INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR USERS

 

This section describes how the processing of personal data pursuant to EU Regulation 679/2016 (GDPR) and Legislative Decree 196/2003 (Privacy Code).

  • Nature of the data processed

    • Data collected automatically / Navigation data

      • The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

    • For the monitoring of accesses and the processing of statistics that allow a complete analysis of the traffic on the Portal, a Google Analytics internet tag is integrated in each web page.

      • This tag allows the collection of a series of user-side information useful for processing statistics: such as, for example, the language, the screen size, the version of flash installed and other user information.

      • Regarding the privacy policies of Google, please refer to what is widely explained in the reference site "Google Analytics Overview". Although the portal integrates a tag that allows the collection of information by Google Analytics, Google itself, to ensure greater freedom of choice for the user, allows the deactivation of the tag in question through the beta software downloadable at " Browser add-on for the deactivation of Google Analytics (BETA) ".

  • Data provided voluntarily by the user

    • The optional, explicit and voluntary sending of e-mails to the e-mail address present on this site, also by completing the online contact request form, involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.

    • Cookies

  • Purpose of the processing​​

    • The navigation data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.

    • The data relating to e-mail communications are used to track user communications

    • The data relating to cookies will be processed for the purposes indicated in more detail in the dedicated information.

  • Legal basis of the processing

    • The navigation data, the technical and analytics cookies and the technical information strictly necessary for the provision of the service will be processed as necessary for the pursuit of StudyTours' legitimate interest in the publication and management of its website.

    • The data relating to communications via contact form or e-mail will be processed on the basis of the legitimate interest of the Data Controller to find the communications received or to adopt pre-contractual measures expressly requested by the interested party (such as sending offers or commercial information).

  • Methods of processing and data retention period

    • Data processing will be carried out with the aid of IT and telematic means.

    • The data will be stored both in electronic archives for the time strictly necessary to achieve the purposes referred to in point 2 and in any case, following the exhaustion of these purposes, up to a maximum of 10 years.

    • Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

  • Obligation or right to provide data

    • Apart from what is specified for the necessary navigation data, the user is free to provide personal data relating to communications via contact form or e-mail. Failure to provide them may make it impossible to obtain a response to what has been requested.

  • Communication and dissemination of personal data

    • The personal data collected from the website are not subject to general dissemination.

    • Such data may be communicated to the subjects in charge of the technical management of the website and of the company information systems, as well as to subjects in charge of backing up and storing the data.

    • The owner can process the data directly, through his own employees authorized to do so, or by making use of external collaborators, who in this case assume the qualification of Data Processors.

    • The updated list of Data Processors is made available by the Data Controller upon request.

  • Rights of interested parties

    • The privacy legislation (articles 12-22 of EU Regulation 679/2016) guarantees the interested parties the right to be informed about the processing of data concerning them and the right to access the data at any time and request its updating, integration and rectification. Where the conditions provided for by the law are met, the interested party can also claim the right to cancel data, limit their processing, their portability, oppose processing, not to be subjected to decisions based solely on automated processing.

    • If the processing of personal data is based on the consent of the interested party, the latter has the right to revoke the consent given.

    • To exercise your rights, as well as for more detailed information about the subjects or categories of subjects to whom the data is communicated or who become aware of it as managers or agents, the interested party may contact the privacy contact of StudyTours at the following address: privacy@studytours.it.

    • If the interested party considers his rights violated, he can protect himself by proposing a complaint to the Guarantor for the protection of personal data.

  • Holder of the treatment

    • Holder of the treatment