cookie.
PROCESSING OD IMAGES RELATED TI LICENSE PLATES
In the course of managing parking areas, PARKFORFUN may process data related to the images of vehicles accessing them. To this end, PARKFORFUN may install a camera at the entrance of the parking area, which will collect personal data related to vehicle license plate images. The image capture will therefore be limited exclusively to the vehicle license plate.
The purpose PARKFORFUN intends to pursue is to:
Verify that the person using the parking area holds a valid access permit to the area;
Prevent unauthorized access to the area.
The legal basis for this data processing is PARKFORFUN's legitimate interest in efficiently conducting a timely verification of the access permit to the parking area. In this regard, PARKFORFUN notes that it has conducted a specific impact assessment (DPIA) and a process of evaluating and balancing legitimate interests (LIA), the documents of which can be consulted upon request by the data subject.
The images will be stored for the time necessary to carry out all verifications on access to the parking area, in relation to the event connected to the service managed by PARKFORFUN, for a maximum of 24 hours.
The data will not be communicated to third parties, except upon request by the judicial authorities and/or law enforcement agencies or other public authorities.
Data related to the images captured by the camera may be accessed by authorized personnel, who will have special access credentials and will have been instructed on the relevant processing operations.
SECURITY MEASURES
PARKFORFUN has adopted appropriate security measures to minimize the risks of destruction or loss – including accidental loss – of data, unauthorized access, or processing that is not permitted or not in compliance with the stated collection purposes.
RIGHTS OF DATA SUBJECTS pursuant to art. 7, 15, 16, 17, 18, 20, 21 and 22 of EU REG. 2016/679
The data subject has, in addition to the right to lodge a complaint with a supervisory authority, the following rights, which they can assert by submitting a specific request to the Data Controller:
Article 7 - Revocation of consent to processing
The data subject also has the right to withdraw their consent to the processing of their personal data.
After this operation, their personal data will be removed from the archives as soon as possible.
Article 15 - Right of access
The data subject has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning them is being processed and, if so, to access their personal data and the information regarding the processing.
Article 16 - Right to rectification
The data subject has the right to obtain from the Data Controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, even by providing a supplementary statement.
Article 17 - Right to erasure (right to be forgotten)
The data subject has the right to obtain from the Data Controller the erasure of personal data concerning them without undue delay, and the Data Controller has the obligation to erase the personal data without undue delay.
Article 18 - Right to restriction of processing
The data subject has the right to obtain from the Data Controller the restriction of processing when one of the following applies:
a) The data subject contests the accuracy of the personal data, for the period necessary for the Data Controller to verify the accuracy of the personal data;
b) The processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of its use;
c) Although the Data Controller no longer needs the personal data for processing purposes, the personal data is required by the data subject for the establishment, exercise, or defense of a legal claim;
d) The data subject has objected to the processing under Article 21, paragraph 1, pending verification as to whether the legitimate grounds of the Data Controller override those of the data subject.
Article 20 - Right to data portability
The data subject has the right to receive the personal data concerning them, which they have provided to a Data Controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another Data Controller without hindrance from the Data Controller to whom they have provided the data.
When exercising their rights regarding data portability under paragraph 1, the data subject has the right to request the direct transmission of personal data from one Data Controller to another, where technically feasible.
Article 21 - Right to object
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them under Article 6, paragraph 1, letters e) or f), including profiling based on those provisions.
Article 22 - Right not to be subject to automated decision-making, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning them or similarly significantly affects them.
If you wish to obtain further information on the processing of your personal data, or exercise the rights listed above, you can contact the Data Protection Officer by writing to: dpo@parkforfun.com.
Before providing or modifying any information, it may be necessary to verify the identity of the data subject by asking some questions. A response will be provided as soon as possible, within a maximum of 30 days from the request.
PARKFORFUN AS JOINT CONTROLLER OR EXTERNAL DATA PROCESSOR
PARKFORFUN as Joint Data Controller
In cases where PARKFORFUN jointly determines the purposes and means of processing with other data controllers, a joint control of processing will be established under Article 26 of EU Regulation 2016/679. This will be governed by specific agreements, which, in compliance with the transparency principle, will be made available on the relevant website.
PARKFORFUN as External Data Processor
For the management of PASS for Limited Traffic Zones (ZTL), PARKFORFUN has been appointed as an external data processor under Article 28 of EU Regulation 2016/679. Therefore, this privacy notice is not provided under Article 12 of EU Regulation 2016/679 (an obligation that falls on the territorial authority as the data controller; for the related notices, refer to the provided links) and is solely aimed at providing further clarification to the relevant users.
It is specified that the data collected for the management of the issuance of ZTL passes will not be used for marketing purposes.
For other reservation services provided to private individuals, PARKFORFUN processes data both as an external data processor for purposes strictly related to the provision of the service and as an independent data controller for marketing-related purposes.
As an External Data Processor, PARKFORFUN processes data on behalf of the data controllers and according to their instructions to:
Manage the reservation services offered on the website https://parkforfun.com;
Manage the issuance of ZTL passes;
Handle user inquiries and/or requests for assistance;
Fulfill legal obligations related to contractual relationships established by PARKFORFUN.
As an External Data Processor for certain Data Controllers, PARKFORFUN will also process special categories of data under Article 9 of EU Regulation 2016/679, acquired in the management of reservation services provided to individuals with disabilities.
This data processing will be carried out in full compliance with privacy regulations and the instructions received from the Data Controller. Among these, the processing of data on behalf of L’Integrazione - Cooperativa Sociale Onlus is highlighted. For their privacy notice, refer to (https://lintegrazione.it/privacy-cookie-policy/).
The storage of data collected as an external data processor will be carried out according to the terms and methods indicated by the respective data controllers in the instructions provided at the time of appointment under Article 28 of EU Regulation 2016/679.
The data will be shared with entities or companies that organize events for which PARKFORFUN manages the services provided via the website www.parkforfun.com.
PARKFORFUN.COM S.R.L.
Via Jacopo Salamonio, 3
30175 – Venice
Eventi
Beaches
Airports
Cities
Train Stations
Harbours
Follow Us