Privacy Policy

Privacy Policy

This notice explains the methods and purposes of the processing of personal data carried out by the Data Controller. It also indicates how to contact us at any time to request access to, modification of, or deletion of your personal data.

This Privacy Policy applies whenever a User browses the pages of the website www.osolemiocharter.com and to all activities carried out online through it.

The processing of the Personal Data of users of the Website will take place in Italy and in compliance with:

• Regulation (EU) 2016/679, General Data Protection Regulation (GDPR)
• Legislative Decree no. 196 of 30 June 2003, containing the Personal Data Protection Code
• Recommendation no. 2/2001 adopted by the European data protection authorities to identify the minimum requirements for the online collection of personal data.

Data Controller and Data Processor

Following consultation of this Website, data relating to identified or identifiable persons may be processed. The Data Controller of such data is:

O’ Sole Mio Charter
Via Petrulo, 63
80063 Piano di Sorrento (NA) – Italy
Mobile: +39 3334584546

Email: info@osolemiocharter.com
VAT No.: 10630951217

Policy

Every individual has the right to the protection of their personal data, and in compliance with this right, this Privacy Policy provides all useful information to understand how information identifying Website users is collected and used.

The Data Controller undertakes to comply with a principle of strict necessity in the processing of data that may identify the User, even indirectly.

The Data Controller does not collect or process in any way any “special categories of personal data” as defined by Regulation (EU) 679/2016.

Users’ Personal Data will be processed by the Data Controller by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of Personal Data.

The Website has been configured so that the use of personal data is reduced to the minimum necessary and anonymous data are used whenever the same purposes can be achieved in this way.

Purposes

Unless otherwise specified, the Data Controller and the providers of third-party services used by it collect User Data for purposes strictly related to the provision of their Services.

The purposes are:

to contact and respond to requests sent by the User, collect statistical data on Website usage, fulfill contracts entered into with the User relating to the purchase or booking of products and services, and display content related to its business from and through other platforms.

In addition, there are purposes aimed at providing a better User experience:

commenting on content, interacting with social networks, and integration with external platforms.

With the User’s explicit consent, the following purposes are also carried out:

sending commercial information by email, customer satisfaction surveys, market research, promotional activities in general, profiling activities, and analysis of the browsing experience for marketing and promotional purposes.

Data collected by this Website

The types of Personal Data collected and used for each purpose are indicated in the specific sections of this document.

The Personal Data collected by this Website may be freely provided by the User or, in the case of Browsing Data, collected automatically while browsing the pages of this Website.

Other Personal Data that may be collected are indicated in other sections of this privacy policy or through specific information notices provided at the time the Data are collected.

Browsing Data

While browsing this Website, some personal data are acquired whose transmission is implicit in the use of Internet communication protocols and for which the User cannot express consent.

Examples of information on devices that we collect include:

• Attributes such as operating system, hardware version, and device settings
• Connection information such as the name of your mobile operator or ISP, browser type, language and time zone, and IP address

These data are used solely to obtain anonymous statistical information on the use of the Website and to check its proper functioning.

Such data could also be used to ascertain liability in the event of hypothetical cybercrimes against the Website.

Personal Data voluntarily provided by the User

The optional, explicit, and voluntary sending of emails to the addresses indicated on this Website or through pages/areas set up for this purpose entails the subsequent acquisition of the sender’s address/contact details, necessary to respond to requests, as well as any other personal or non-personal data included in the message.

The User assumes responsibility for the Personal Data of third parties published or shared through this Website and guarantees that they have the right to communicate or disclose them, releasing the Data Controller from any liability toward third parties.

Examples of such data include: Browsing Data, First Name, Last Name, Email, Telephone Number, Address, ZIP Code, Province, Country, State, Requests, and additional data.

Data collected through third-party services

This Website uses third-party services for the purposes indicated in the relevant section of this Website. In any case, the information acquired is subject to the User’s privacy settings for those services.

It is possible that, even if Users do not use the service, it may still collect traffic data relating to the pages where it is installed.

Google Analytics with anonymized IP (Google Inc.)

Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Website, compiling reports, and sharing them with other services developed by Google.

