1. WHY IS THIS INFORMATION PROVIDED?
In accordance with Regulation EU 679 of 2016 (GDPR) this page describes the processing methods of the personal data of Users (identified or identifiable natural persons and, therefore, “Data Subjects” in accordance with the Regulation) who consult the “BIKE & TASTE” website accessible online at the address https://www.bikeandtaste.com.
The information contained in this privacy policy is provided only for the “BIKE & TASTE” website and does not, therefore, relate to other websites, pages or online services that may be accessed via hypertext links published on the website but refer to resources external to the “BIKE & TASTE” domain.
This privacy policy is also provided for personal data supplied via the email address info@bikeandtaste.com or if you send private messages to profiles/pages on the “BIKE & TASTE” social media pages.
2. DATA CONTROLLER
The Data Controller is BIKE & TASTE based in Via Montello, no. 80, Montebelluna, Treviso, Italy, Tax Code GRMBRC97C51F443U VAT no. 05048770266 e-mail: info@bikeandtaste.com, Certified email: bikeandtaste@legalmail.it Tel. +39 0423 301291.
3. TYPES OF DATA PROCESSED
• Data communicated by you – We will only request personal data necessary to provide the service requested by you, such as your name, surname and address, nationality, tax code, telephone number and e-mail.
a. “Write to us” – For information and requests, when using the BIKE & TASTE website, you may send your personal data: the transmission of those data involves the subsequent acquisition, by BIKE & TASTE, of your email address, which is required to respond to requests, as well as the other personal data included in the communications.
b. “Newsletter” – By providing personal data, such as your name and surname, nationality and email address, you can register to the BIKE & TASTE newsletter service.
c. “Accommodation availability request” – By providing your personal data (including name and surname, email address and telephone number, home address) as well as other useful information (e.g. your intention to hire a bike and/or cycling gear, your wish to have a guide for the bicycle tour), you can check the availability, on the indicated dates, at the chosen accommodation provider (B&B, Hotel, historic residence, holiday farmstead). In those circumstances, the data collected by BIKE & TASTE will be communicated, to carry out all formalities relating to the accommodation, also to the accommodation providers and/or the travel agency.
d. “Booking/request for bike experience information” – By providing your personal data (including name and surname, email address and telephone number, home address) as well as other useful information (e.g. your intention to hire a bike and/or to have an airport/station pick-up/drop-off service) you can book the chosen “bike experience” and receive information in that regard. Also in those circumstances, the data collected by BIKE & TASTE will be communicated, to carry out all formalities (including payment), to the travel agency.
e. “Share your experience” – BIKE & TASTE may also share the most significant bike experiences by posting photos: in that case, if those photos depict natural persons, BIKE & TASTE will obtain prior consent to the publication.
• Cookies and other tracking systems
User profiling cookies or other tracking methods are not used by the website https://www.bikeandtaste.com/. On the other hand, we do use technical cookies, namely small text files that are saved locally in the temporary memory of your browser – and therefore on your computer – to improve your experience in using the website. For further information on our cookies and those of third parties used on our website, see the cookie policy available here.
4. PROCESSING PURPOSE AND LEGAL BASIS
• Browsing data: the protocol files and data contained therein are processed by us:
a. to allow you to use the web services
(legal basis indicated in letter b, paragraph 1 of Art 6 Reg. EU 679/2016)
b. to obtain statistical information on use of the services (most visited pages, number of visitors by time bracket or daily, geographical area of origin, etc.) as well as to check the correct functioning of the website and to protect our systems, for example, identifying any attacks
(legal basis indicated in letter f, paragraph 1 of Art 6 Reg. EU 679/2016)
• Data communicated by you: with regard to personal data provided voluntarily and explicitly by you when using the website, these may be processed:
c. to be able to produce and provide a response to your requests and/or e) to be able to carry out all operations related to and deriving from your request to book accommodation and/or the bike experience: in that case, the legal basis of processing is the intention to execute a measure requested by you (letter b, paragraph 1 of Art. 6 Reg. EU 679/2016) as well as compliance with legal obligations to which the Controller is subject (letter c, paragraph 1, Art. 6 Reg. EU 679/2016).
d. if you have expressed consent to receive the BIKE & TASTE newsletter, your data (and in particular your email address) will be used for sending the BIKE & TASTE newsletter, containing information on products and/or services, advertising campaigns and all the latest innovations. In that case, the legal basis of processing is constituted by the consent expressed by you (letter a, paragraph 1 of Art. 6 Reg. EU 679/2016) which may be withdrawn (e.g. by way of “unsubscribe”) at any time, without prejudicing the lawfulness of processing based upon consent provided before the withdrawal.
• Cookies and other tracking systems. The legal basis of the processing, as regards third party cookies, is given by consent: by closing the banner, by scrolling down the page or by clicking on any element, you provide consent to their use. As regards the processing purposes of cookies, we refer to the further information which can be found in the cookie policy available here.
5. OPTIONAL NATURE OF DATA PROVISION
The data voluntarily and expressly communicated by you for one or more of the purposes indicated in point 4, letters c and d are provided by you on a strictly optional basis. Any failure to communicate the aforementioned data will have as its only consequence the impossibility of pursuing the specific purpose (responding to your requests for information; booking of accommodation and/or the bike experience; sending of newsletters).
