Information pursuant to Art. 13 of Legislative Decree 196/03 (personal data protection):
The processing of personal data, the provision of which is necessary for the conclusion and execution of the contract, is carried out in full compliance with Legislative Decree 196/2003 in paper and digital form. The data will be communicated only to the suppliers of the services included in the tourist package. The tourist may at any time exercise the rights pursuant to Article 7 of Legislative Decree 196/03 by contacting S-Cape Countryside Travels Srl (info@sloways.eu), the data controller.
This Website collects some Personal Data from its Users.
Sloways, brand of S-Cape Countryside Travels srl - Borgo Allegri 16R - Firenze - 50122 (FI) P.IVA : 05227330486
Data Controller's email address: info@sloways.
Among the Personal Data collected by this Website, independently or through third parties, there are: email; name; surname; Tracking Tools; Usage data; telephone number; nation; Zip code; city; physical address; number of Users; session statistics; Date of birth; answers to questions; click; keypress events; events related to motion sensors; mouse movements; position relative to sliding; touch events; IP address; various types of Data; device information; operating systems; browser information; time zone; tongue; state; metropolitan area; Regional; User ID; number of sessions; duration of the session; page scrolling interactions; browsing history; search history; pageview; interaction events; page events; custom events; Order ID; Data communicated during the use of the service; User content; content of the message or email; profile picture; date of the message; time the message was sent; sender of the message; your subscriptions; sex; Interests; sons; family income; marital status; education; homeownership status; Referring URL; geographical position; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); screen.
Full details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the collection of the Data itself.
Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Website. Unless otherwise specified, all Data requested by this Website is mandatory. If you refuse to provide them, it may be impossible for this Website to provide the Service. In cases where this Website indicates certain Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or its operation. Users who have doubts about which Data are mandatory are encouraged to contact the Data Controller.
Any use of Cookies - or other tracking tools - by this Website or by the owners of third-party services used by this Website has the purpose of providing the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy. You are responsible for any Personal Data of third parties obtained, posted or shared through this Website.
The Data Controller adopts the appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and/or telematic tools, with organizational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other parties involved in the organization of this Website (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller, may have access to the Data. The updated list of Data Processors can always be requested from the Data Controller.
The Data are processed at the Data Controller's operational offices and in any other place where the parties involved in the processing are located. For more information, please contact the Data Controller. Your Personal Data may be transferred to a country other than the country in which you are located. To obtain further information on the place of processing, the User may refer to the section relating to the details on the processing of Personal Data.
Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be kept for a longer period due to any legal obligations or on the basis of the Users' consent.
The User's Data are collected to allow the Data Controller to provide the Service, comply with legal obligations, respond to requests or executive actions, protect its rights and interests (or those of Users or third parties), identify any malicious or fraudulent activities, as well as for the following purposes: Contacting You, Tag Management, Statistics, Displaying Content from External Platforms, Managing Contacts and Sending Messages, Business Affiliation, Managing Landing Pages and Invitation Pages, Heat Mapping and Session Recording, Spam and Bot Protection, Advertising, Remarketing and Behavioral Targeting, Transfer of Data Outside the EU, Interaction with Live Chat Platforms, and Interaction with Data Collection Platforms and Other Third Parties.
To obtain detailed information on the purposes of the processing and the Personal Data processed for each purpose, the User may refer to the section "Details on the processing of Personal Data".
Personal Data are collected for the following purposes and using the following services:
This type of service allows this Website to display advertisements for products or services offered by third parties. Ads can be displayed both in the form of advertising links and in the form of banners in various graphic forms. Clicks on the icon or banner published on this Website are tracked by the third-party services listed below and are shared with this Website. To find out what data is collected, please refer to the privacy policies of each service.
TradeTracker (TradeTracker.com)
TradeTracker is a trading affiliate service provided by TradeTracker.com. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Consult TradeTracker's privacy policy – Privacy Policy.
This type of service allows you to manage a database of email contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services may also allow the collection of data relating to the date and time of viewing the messages by the User, as well as the User's interaction with them, such as information on clicks on the links inserted in the messages.
MailerLite (UAB "Mailerlite")
MailerLite is an address management and email sending service provided by UAB "Mailerlite". Personal Data processed: surname; Date of birth; Usare data; email; physical address; nation; name; telephone number.
