Privacy policy
Privacy Notice on Personal Data Processing and Consent Request under EU Regulation No. 679/2016
Amatori Interestate Srl, as the Data Controller of your personal data, informs you, in accordance with and for the purposes of EU Regulation No. 679/2016 and Italian Legislative Decree No. 196 of June 30, 2003, as amended by Legislative Decree No. 101 of August 10, 2018, that the aforementioned legislation provides protection for data subjects regarding the processing of personal data. This processing will be carried out according to principles of fairness, legality, transparency, and protection of your privacy and rights.
Your personal data will be processed in compliance with the provisions of the aforementioned legislation and confidentiality obligations therein.
Data Controller The Data Controller is Amatori Interestate Srl, represented by Guido Giambuzzi in his role as Legal Representative.
Purpose of Processing Management of information and provision of services related to maritime transport and the organization of travel and vacations, particularly to Croatia and/or the Balkan area.
Processing and Storage Methods Processing will be carried out in an automated and/or manual form, in compliance with Article 32 of GDPR 2016/679 by specifically appointed personnel and in accordance with Articles 29 GDPR 2016/679. Data provided to validate a travel request will remain stored in our email archive, the site database, and email backups. If the booking is made with a deposit payment, data related to the payment, if made by bank transfer, remain with us for the time strictly necessary for the booking; if via PayPal, any credit card or PayPal account information is managed directly by the PayPal system and is not stored by Amatori.com.
Scope of Communication and Dissemination We also inform you that the data collected will never be disseminated and will not be disclosed without your explicit consent, except for necessary communications that may involve the transfer of data to public entities, consultants, or other subjects to fulfill legal obligations.
Transfer of Personal Data Your personal data may be transferred to EU Member States and third countries outside the EU to achieve the purposes detailed above; in such cases, data will be processed and transferred in compliance with Chapter V of the Regulation, as follows:
- Entities to which data may be communicated: travel agencies, correspondents, accommodations, transport service providers (buses, Jadrolinija shipping company).
- Purpose for which data may be transferred: booking hotels, ferries, buses, and other tourism services.
- Transfer method: sending electronic/paper documents via fax, email, or phone.
Duration of Processing Data is processed for the entire duration of the contractual relationship and thereafter for a maximum of 10 years to meet contractual needs, fulfill legal and tax obligations, and manage financial and commercial relations, as indicated in Article 4 of the Privacy Code and Article 4 No. 2) GDPR.
Profiling With your explicit consent, the Data Controller may carry out automated decision-making processes, including profiling, as per Article 22, paragraphs 1 and 4, of EU Regulation No. 679/2016, for informational, commercial, or marketing purposes.
Processing Recipients The data may be disclosed to individuals or legal entities as authorized recipients appointed to perform processing operations. Data may be shared with tax offices, credit institutions, judicial authorities, professionals, and consultants to fulfill legal obligations.
Rights of the Data Subject
-
The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and their communication in an intelligible form.
-
The data subject has the right to obtain information on:
- The origin of the personal data;
- The purposes and methods of processing;
- The logic applied in the case of electronic processing;
- The identity of the controller, processors, and representative appointed by the controller;
- The entities or categories to whom personal data may be communicated or who may learn of it as designated representatives, processors, or appointees.
-
The data subject has the right to obtain:
- Updating, rectification, or, where interested, integration of data;
- Deletion, anonymization, or blocking of data processed unlawfully, including data no longer necessary for the purposes for which it was collected or subsequently processed;
- Certification that the operations described above have been notified, as well as their content, to those to whom the data were communicated or disseminated, except where this proves impossible or involves disproportionate means compared to the protected right;
- Data portability.
-
The data subject has the right to object, wholly or partly:
- For legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection;
- To the processing of personal data concerning them for the sending of advertising materials or direct sales or for market research or commercial communication.
Pursuant to Article 15 of the GDPR regarding data transfer to third countries, the data subject has the right to be informed of the existence of appropriate safeguards in accordance with Article 46 regarding the transfer.
You can exercise your rights by sending a written request to [email protected].
Online Chat
If customers request online assistance via chat, the data provided will only be used to provide information or clarification requests. Data deletion can be requested by writing to [email protected].
Cookies
For more information on the cookies used on this website, please consult the cookies policy by clicking here: