Privacy

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF REGULATION (EU) 2016/649

This information describes the operations carried out on the personal data of users collected by the Site www.grandtouritalia.it. This information is also provided pursuant to art. 13 European Regulation on the protection of personal data and national legislation on the protection of natural persons with regard to the processing of personal data, to those who interact with the web services of Grand Tour Italia Srl. The information is provided only for the Grand Tour Italia Srl website and not for other websites that may be consulted by the user via links on the Site.

THE DATA CONTROLLER

Grand Tour Italia Srl, with headquarters in Bologna in via Paolo Canali 8, PI 03409851205 is the Data Controller, in the name of the legal representative pro tempore, of the processing of users' personal data collected during the use of the Site's services.

TYPE OF DATA PROCESSED

NAVIGATION DATA
The computer systems and software procedures used to operate this Website acquire, during their normal operation when the Site is loaded in the browser, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

This data is used to obtain statistical information on the use of the Site, to check its correct functioning and for profiling activities (retargeting and sponsored) through third-party cookies with the prior consent of the user. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site.

PERSONAL DATA PROVIDED BY THE USER
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this Site involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered in the contact form.

COOKIES
For information relating to the Cookies present on the Website , please refer to the Cookie Policy . The Site uses third-party analytical and profiling cookies subject to the user's consent, which can always be revoked via banner. With respect to analytical and profiling cookies, please consult the privacy policies of third-party suppliers (Google, Meta).

OPTIONAL PROVISION OF DATA

Apart from what is specified for navigation data, the user is free to provide personal data if requested in specific sections of the Site. Failure to provide them may make it impossible to obtain what has been requested. This information indicates, for each processing, the consequences of a possible refusal to provide personal data.

REDIRECTING TO EXTERNAL SITES

This Website may use so-called "social plug-ins". “Social plug-ins” are special tools that allow you to incorporate the functions of the Social Network directly into the Website.
List of social networks present on the Site: Meta, LinkedIn, Youtube.

All "social plug-ins" present on the Site are marked with the respective logo owned by the social network platform.

When you visit a page of our Site and interact with the "plug-in" or decide to leave a comment, the corresponding information is transmitted from the browser directly to the relevant social network platform and stored there.

For information on the purposes, type and methods of collection, processing, use and storage of personal data by the social network platform, as well as the methods through which to exercise your rights, please consult the Privacy Policy of the social network .

DATA PROCESSING FOR THE PURPOSES OF ACCESS AND REGISTRATION TO THE SITE; PERFORMANCE OF PURCHASE/SUPPLY CONTRACT

Grand Tour Italia Srl will process the user's personal data to allow registration on the Site and use of the services reserved for registered users, including the possibility of purchasing online via the Site and to allow the conclusion of the purchase contract via the Site and the correct execution of the obligations arising from this contract and, finally, to execute the requests sent by the user himself.

The legal basis for the aforementioned processing is the fulfillment of the contract or, depending on the case, the execution of pre-contractual measures adopted at the request of the interested party (art. 6.1 letter b GDPR). For this purpose Grand Tour Italia Srl will process users' personal data to:

• Allow the user (Private, Company) to register on the Site, creating an account, and to use the services reserved for registered users, including the possibility of purchasing through the Site;
• Allow the user to access the Site and browse as a logged in user, recognizing the user regardless of the device used;
• Maintain and manage the user's account (Account Area);
• Store data and information in the user's account (personal data, order history);
• Allow the user to place the products in the Cart and conclude the purchase contract via the Site;
• Allow the user to make online payments for purchases made on the Site. For online payments the site relies on Nexi and their standard procedures; please refer to Nexi's privacy policy.
• Execute the purchase/supply contract.

Failure to communicate the data will make it impossible for the user to register on the Site and use the services reserved for registered users and/or conclude a purchase contract via the Site and/or receive responses to requests made.

For these purposes, the data will be processed for the time strictly necessary to carry out the individual processing activities and for tax obligations (10 years).

DATA PROCESSING FOR MARKETING PURPOSES

Subject to the consent of the interested party, Grand Tour Italia Srl will process the user's personal data to send informative and promotional communications, including the newsletter, discount coupons and special offers, referring to its own products and/or services and/or those of commercial partners as well as for direct sales purposes and for carrying out market research.

The legal basis for this processing is the user's consent (art. 6.1 letter a) GDPR).

The user may revoke the consent given to the processing of his data for marketing purposes at any time by sending an email to privacy@grandtouritalia.it or by unsubscribing to the newsletter also via the Account Area.

The personal data processed for the purpose of sending newsletters are kept for as long as the user has demonstrated an interest in receiving it. In this regard, a criterion has been established for the data retention period which provides for a "periodic check" by the Data Controller. According to this criterion, the user who does not demonstrate that he has opened the newsletter for 36 consecutive months will be automatically deleted from the mailing list.

Grand Tour Italia Srl carries out profiling activities (retargeting and sponsored ads) through third-party cookies (Meta and Google pixels). The legal basis is the user's consent (art. 6.1 letter a) GDPR. For information on profiling cookies, please refer to the Cookie policy . The user can manage his consent at any time via banner.

DATA PROCESSING FOR REQUEST OF INFORMATION / ASSISTANCE

Grand Tour Italia Srl will process user data for general assistance activities and therefore to respond to requests for information from users via the contact form or to respond to complaints, reports and disputes.