6. DATA STORAGE
• Browsing data: browsing data do not persist for more than seven days and are erased immediately after their aggregation (subject to any requirements by the Judicial Authority to ascertain crimes).
• Data communicated by you: with regard to personal data provided voluntarily and explicitly by you when using the website processed:
a. to be able to develop and provide a response to your requests for information and/or to be able to perform all operations relating to booking accommodation and/or a bike experience; in that case, the data will be stored for the entire time necessary to provide the requested service; they will then be stored for an additional period of ten years (with effect from the request or booking made), subject to a further period of storing the data if this becomes necessary to fulfil a legal obligation or for the establishment, exercise or defence of legal claims;
b. the data supplied in order to receive the newsletter will be used to provide the requested service for the entire period in which the same is active, notwithstanding your right to withdraw consent at any time (without prejudice to the lawfulness of processing based upon consent provided before the withdrawal). If you no longer wish to receive the newsletter, select unsubscribe at the bottom of the email or contact BIKE & TASTE using its contact details.
• Cookies and other tracking systems: the memorisation of session cookies on your computer or browser is controlled by you; at the end of HTTP sessions, information relating to cookies remains stored on the servers in the services logs, with storage times in any case not exceeding seven days, just like other browsing data.
For further information, consult the cookie policy available here.
7. DATA RECIPIENTS
a. Processors
In relation to the booking of accommodation and/or a bike experience, for activities related to and deriving from that booking (e.g. payment), your data may also be known, as well as by the accommodation provider, also by the travel agency, which is appointed as Data Processor.
In relation to the newsletter, this may be sent using providers of automated marketing systems (e.g. Mailchimp platform). In order to provide that service, which involves the processing of personal data on behalf of the Controller, the owner of that platform, as an automated marketing system provider, must be appointed as processor.
An updated list of any other Processors may be requested from BIKE & TASTE; the Processors chosen by it have undertaken to implement appropriate technical and organisational measures to ensure that the processing meets the requirements indicated in Reg. EU 679/2016 and guarantees the protection of your personal data; the Processors have also undertaken, by way of a specific signed letter of appointment, to fulfil all specific obligations indicated in Art. 28 Reg. EU 679/2016 and to act, in accordance with Art. 29 of that Regulation, under the authority of the Controller and subject to its instruction, as well as to communicate to the Controller (in accordance with the second paragraph of Art. 33 Reg. EU 679/2016) any personal data breaches.
b. Officers
The personal data collected are also processed by staff of BIKE & TASTE who act on the basis of specific instructions provided in relation to the purposes and methods of that processing (known as Officers or “persons authorised to process data”).
8. TRANSFER OF DATA ABROAD
If, in order to provide the service, the Controller deems it necessary to transfer the processed personal data outside of the EU (“transfer outside the European Union territory” also meaning the use of services, by way of example, of hosting, cloud and storage, which involve saving the data on systems located in non-EU countries), the Controller undertakes to adopt safeguards to ensure that the transfer is secure and to guarantee that the processing meets the requirements of the Regulation, despite being carried out outside the EU (adequacy decisions, contractual clauses, consent…)
9. RIGHTS OF THE DATA SUBJECTS
The Data Subjects have the right to obtain from the Controller, in the set cases, access to personal data and the rectification or erasure of the same or the restriction of processing relating to them or to object to processing (Articles 15 et seq. of the Regulation).
The request may be submitted by contacting the Controller using its contact details indicated above.
It is also noted that Data Subjects who believe that the processing of their personal data carried out via this website is occurring in breach of the provisions of the Regulation have the right to lodge a complaint with the Supervisory Authority, as envisaged by Art. 77 of the Regulation, or the right to obtain an effective judicial remedy (Art. 79 of the Regulation).
10. COMMUNICATION OF SENSITIVE DATA (SPECIAL)
BIKE & TASTE invites you not to communicate information that may fall within the categories of personal data known as special indicated in Art. 9 of the GDPR (e.g. data referring to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sexual orientation, biometric data or data relating to the state of health).
11. COMMUNICATION OF DATA RELATING TO THIRD PARTIES
With regard to any circumstance in which you communicate to BIKE & TASTE personal data not relating to you but relating to third parties, you act as autonomous Data Controller, accepting all legal obligations and responsibilities and undertaking to indemnify BIKE & TASTE from any dispute, claim or demand for damages compensation that it may receive from third parties whose personal data have been processed in breach of the applicable rules on personal data protection. In any case, if you provide personal data of third parties, you hereby guarantee that that particular circumstance of processing is based upon the prior knowledge of the privacy policy and on the prior consent of the third party to the processing of the information relating to him/her.
12. UPDATE OF POLICY PRIVACY
BIKE & TASTE reserves the right to change and/or update the content of this Privacy Policy, partly or in full, for example, as a result of changes to the applicable regulations. The changes made to this Privacy Policy will be binding as soon as they are published on the website and BIKE & TASTE therefore invites you to visit this section regularly to read the most recent and updated version of the Privacy Policy so that you are always informed of the processing of your data.
Latest update of this Policy Privacy: 01/04/2020