Privacy Policy

WEBSITE INFORMATION PURSUANT TO ARTICLES 13 AND 14 OF EUROPEAN REGULATION 2016/679 (GDPR)

Incoming Tours srls, as the Data Controller of your personal data pursuant to Articles 13 and 14 of European Regulation 2016/679, hereby informs you that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on principles of fairness, lawfulness, and transparency, and will protect your privacy and your rights. The information and personal data provided by you or otherwise acquired while using the site will be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations set forth therein.

DATA SUBJECTS AND RETENTION PERIOD

A) users (browsers) of the website www.incoming-tours.com


Type of data processed

Browsing Data: IP addresses or domain names of computers and other devices used by users who connect to the site; URI (Uniform Resource Identifier) ​​addresses of requested resources and any timestamps; parameters relating to the user's operating system and IT environment; starting and ending pages; Browsing index and identifying behavior while viewing the site's pages.


Personal data provided voluntarily by the user: the optional, explicit, and voluntary sending of emails to the addresses indicated on this site and the completion of forms on the site entails the subsequent acquisition of the sender's personal data (for example, name, surname, email address). Specific summary information is provided on the pages that include the forms.

Purpose of processing: Your data collected during navigation will be processed for the following purposes.

  • carrying out operations strictly connected and instrumental to the management of relationships with users or visitors to the site;

  • collection, storage, and processing of your data for statistical analysis, including anonymous and/or aggregated data; statistical analysis aimed at verifying the quality of the services offered by the site;

  • share with social network managers the interactions carried out and the Usage Data relating to the pages in which cookies that integrate products or software functions are installed

  • improve browsing experience in order to send services and advertising messages in line with the preferences expressed during browsing

The processing of data for the purposes referred to in point 1 is necessary to fulfill your request, and any refusal may limit and/or prevent full use of the features and services on the site. The legal basis for the processing of your data for the purposes referred to in point 1 is the fulfillment of your request, pursuant to Article 6.1.b. of the GDPR; any refusal to provide such data would make it impossible to browse the Site. Providing the data indicated for purposes 2, 3, and 4 is optional based on consent, and any refusal to allow processing will not compromise the features and services on the site. The legal basis for the processing of your data for the purposes referred to in points 2, 3, and 4 is optional, pursuant to Article 6.1.a. Consent is given via the short notice by clicking on the word "ACCEPT ALL" in the short notice. Regarding the optional provision of data, more information regarding the cookies present on the site is provided in the cookie policy document, which is also accessible from the short information notice.

Browsing data is stored for the periods indicated in the cookie policy available on the site.

COOKIES AND OTHER TRACKING SYSTEMS
Your data is also collected using tools and services provided by third parties and stored by them. For more information, please refer to the "cookie policy" document.

Please note that Incoming Tours srls acts merely as an intermediary for the links provided in the cookie policy and cannot assume any responsibility in the event of any changes.

B) Newsletter subscribers:
By completing the form in the "Newsletter" section, your personal data (name, surname, email address) will be used to fulfill your request to receive the newsletter and to subscribe you to the mailing list for the sending of informational messages and commercial and promotional communications relating to the activities and products of Incoming Tours srls via email, software systems managed by third parties, including by entering them into the Data Controller's corporate CRM, in full compliance with the principles of lawfulness and fairness and the provisions of the law.
Providing your personal data is optional; however, refusal will make it impossible for the Data Controller to fulfill your request to subscribe to the newsletter and to inform you of Incoming Tours srls' news. The legal basis for the processing is Art. 6.1.a. of the GDPR. You may object to the processing of your data at any time by using the "UNSUBSCRIBE" link at the bottom of the email or by sending a request to the Data Controller using the contact details provided in this policy.

Your data will be retained until you decide to unsubscribe from the service or object to its processing.

C) Users of the Contact Us section.
By completing the forms available in the "Contact Us" section, your data (name, surname, email address) will be used to respond to your request for information. Providing your data for these purposes is the fulfillment of your request. The legal basis for the processing is Article 6.1.b) of the GDPR.

Your data will be retained for the time necessary to provide the service you requested.

D) Work with us.
By completing the form in the "Work with us" section, your data will be used to manage a potential employment relationship. Providing data for these purposes is optional; however, refusal will prevent us from accepting your CV. Your CV must contain only identifying data, which will be processed strictly within the limits of the obligations, duties, and purposes indicated. Please remember that unless strictly necessary, please do not provide sensitive data pursuant to Article 9 of the GDPR (e.g., health status, racial and/or ethnic origins, trade union membership, religious beliefs). If provided, the Data Controller will have the discretion to decide which data to retain and which to delete. Your data will be retained for the time necessary to provide the service you requested. Your data will be retained for a period not exceeding 2 years.