The legal basis of this processing is the execution of pre-contractual measures adopted at the request of the interested party (art.6.1lett.b GDPR) and/or for the legitimate interest (art.6.1lett.f GDPR) of Grand Tour Italia Srl.

The provision of personal data for the purpose in question is optional. Grand Tour Italia Srl will process the user's data for the time necessary to carry out the requested activities.

DATA PROCESSING FOR THE PURPOSE OF PREVENTING THE IMPROPER USE OF THE SITE SERVICES

Grand Tour Italia Srl will process users' personal data in order to prevent the improper use of its services.
The legal basis of this processing is the legitimate interest of Grand Tour Italia Srl pursuant to art. 6.1 letter f GDPR)

For this purpose, Grand Tour Italia Srl will process the user's data for 12 months from collection.

DATA PROCESSING FOR ADMINISTRATIVE-ACCOUNTING AND TAX PURPOSES

Grand Tour Italia Srl will process user data for the purposes of carrying out administrative and/or accounting and/or fiscal obligations, connected to the provision of the Site Services and/to the purchase contract concluded through the Site, such as, by way of for example, the keeping of accounting records and the issuing of the sales invoice.

The legal basis of this processing is the fulfillment of legal obligations to which Grand Tour Italia Srl is subject (art. 6.1 letter c).

The provision of data for the purpose in question is mandatory. Any refusal to provide the data will make it impossible for the user to use the Site Services and conclude the purchase contract via the Site.

The data will be stored and processed until the expiry of the legal deadlines for carrying out each administrative, accounting and tax obligation and/or for the retention times required by law (10 years).

In general, Grand Tour Italia Srl will process user data in order to fulfill the obligations of the law or an order from the Authority and to pursue a legitimate interest of the Data Controller or to exercise the rights of the Data Controller, for example the right of defence. The legal basis of this processing is the legitimate interest of Grand Tour Italia Srl (art.6.1 letter f).

METHODS AND SAFETY OF TREATMENT

Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

The data collected through the Site will not be transferred, shared or used in any other way other than that described here. The data is not communicated to third parties for marketing purposes. The Data Controller does not carry out solely automated decision-making processes on personal data.

TRANSFER OF PERSONAL DATA OUTSIDE THE EU

Personal data is not transferred to non-EU countries or to an international organisation. The Site's data is stored on servers located in the EU. The Data Controller, if necessary, may have the right to move the location of the servers, ensuring that the transfer of non-EU data will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and /or by adopting the standard contractual clauses provided by the European Commission.

CATEGORIES OF SUBJECTS TO WHOM THE DATA MAY BE COMMUNICATED

The subjects to whom Grand Tour Italia Srl communicates the data act as data controllers designated by the Data Controller through a specific contract or as persons authorized to process personal data under instructions directed by Grand Tour Italia Srl.

The updated list of external managers is available upon request.

NOTE FOR MINORS

The Site is not intended for the use of minors and no data from minors is collected or processed. In the event that minors' data is involuntarily sent, the Data Controller will delete it promptly.

RIGHTS OF INTERESTED PARTIES

Pursuant to the articles. 15 et seq. of the GDPR and current legislation, the user has the right, in addition to lodge a complaint with the Italian Guarantor for the protection of personal data and to revoke any consent given at any time, to:
a) obtain confirmation of the existence or otherwise of personal data concerning him and their communication in an intelligible form, receiving them in a structured, commonly used and readable format with the possibility of transmitting them to another Data Controller (“Right to portability”);
b) obtain information: (i) on the origin of the personal data, on the purposes and methods of the processing, on the logic applied in case of processing carried out with the aid of electronic instruments; (ii) on the identification details of the Data Controller and the Data Processor(s); (iii) on the subjects or categories of subjects to whom the data may be communicated or who may become aware of the same as designated representatives on the territory of the State, managers or designated persons;
c) obtain (i) the updating, rectification or integration of the data concerning him or, in the event of a dispute regarding the correctness of the data, the limitation of the processing of the same for the time necessary for appropriate checks, (ii) the transformation into anonymous form or blocking of data processed in violation of the law, including those whose conservation is necessary in relation to the purposes for which the data were collected or subsequently processed, (iii) certification of the fact that the operations referred to in the previous points have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which such fulfillment is impossible or involves the use of manifestly disproportionate means with respect to the protected right;
d) oppose, in whole or in part, the processing of data concerning him, even if pertinent to the purpose of the collection;
e) obtain cancellation without unjustified delay in the event that the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed, have been processed unlawfully or in the event that the user (i) requests it or ( ii) objects in whole or in part to the processing;
f) obtain the limitation of processing in the event that the data (i) are processed illicitly but the User opposes their cancellation, (ii) they are necessary for the user for the assessment, exercise or defense of a right, (iii) an assessment is pending regarding the legitimate reasons for processing by the Data Controller.

Requests should be addressed to:
- via e-mail, to the address: privacy@grandtouritalia.it

- or by post, at the registered office of Grand Tour Italia Srl, Via Paolo Canali, 8 – 40127 Bologna (BO)
The Owner reserves the right to modify and update this privacy policy. Any updates will be published on this page and an email will be sent indicating the updates.