Privacy

Information pursuant to art. 13 of EU Regulation 2016/679 (GDPR)

Dear user,
Christian srl provides the following information, pursuant to Article 13 of EU Regulation 2016/679 (GDPR), regarding the processing of the personal data you provide by completing this form.

Data controller
You can always exercise your rights by sending us an email to the following address: info@acquaparkondablu.it

Contact details of the Data Controller
The Data Protection Officer (DPO) can be reached at the following email address: info@acquaparkondablu.it

Purpose of the processing
Your personal data will be processed, including by means of IT and electronic tools, for the purpose of:

1. respond to your request for information;
2. send you, with your prior consent, information on the Company's services, products, and commercial initiatives via automated means (e.g., email, SMS, WhatsApp, etc.);
3. Disclosing your personal data to third parties, with your prior consent, so that they can send you commercial information regarding their products or services, including by automated means. The third parties to whom your data may be disclosed are the Data Controller's subsidiaries, affiliates, or affiliated companies or other third-party companies operating in the entertainment sector, which promotes quality leisure time, combining culture, science, education, entertainment, and nature.

Legal basis for processing
The legal basis justifying the aforementioned processing for the purposes referred to in point 1 above is Article 6, paragraph 1, letter b) of the GDPR, i.e., processing necessary for the performance of a contract or for the purposes of entering into a contract.
The legal basis justifying the aforementioned processing for the purposes referred to in points 2 and 3 above is your consent.

Consequences of failure to provide personal data
Failure to provide your personal data for the purpose referred to in point 1 will make it impossible for the Company to respond to your requests for information.

Period of retention of personal data
Your personal data will be retained, for the purpose referred to in point 1, for the period necessary to process your request for information.
Your personal data will be retained, for the purposes referred to in points 2 and 3, for a period of 24 months from the date of their communication.

Data recipients
The operator of the Company's website may have access to your personal data. If you consent to receiving commercial communications, those providing commercial communications services may also have access to your personal data.
Each of the above-mentioned entities acts as a Data Processor appointed by the Data Controller pursuant to Article 28 of the GDPR.
The complete list of appointed data controllers, which by its nature is subject to change, is available in a constantly updated version upon request to the Data Controller at any time by writing to privacy@costaedutainment.com.
With your prior consent, your personal data may be disclosed to companies controlled, affiliated, or in which the Data Controller has a stake, or to other third-party companies operating in the entertainment sector, which promotes quality leisure time, combining culture, science, education, entertainment, and nature.
Company employees, designated as data processors, may also have access to your personal data if their duties require it. Each data processor is specifically identified, authorized, and trained, and acts on the basis of specific instructions provided by the Company regarding the purposes and methods of processing, and the security measures to be adopted to protect personal data.

Rights of the interested party
The Data Controller informs you that, as the Data Subject, you have the right, pursuant to Article 15 et seq. of EU Regulation 2016/679, and within the limits prescribed therein, to:

• obtain data and information on the processing, in particular in relation to the type of personal data processed, the purposes for which the personal data are processed, the period of processing and the subjects to whom the data are communicated ( so-called right of access );
• obtain the rectification or integration of inaccurate personal data concerning you ( so-called right of rectification );
• obtain the erasure of your personal data in the following cases: (i) the personal data are no longer necessary for the purposes for which they were collected; (ii) you have withdrawn your consent to the processing of your personal data, if they are processed on the basis of such consent; (iii) you have objected to the processing of your personal data if they are not processed for a legitimate interest of the Data Controller; (iv) the processing of your personal data is unlawful. However, the Data Controller may lawfully retain your personal data if it is necessary to comply with a legal obligation or to establish, exercise, or defend legal claims ( so-called right to erasure );
• obtain that the personal data concerning you be only stored without any other use being made of them in the following cases: (i) you contest the accuracy of the personal data, for the period necessary to allow the Data Controller to verify the accuracy of such personal data; (ii) the processing of personal data is unlawful; you oppose, in any case, the erasure of personal data by the Data Controller; (iii) the personal data are necessary for the establishment, exercise or defense of a right in court; (iv) you have objected to the processing and are awaiting verification as to whether the legitimate grounds of the Data Controller for the processing prevail over yours ( so-called right to restriction of processing );
• object at any time to the processing of data and in particular to the processing of data for direct marketing purposes ( so-called right to object );
• receive, in a commonly used, machine-readable and interoperable format, the personal data concerning you, if they are processed pursuant to a contract or on the basis of your consent, and/or request that the data be transmitted to another data controller, if feasible ( so-called right to portability );
• Revoke consent at any time for processing for which it is required. Revoking consent does not affect the lawfulness of processing based on consent before its withdrawal.

You may exercise the aforementioned rights by writing to the Data Controller via email at the dedicated address info@acquaparkondablu.it .
You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to complain
If you believe that the processing of your personal data by the Data Controller violates the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the Office of the Data Protection Supervisor, pursuant to Article 77 of EU Regulation 2016/679 (by email to garante@gpdp.it , or by post to the Italian Data Protection Supervisor, based in Rome, Italy, at Piazza Venezia 11 Scala B, CAP 00187), or to take appropriate legal action, pursuant to Article 79 of EU Regulation 2016/679.

The Owner
Christian srl