METHODS OF PERSONAL DATA PROCESSING
Your personal data will be processed manually, electronically and/or telematically, through the use of cookies (as indicated in the cookie policy available on the site), by means of electronic calculators with the use of third-party software and automated contact methods (e.g. automated email campaigns, SMS, automated telephone contact, instant messaging, social networks, etc.), in compliance with the methods set out in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures required.
In order to compare and possibly improve the results of communications, the Data Controller uses systems for sending newsletters and promotional communications with reports. Thanks to the reports, the Data Controller will be able to know, for example: the number of readers, openings, unique "clickers" and clicks; details on the activity of individual users; details of emails sent by date/time/minute; details of emails delivered and not, of those forwarded; the list of those who unsubscribed from the newsletter; who opened an email or A single link clicked; users having trouble viewing the message; link tracking (i.e., the number of clicks on links in the message); click tracking (which links were clicked and by whom). All this data is used to compare, and possibly improve, the results of communications.

USE OF SOCIAL MEDIA PLATFORMS
Incoming Tours srls may also provide links to other social media platforms that lead to servers installed by individuals or organizations over which it has no control. Incoming Tours srls makes no representations or assumes any responsibility for the accuracy or any other aspect of the information available on such sites. A link to a third-party site should not be construed as an endorsement, either by Incoming Tours srls or by the third party, of the products and services of others or of that third party. Incoming Tours srls makes no representations or warranties regarding the use or storage of user data on third-party sites. Users are encouraged to carefully review the privacy policies governing third-party sites linked to our website for a complete understanding of how your personal data may be used.

RECIPIENTS OF PERSONAL DATA AND DISSEMINATION OF DATA
Your data will be processed by appropriately appointed personnel and will be communicated externally to companies acting as independent Data Controllers or Processors:

external parties providing cloud services;
companies providing IT system management services, including server hosting and backup services;
The complete list can be requested by writing to the Data Controller.

Your data will not be disclosed.

TRANSFER OF PERSONAL DATA
Your data may be transferred to countries outside the European Union as indicated in the Cookie Policy of the companies that provide third-party cookie services. For more information, please write to info@incoming-tours.com .

For the purpose of sending corporate communications, your data is stored in countries belonging to the European Union.

MINORS:
The Site is not intended for use by minors, and the Data Controller does not collect data from minors. If the Data Controller becomes aware of the collection of such data (e.g., via the contact form), it will be deleted immediately. The Data Controller will respond to requests for information in accordance with applicable laws. Please note that the holder of parental responsibility is required to provide consent to the collection of the minor's personal data in the event of requests for information.

TRANSFER OF PERSONAL DATA
Your data may be transferred to countries outside the European Union as indicated in the Cookie Policy of the companies that provide third-party cookie services. For more information, please write to info@incoming-tours.com .

For the purpose of sending corporate communications, your data is stored in countries belonging to the European Union.

DATA CONTROLLER
The Data Controller is Incoming Tours srls.

You have the right to obtain from the Data Controller the erasure (right to be forgotten), restriction, updating, rectification, portability, and objection to the processing of your personal data. You can also exercise all the rights provided for in Articles 15 et seq. of European Regulation 2016/679 by writing to info@incoming-tours.com or using the request form in the privacy section of the website. The interested party has the right to lodge a complaint with the Supervisory Authority.

APPLICATION OF THIS POLICY
If you have any questions regarding this Policy, please first contact Incoming Tours srls by sending an email to info@incoming-tours.com or by contacting the Data Controller at the company contact details provided in this document.

CHANGES TO THIS POLICY
Incoming Tours srls reserves the right to update this policy to reflect changes in the law, as well as to take into account suggestions from employees, customers, collaborators, and users. Incoming Tours srls makes changes to this policy, and will promptly update the Privacy Policy on the main privacy page and on the homepage of the website www.incoming-tours.com .

RIGHTS OF THE INTERESTED PARTIES EU
Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Interested Party

The interested party has the right to obtain confirmation as to whether or not personal data concerning him or her exists, even if not yet recorded, and communication of such data in an intelligible form, as well as the right to lodge a complaint with the Supervisory Authority.
The interested party has the right to obtain information on:
the source of the personal data;
the purposes and methods of processing;
the logic applied in the event of processing carried out with the aid of electronic means;
the identification details of the data controller, data processors, and the designated representative pursuant to Article 5, paragraph 2;
the entities or categories of entities to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or personnel authorized to process personal data.
The interested party has the right to obtain:
updating, rectification, or, where interested therein, integration of the data;
erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed;
certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data was communicated or disseminated, except where such disclosure proves impossible or involves a manifestly disproportionate effort compared to the right being protected;
data portability.
The data subject has the right to object, in whole or in part:
for legitimate reasons, to the processing of personal data concerning him or her, even if pertinent to the purpose of collection;
to the processing of personal data concerning him or her for the purposes of sending advertising or direct selling materials or for conducting market research or commercial communications.