Place of processing: Ireland – Privacy Policy.
This type of service allows you to build and manage landing pages and invitation pages, i.e. presentation pages of a product or service, which can allow you to enter your contact information, such as your email address. The management of these pages involves the processing, by these services, of the Personal Data collected through these pages, including those of the Usage Data.
MailerLite Landing Pages (UAB "Mailerlite")
MailerLite Landing Pages is a landing page management service provided by UAB "Mailerlite" that allows this Website to collect email addresses of Users interested in its service. Personal Data processed: Usage Data; email; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
This type of service allows you to interact with the live chat platforms managed by third parties, directly from the pages of this Website, in order to be able to contact and be contacted by the support service of this Website. In the event that a service for interaction with live chat platforms is installed, it is possible that, even if Users do not use the service, it may collect Usage Data relating to the pages on which it is installed. In addition, live chat conversations may be recorded.
WhatsApp Business Chat widget (Meta Platforms Ireland Limited)
The WhatsApp Business Chat widget is an interaction service with the WhatsApp live chat platform, provided by Meta Platforms Ireland Limited. Personal Data processed: surname; content of the message or email; User content; date of the message; Data communicated during the use of the service; profile picture; sender of the message; name; telephone number; time the message was sent; answers to questions.
Place of processing: Ireland – Privacy Policy.
This type of service analyzes the traffic of this Website, potentially containing Personal Data of Users, in order to filter it from unwanted traffic parts, messages and content recognized as SPAM or protect it from malicious bot activity.
Google reCAPTCHA (Google Ireland Limited)
Google reCAPTCHA is a SPAM protection service provided by Google Ireland Limited. Use of the reCAPTCHA system is subject to Google's privacy policy and terms of use.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: clicks; Usage data; keypress events; events related to motion sensors; touch events; mouse movements; position relative to sliding; answers to questions; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
This type of service allows this Website and its partners to communicate, optimize and serve advertisements based on the past use of this Website by the User. This is facilitated by tracking Usage Data and using Trackers to collect information that is then transferred to partners who manage remarketing and behavioral targeting activities. Some services offer a remarketing option based on email lists. Services of this type usually allow Users to opt-out of such tracking. Users can learn how to opt-out of interest-based advertising by visiting the relevant opt-out section of this document.
Remarketing Google Ads (Google Ireland Limited)
Remarketing Google Ads is a remarketing and behavioral targeting service provided by Google Ireland Limited that connects the activity of this Website with the Google Ads advertising network and the DoubleClick Cookie.
For an understanding of Google's use of Data, please see Google's Partner Policy.
Users may opt out of using Google Trackers for ad personalization by visiting Google's Ads Settings. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
Remarketing with Google Analytics (Google Ireland Limited)
Remarketing with Google Analytics is a remarketing and behavioral targeting service provided by Google Ireland Limited that links the tracking activity carried out by Google Analytics and its Trackers with the Google Ads advertising network and the Doubleclick Cookie.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
Meta Custom Audiences (Meta Platforms Ireland Limited)
Meta Custom Audiences is a remarketing and behavioural targeting service provided by Meta Platforms Ireland Limited that links the activity of this Website with Meta's advertising network.
Users may opt out of using Meta's Tracking Tools for ad personalization by visiting this opt-out page. Personal Data processed: email; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt out.
Google Signals (Google Ireland Limited)
This Website uses Google Signals, a Google Analytics feature that associates information about the views collected by this Website with Google information from the accounts of Google users who have consented to this association for ad personalization. This Google information may include your location, search history, YouTube history, and Data from Google's partner sites, and is used to provide aggregated and anonymous information about your cross-cutting behavior.
If a User falls under the association described above, he/she will be able to access and/or delete such Data through the MyActivity function provided by Google. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
Google Ad Manager Audience Extension (Google Ireland Limited)
Google Ad Manager Audience Extension is a remarketing and behavioral targeting service provided by Google Ireland Limited that tracks visitors to this Website and allows selected advertising partners to show them personalized ads across the web.
For an understanding of Google's use of data, please see Google's partner policies. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
Facebook Remarketing (Meta Platforms Ireland Limited)
Facebook Remarketing is a remarketing and behavioral targeting service provided by Meta Platforms Ireland Limited that connects the activity of this Website with the Meta advertising network. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt out.