Google may use Personal Data to contextualize and personalize ads in its advertising network.

This Google Analytics integration anonymizes your IP address. The anonymization works by shortening Users’ IP addresses within the borders of the Member States of the European Union or in other countries party to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google’s servers and shortened within the United States.

Place of processing: USA
For more information: Privacy Policy

Google Tag Manager (Google LLC)

Google Tag Manager is a tag management service provided by Google LLC. It allows this Website to integrate other scripts.

Personal Data collected: Cookies and Usage Data
Place of processing: USA
For more information: Privacy Policy

Google Maps (Google Inc.)

Google Maps is a map visualization service provided by Google Inc. that allows this Website to incorporate such content into its pages.

It is also used for geolocation services that allow users to calculate an itinerary based on their position.

Personal Data collected: Cookies and Usage Data
Place of processing: USA
For more information: Privacy Policy

Facebook (Social Plugins)

Facebook “Like” button (from the social network facebook.com operated by Facebook, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA). When accessing another website from this Website that contains this type of plug-in, the browser establishes a direct connection with Facebook’s servers and sends this data to Facebook. This happens regardless of whether you are a Facebook member, have logged into the Website as a Facebook member, or have clicked the plug-in. If you are a Facebook member and are connected to Facebook while visiting this Website, Facebook will associate your visit to this Website with your Facebook account, even if you do not click the social plug-in. If, on the other hand, you click the plug-in, this information will be transmitted to your Facebook account, where it will be stored. We do not know in detail which of your data will be transmitted to Facebook or for what purpose Facebook will use such data. These data include your IP address, Facebook information about the site you visited, the date and time of your visit, and other information relating to the browser. If you access this Website while still connected to Facebook, your login identification code will also be collected and processed, and Facebook will associate this visit with your Facebook account. If you do not want Facebook to collect your personal data through this Website, you must log out of Facebook before visiting the Website. To learn about the purposes of the processing and the subsequent use of such data by Facebook, as well as your rights and the possible settings to protect your privacy, please carefully read Facebook’s data protection information.

Personal Data collected: Usage Data and various types of Data as specified in the privacy policy of the service.
Facebook reserves the right to change the terms of this policy at any time, with or without notice.
Place of processing: USA
For more information: Cookie Policy – Privacy Policy

Cookies

Cookies are installed in the browser while browsing a Website and may contain various kinds of information, some of which may allow the User’s preferences to be identified.

This Website and its domain www.osolemiocharter.com do not store Personal Data in cookies.

The data stored are used solely to remember preferences requested by the User or information necessary to enable the functionality of this Website and its safe and efficient navigation.

The cookies used by this Website are:

• session cookies (which disappear when the browser is closed)
• persistent cookies (which expire on a predefined date)

The use of Cookies, or other tracking tools, by this Website or by third-party services used by it, unless otherwise specified, is aimed at identifying the User and recording their preferences for the required purposes or for statistical purposes.

For information on how to disable cookies or for other information relating to cookies and privacy, please consult the Cookie Policy.

Data processing, sharing, and methods

The Data Controller, in compliance with the applicable regulations, processes Users’ Personal Data by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification, or destruction of Personal Data.

Processing is carried out by means of IT and/or telematic tools, automated tools, and with organizational and logical methods strictly related to the purposes indicated.

In accordance with the law, it is guaranteed that the processing of personal data is carried out in compliance with fundamental rights and the dignity of the data subject, with particular regard to confidentiality, personal identity, and the right to protection of the same.

Personal Data will be processed exclusively by persons specifically authorized and supervised by the Data Controller:

• internal staff within the company organization:
  administrative staff, sales staff, marketing staff, legal staff, system administrators
• external parties:
  such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies
• competent authorities:
  law enforcement agencies or other governmental authorities in cases provided for by law or where strictly necessary to prevent, detect, or prosecute criminal acts and fraud

External parties may also be appointed, where necessary, as Data Processors by the Data Controller.

In addition to companies acting as data processors, Personal Data may also be made available to third parties acting as independent data controllers for ancillary and related purposes connected to the provision of the requested services.