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and to interact with them. These services are often referred to as widgets, which are small elements that are placed on a website or application. They provide specific information or perform a particular function and often allow interaction with the user. This type of service may still collect data on web traffic related to the pages where the service is installed, even when users are not using it.
Google Fonts (Google Ireland Limited)
Google Fonts is a font style display service operated by Google Ireland Limited that allows this Website to integrate such content within its pages. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
Video Vimeo (Vimeo, LLC)
Vimeo is a video content display service operated by Vimeo, LLC that allows this Website to integrate such content within its pages. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Consult Vimeo's privacy policy – Privacy Policy.
Widget Google Maps (Google Ireland Limited)
Google Maps is a map display service operated by Google Ireland Limited that allows this Website to integrate such content within its pages. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
Mailing list o newsletter (questo Sito Web)
By registering for the mailing list or newsletter, the User's email address is automatically included in a list of contacts to whom email messages containing information, including commercial and promotional information, relating to this Website may be sent. Your email address may also be added to this list as a result of registering on this Website or after you have made a purchase. Personal Data processed: ZIP code; city; surname; Usage data; email; physical address; nation; name; telephone number; Tracking Tools.
Contact form (this Website)
By filling in the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated in the header of the form. Personal Data processed: surname; Usage data; email; nation; name; telephone number.
Contact by telephone (this Website)
Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Website, as well as to fulfill support requests. Personal Data processed: telephone number.
This type of service is functional to the centralized management of the tags or scripts used on this Website. The use of these services involves the flow of User Data through them and, where applicable, its retention.
Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google LLC. Personal Data processed: Cookies; Usage data.
Place of processing: Ireland – Privacy Policy.
Heat mapping services are used to identify the areas of this Website with which Users interact most frequently, in order to detect which of them attract the most interest. These services allow you to monitor and analyze traffic data and are used to track your behavior. Some of these services may record sessions and make them available for later viewing.
Hotjar Heat Maps and Recordings (Hotjar Ltd.)
Hotjar is a heat mapping and session recording service provided by Hotjar Ltd. Hotjar respects generic "Do Not Track" headers. This means that the browser can tell the script not to collect any data from the User. This is a setting that is available in all major browsers. More information about opting out of Hotjar can be found here. Personal Data processed: Usage Data; Tracking Tools; various types of Data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy – Opt Out.
This type of service allows Users to interact with data collection platforms or other services directly from the pages of this Website for the purpose of saving and reusing data. In the event that one of these services is installed, it is possible that, even if Users do not use the service, it may collect Usage Data relating to the pages on which it is installed.
Widget MailerLite (UAB "Mailerlite")
The MailerLite widget allows you to interact with the MailerLite email address management and message sending service provided by UAB "Mailerlite". Personal Data processed: surname; Usage data; email; nation; name; telephone number; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
This type of service allows the use of the User's Data for commercial communication purposes. These communications are displayed on this Website in the form of banners and other forms of advertising, including in relation to the User's interests. This does not mean that all Personal Data is used for this purpose. Data and terms of use are set out below. Some of the services listed below may use Trackers to identify you, or use behavioral retargeting, i.e. display advertisements tailored to your interests and behavior, or measure ad performance. For more information on this, we suggest you check the privacy policies of the respective services. Services of this type usually allow Users to opt-out of such tracking. Users can learn how to opt-out of interest-based advertising by visiting the relevant opt-out section of this document.
Google Ad Manager (Google Ireland Limited)
Google Ad Manager is an advertising service provided by Google Ireland Limited with which the Owner may conduct advertising campaigns jointly with external advertising networks with which the Owner, unless otherwise specified herein, has no direct relationship. This service uses the "DoubleClick" cookie, which tracks the use of this website and the behavior of the User in relation to the advertisements, products and services offered.
The User can decide at any time to disable all DoubleClick cookies by going to: Ads Settings.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
Meta Ads Conversion Tracking (Meta Pixel) (Meta Platforms Ireland Limited)
Meta Ads Conversion Tracking (Meta Pixel) is a statistics service provided by Meta Platforms Ireland Limited that links data from the Meta ad network with actions taken within this Website. The Meta pixel tracks conversions that can be attributed to Facebook, Instagram and Audience Network ads. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt out.
Google Ads Audience Expansion (Google Ireland Limited)
Google Ads Audience Expansion is an advertising service provided by Google Ireland Limited that allows the Owner to expand the available target audience by identifying Users who have similar interests, demographics or online behavior to an existing audience selected by the Owner. Users may opt-out of Google's use of personalized advertising by visiting Google's Ads Settings.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: clicks; Date of birth; Usage data; education; sons; homeownership status; Interests; pageview; family income; sex; marital status.
Place of processing: Ireland – Privacy Policy.
Google Ads Customer Match (Google Ireland Limited)
Google Ads Customer Match is an advertising service provided by Google Ireland Limited that allows the Data that Users have shared with the Owner to be associated with existing Google accounts, in order to target them or similar Users with personalized ads. Users may opt-out of Google's use of personalized advertising by visiting Google's Ads Settings.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: surname; email; nation; name; telephone number.
Place of processing: Ireland – Privacy Policy.
Google Ads Optimized Targeting (Google Ireland Limited)
Google Ads Optimized Targeting is an advertising service provided by Google Ireland Limited that allows the Owner to optimize the available target audience by identifying new Users who have similar interests, demographics or online behavior to those of Users who have recently interacted with the Owner's content and ads. Users may opt-out of Google's use of personalized advertising by visiting Google's Ads Settings.
Personal Data processed: clicks; surname; Date of birth; Usage data; education; email; sons; homeownership status; Interests; name; pageview; family income; sex; marital status.
Place of processing: Ireland – Privacy Policy.
Google Conversion linker (Google Ireland Limited)
Google Conversion linker is a statistical service provided by Google Ireland Limited that links Data from Google's ad services with actions taken within this Website. Depending on the settings of the service, such Data may also be processed for retargeting purposes.
For an understanding of Google's use of data, please see Google's partner policies. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt out.
Google Ads Smart Bidding (Google Ireland Limited)
Google Ads Smart Bidding is an advertising service provided by Google Ireland Limited that maximizes conversions using various bidding strategies. These strategies may include optimizing bids based on customer matching lists, information about your device, and your behavioral activity. Users may opt-out of Google's use of personalized advertising by visiting Google's Ads Settings.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: surname; search history; Usage data; email; device information; tongue; name; pageview; geographical position; Referring URL.
Place of processing: Ireland – Privacy Policy.
Google Ads Conversion Tracking (Google Ireland Limited)
Google Ads Conversion Tracking is a statistics service provided by Google Ireland Limited that links data from the Google Ads ad network with actions taken within this Website.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
TradeTracker Conversion Tracking (TradeTracker Nederland B.V.)
TradeTracker Conversion Tracking is a statistics service provided by TradeTracker Nederland B.V. that links data from the TradeTracker ad network with actions taken within this Website. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Consult TradeTracker's privacy policy – Privacy Policy.
Meta Lookalike Audiences (Meta Platforms Ireland Limited)
Meta Lookalike Audiences is an advertising and behavioral targeting service provided by Meta Platforms Ireland Limited that uses Data collected through Meta's Custom Audiences service in order to show advertisements to Users with similar behaviors to Users who are already on a Custom Audiences list based on their previous use of this Website or their interaction with relevant content across the applications and Meta services. Based on this Data, personalized ads will be shown to Users suggested by Meta Lookalike Audiences.
Users may opt out of using Meta's Tracking Tools for ad personalization by visiting this opt-out page. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt out.
Google Ads Similar Audiences (Google Ireland Limited)
Similar Audiences is an advertising and behavioral targeting service provided by Google Ireland Limited that uses Google Ads Remarketing Data to show advertisements to Users with similar behaviors to other Users who are already on the remarketing list due to their previous use of this Website. Based on this Data, personalized ads will be shown to Users suggested by Google Ads Similar Audiences.
Users who do not want to be included in similar audiences can choose not to participate and disable the use of Ad Trackers by visiting: Google Ads Settings.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of the User's behavior.