The updated list of Data Processors may always be requested at any time by emailing the Data Controller.

Location and communication of data

The Data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller.

The User’s Personal Data may be transferred to a country other than the one in which the User is located. In any case, they will never be transferred outside the countries belonging to the European Union unless appropriate safeguard clauses or equivalent levels of protection of Personal Data are guaranteed.

The transfer will be carried out only to pursue Commercial Purposes agreed upon with the User’s explicit request.

Retention period

The Data are processed and stored for the time required by the purposes for which they were collected.

Specifically:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User will be retained until such contract has been fully performed.
• Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until such interest is satisfied.

Where processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be required to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, Personal Data will be deleted.

Rights

The User may become aware of their rights, request further information, and stay updated on the legislation regarding the protection of individuals with regard to the processing of Personal Data by consulting the website of the Italian Data Protection Authority at www.garanteprivacy.it.

The User has the right to:

• Withdraw consent previously given for the processing of their Personal Data
• Object to the processing of their Data where it is carried out on a legal basis other than consent
• Access their Data and obtain all information about the Data processed by the Data Controller. The data will be provided through a copy of the Data in a commonly used format readable by an automatic device.
• Verify and request correction of their Data
• Obtain restriction of processing where certain conditions apply. In such case, the Data Controller will not process the Data for any purpose other than storage.
• Request deletion or removal (erasure) of their Personal Data
• Transfer their data to another Data Controller, where technically feasible, by obtaining or requesting forwarding of their Data in a structured, commonly used, and machine-readable format. This provision applies when the Data are processed by automated means and the processing is based on the User’s consent, on a contract to which the User is party, or on contractual measures connected thereto.
• Lodge a complaint with the competent data protection supervisory authority or take legal action

The User may exercise their rights at any time by sending a request to the Data Controller’s contact details.

Legal defense

The User’s Personal Data may be used by the Data Controller for legal defense in court or in the preparatory stages leading to possible legal action, against abuses in the use of the Website or related services by the User.

The User acknowledges that the Data Controller may be required to disclose the Data upon request by public authorities.

Legal compliance

The Data Controller reserves the right to access, store, and share information with regulatory bodies, law enforcement agencies, or other parties in the following cases:

• In response to a legal request, in good faith, and within the time limits imposed by law
• In all cases where it is necessary to detect, prevent, and resolve unauthorized use of the Services or Products provided or sold through this Website, in order to detect violations of our contractual terms or regulations
• In order to detect harmful or illegal activities, protect the business carried out, and safeguard the Data Controller, the User, and/or third parties

The Data collected may be consulted and retained for an extended period where they are subject to legal proceedings or obligations, governmental investigations, or investigations concerning possible violations of our terms or regulations, or to prevent harm.

We may also retain the Data for at least one year in order to prevent the recurrence of misuse or other violations of the terms.

Applicable law

This Privacy Policy is governed by the aforementioned GDPR and by the applicable Italian law, which regulates the processing of personal data, including data held abroad, carried out by anyone residing or having their registered office in a country of the European Community.

The GDPR ensures that the processing of personal data takes place with respect for fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality, personal identity, and the right to the protection of personal data.

Changes and updates

The Data Controller reserves the right to amend, in whole or in part, this Privacy Policy also in consideration of regulatory updates protecting Users’ rights.

Changes and updates to the Privacy Policy will become binding as soon as they are published in this same section. Users are therefore invited to access this section regularly in order to verify the publication of the most recent and updated version of the Privacy Policy.

Legal notes

All documentation downloadable from this Website has been prepared and checked with the utmost care; however, the user is always required to verify its accuracy and is responsible for its use.

In the event of defects, no liability shall be attributed for direct or indirect damages suffered by the User or by third parties arising from the use or non-use of the information obtained.

Although the contents of these pages are subject to constant updating and review, errors and/or omissions may nevertheless occur.

By accessing this Website, the User implicitly declares that they have read, understood, and accepted the information contained in the Legal Notes and Privacy sections and declares that they will comply with all laws and regulations applicable to it.

If the User does not accept these conditions, they may not use this Website.