Google Analytics 4 (Google Ireland Limited)
Google Analytics is a statistical service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports and sharing them with other services developed by Google. Google may use Personal Data to contextualize and personalize ads from its advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is recorded in any data center or server. You can find out more about it in Google's official documentation.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: Usage Data; number of Users; session statistics; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
Matomo (self-hosted) (this Website)
Matomo is a statistical software used by this Website to analyse data directly and without the help of third parties. Personal Data processed: Usage Data; IP address; Tracking Tools.
Mouseflow (Mouseflow ApS)
Mouseflow is a statistics and heat mapping service provided by Mouseflow ApS. Mouseflow is used to identify the areas of this Website with which Users interact most frequently, in order to detect which of them attract the most interest. Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Netherlands – Privacy Policy – Opt Out.
Matomo Cloud (InnoCraft)
Matomo Cloud is a statistics service provided by InnoCraft. Personal Data processed: metropolitan area; Zip code; city; click; search history; browsing history; Usage data; duration of the session; interaction events; page events; custom events; time zone; Order ID; User ID; browser information; device information; page scrolling interactions; tongue; nation; number of sessions; pageview; Regional; operating systems; session statistics; state; Tracking Tools.
Place of processing: New Zealand – Privacy Policy.
Meta Events Manager (Meta Platforms Ireland Limited)
Meta Events Manager is a statistics service provided by Meta Platforms Ireland Limited. By integrating the Meta pixel, Meta Events Manager can give the Owner information about traffic and interactions on this Website. Personal Data processed: ZIP code; city; click; search history; browsing history; Data communicated during the use of the service; Usage data; browser information; pageview; sex; your subscriptions; state; Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt out.
Advertising reporting capabilities in Google Analytics (Google Ireland Limited)
Google Analytics on this Website has enabled advertising reporting features, which collect additional information from the DoubleClick cookie (web activity) and device advertising IDs (application activity). This allows the Data Controller to analyze specific Data relating to the behavior and interests of Users (Traffic Data and Ad Interaction Data by Users) and, if enabled, Demographic Data (information on age and gender).
Users may opt out of Google's use of cookies by visiting Google's Ads Settings.
To learn about Google's use of Data, please see their partner policy and their Commercial Data page. Personal Data processed: unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); Tracking Tools; various types of Data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy – Opt Out.
Google Looker Studio (Google Ireland Limited)
Google Looker Studio is a statistics service provided by Google Ireland Limited that creates reports of data collected in aggregate form from different sources. Personal Data processed: ZIP code; city; Date of birth; Usage data; device information; tongue; nation; geographical position; screen; sex.
Place of processing: Ireland – Privacy Policy.
Google Analytics demographics and interests reports (Google Ireland Limited)
Google Analytics Demographics and Interests Reporting is an advertising reporting feature that makes Demographics and Interest Data available within Google Analytics for this Website (Demographics means Age and Gender Data).
Users may opt out of Google's use of cookies by visiting Google's Ads Settings. Personal Data processed: unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); Tracking Tools.
Place of processing: Ireland – Privacy Policy – Opt Out.
Google Analytics Granular location and device data collection Google Ireland Limited)
Google Analytics has enabled granular data collection on this Website which collects location and device data on a regional basis. This allows the Owner to create and analyze User reports that are based on these metrics. Personal Data processed: city; Usage data; browser information; device information; number of Users; session statistics; Tracking Tools.
Place of processing: Ireland – Privacy Policy.
Semrush
Semrush is a statistics service provided by Semrush Inc. ("Semrush"). Semrush uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Semrush. At Semrush, IP addresses are used at the time of collection and then deleted before the data is recorded in any data center or server. You can check out Semrush's official documentation to learn more.
Personal Data processed: Usage Data; number of Users; session statistics; Tracking Tools.
Place of processing: See Semrush's privacy policy – Privacy Policy.
In addition to any opt-out function provided by any of the services listed in this document, Users can read more about how to opt out of interest-based advertising in the appropriate section of the Cookie Policy.
This Website uses Trackers. To find out more, Users can consult the Cookie Policy.
The Data Controller processes Personal Data relating to the User in the event that one of the following conditions exists:
However, it is always possible to request the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.
Unless otherwise indicated in this document, Personal Data is processed and stored for the time required by the purpose for which it was collected and may be kept for a longer period due to any legal obligations or on the basis of the Users' consent.
Therefore:
When the processing is based on the User's consent, the Data Controller may retain the Personal Data for longer until such consent is withdrawn. In addition, the Owner may be obliged to keep Personal Data for a longer period to comply with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.
Users may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, within the limits provided for by law, the User has the right to:
Users have the right to obtain information regarding the legal basis for the transfer of Data abroad including to any international organization governed by international law or constituted by two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect their Data.
When Personal Data are processed in the public interest, in the exercise of official authority vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to object to the processing for reasons related to their particular situation.
Users are reminded that, if their Data are processed for direct marketing purposes, they can object to the processing at any time, free of charge and without providing any reason. If Users object to processing for direct marketing purposes, Personal Data is no longer processed for such purposes. To find out whether the Data Controller processes Data for direct marketing purposes, Users can refer to the respective sections of this document.
Any requests to exercise the User's rights can be addressed to the Data Controller through the contact details provided in this document. The request is free of charge and the Data Controller will respond as soon as possible, in any case within one month, providing the User with all the information required by law. Any rectification, erasure or limitation of processing will be communicated by the Data Controller to each of the recipients, if any, to whom the Personal Data have been transmitted, unless this proves impossible or involves a disproportionate effort. The Data Controller shall notify the User of these recipients if he/she so requests.
If this is the condition for the transfer of Data, the transfer of Personal Data from the EU to third countries takes place only when the User has expressly consented to such transfer after being informed of the risks due to the absence of an adequacy decision and the appropriate safeguards adopted. In such cases, the Data Controller informs Users and collects their consent through this Website.
If this is the condition for the transfer of Data, the transfer of Personal Data from the EU to third countries takes place on the basis of an adequacy decision adopted by the European Commission. The European Commission adopts adequacy decisions with reference to individual third countries that it considers to ensure a level of protection of Personal Data comparable to that provided for by European legislation on the protection of Personal Data. The User can view the updated list of adequacy decisions on the website of the European Commission.
Defense in court
The User's Personal Data may be used by the Data Controller in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this Website or related Services by the User. The User declares to be aware that the Owner may be obliged to disclose the Data by order of public authorities.
Specific information
At the request of the User, in addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.
System logs and maintenance
For operation and maintenance purposes, this Website and any third-party services used by it may collect system logs, i.e. files that record interactions and which may also contain Personal Data, such as the User's IP address.
Information not contained in this policy
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website and, if technically and legally feasible, by sending a notification to Users through one of the contact details it has. Please consult this page frequently, referring to the date of last modification indicated at the bottom.
If the changes concern processing whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.
Personal Data (or Data)
Personal data is any information which, directly or indirectly, including in connection with any other information, including a personal identification number, identifies or identifies a natural person.
Usage Data
This is the information collected automatically through this Website (including by third-party applications integrated into this Website), including: the IP addresses or domain names of the computers used by the User who connects to this Website, the URI (Uniform Resource Identifier) addresses, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (e.g. the time spent on each page) and the details relating to the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.
User
The individual using this Website who, unless otherwise specified, is the Data Subject.
Interested
The natural person to whom the Personal Data relates.
Data Processor (or Processor)
The natural person, legal person, public administration and any other entity that processes personal data on behalf of the Data Controller, as set out in this privacy policy.
Data Controller (or Data Controller)
The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data and the means used, including the security measures relating to the operation and use of this Website. The Data Controller, unless otherwise specified, is the owner of this Website.
This Website (or this Application)
The hardware or software tool by which Users' Personal Data is collected and processed.
Service
The Service provided by this Website as defined in its terms (if any) on this website/application.
European Union (or EU)
Unless otherwise specified, any reference to the European Union contained in this document is intended to extend to all current member states of the European Union and the European Economic Area.
Cookie
Cookies are Trackers that consist of small pieces of data stored within the User's browser.
Tracking Tool
Tracking Tool means any technology - e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags, and fingerprinting - which allow Users to be tracked, for example by collecting or saving information on the User's device.
Education
Provides access to the Education section in the User's profile.
Legal references
Unless otherwise specified, this privacy policy applies exclusively to this Website.
Last modified: February 21, 2025
Nominee Best Specialist Tour Operator 2023
Touroperating
S-Cape Countryside Travels srl
Borgo Allegri 16R
50122 Firenze FI
P. IVA 05227330486
