Privacy - Italian law

Privacy policy
Statement pursuant to article 13 of Legislative Decree no. 196 of 30 June 2003 “Code on the protection of personal data” by Gobyguide S.r.l., with registered offices in Via Nottolini 119/C – 55100 Lucca, Italy. The statement is provided for the Gobyguide srl sites only, not for any other websites that might be consulted by the user through links.

Data controller
The controller of the processing of personal data is Gobyguide S.r.l., Via Nottolini 119/C – 55100 Lucca, email: privacy@gobyguide.com, VAT number and tax code 02170650465. This statement applies to the personal data supplied by the User at the moment of registration.

Persons responsible and location of the data processing
The data will be processed by Gobyguide through its employees and external consultants, depending on the purpose of the processing.
The list of those responsible for the data processing is available from the legal representative of Gobyguide and may be requested by e-mail from the address privacy@gobyguide.com.

Methods and aims of processing
Gobyguide S.r.l. subjects the personal data of the Users to all the processing operations identified in Legislative Decree 196/2003 – that is the collection, recording, organization, retention, processing,
modification, selection, retrieval, comparison, utilization, interconnection and all other operations pertinent to the supply of the services requested of us, including communication to third parties, where necessary.

The personal data is processed primarily with electronic and data technology tools, and stored on both IT support media and paper and any other suitable type of support, in accordance with the security measures pursuant to the current law. The data may be organized in databases or archives.
The aims of the processing of the personal data are as follows:
1. to supply the services specified;
2. to send informative material of a technical, administrative or commercial nature;
3. for the management of the technical and administrative operations of the enterprise;
4. to check the quality of the services offered;
5. for the diagnosis of any technical problems;
6. for internal statistical purposes;
7. for the prevention of intrusion and abuse of the service;
8. for the repression, if necessary, of illegal behaviors;
9. to trace those responsible for any illicit acts only in the case of specific requests and on behalf of the competent authorities.

The personal Data may be made available to the competent authorities for the ascertainment of responsibilities in case of IT crimes to the detriment of the websites owned by Gobyguide.
Data supplied voluntarily by the user may also be processed.
Gobyguide adopts specific safety measures to prevent the loss of data, (its) illicit or incorrect use or unauthorized access (to it).
Personal data is communicated to third parties only when strictly necessary.

Type of data processed
Some of the information items requested are obligatory.
If one or more obligatory items of information is or are not entered, the person concerned may not use the service requested.

Navigation data
The IT systems and procedures used for the operation of the websites acquire some personal data in the course of their operation, and transmission of this data is implicit in the use of internet communication protocols. This is information that by its very nature might permit the users to be identified. This category includes the IP addresses or domain names of the computers used by the users who connect to the sites, addresses in URI (Uniform Resource Identifier) notation, the method used to submit the request to the server, the time of the request, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters concerning the operating system or IT environment of the user.
This data is used for anonymous statistical analysis of the use of the site and to monitor its correct operation (see the section on Cookies).

Data collected for the execution of its administrative functions by Gobyguide.
The Gobyguide system guarantees that all personal data is protected and that on-line payments are secure, ensuring a fast, safe booking service.
On-line payments are handled by a bank that receives the data directly, without any intermediaries, through the Bank’s own payment gateway using protocols that guarantee the maximum security of the
payment operations.

Cookies
The use of session cookies (which are not saved persistently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identification data (consisting of casual numbers generated by the server) needed to permit the safe and efficient exploration of the site and its applications. The session cookies used in these sites do not make use of other information technology techniques that are prejudicial to the confidentiality of user navigation, and do not allow acquisition of the personal data that identifies the user. The websites of Gobyguide srl use systems that analyze users’ navigation to generate statistics on visits or to improve the offer of content and possibly to position targeted advertising in the web pages. The systems used are Omniture SiteCatalyst®, ShinyStat™, WebTrends and Google Analytics, a web analysis service supplied by Google, Inc. ("Google"). Like the other systems, Google Analytics uses cookies, which are text
files placed on the user’s computer to allow the use of the website to be analyzed.

The information generated by the cookie on the use of the website (including the IP address) will be transmitted to and held on Google’s servers in the United States. Google will use this information to trace and examine the use of the website, compile reports on site activities for the operators, and supply other services on the website activity and use of the internet. Google can also transfer this information to third parties where this is required by law or where said third parties process the above information on Google’s behalf. Google does not associate the user’s IP address with any other item of information in its possession.

You can use anonymous navigation by selecting the appropriate setting on the browser you use to surf the internet (e.g. Firefox, Internet Explorer, Safari, Chrome), but this might compromise the use of some of the functions of our sites. The users of the Gobyguide sites agree to the processing of their data by Google with the methods and for the purposes indicated above (similar but not identical methods are used by the Omniture SiteCatalyst and Webtrends systems). Cookies are not used in any way to transmit information of a personal nature, nor (do the sites) use
systems to trace users.

Form
The personal information collected in the booking form will be processed to supply the services the User is entitled to, and for necessary communications to the User by Gobyguide and the guide booked by the User. Providing these data is always optional, although (the company) reserves the right to indicate those elements that are necessary for the execution of the service requested.

Other ways of providing data
The User is free to provide his or her personal information in contacts with Gobyguide srl to ask for informative material or other information to be provided (e.g. management of requests for the modification of personal data or information on the services offered by Gobyguide). The optional, explicit and voluntary provision of email to the addresses indicated on the Gobyguide websites or through the communication forms, means that that address of the sender, needed to reply to the request, and any other personal data entered in the communication, are subsequently acquired.

Rights of the persons involved
Users may access their data at any time and exercise their rights as specified in article 7, Legislative Decree 196/2003. Gobyguide S.r.l. announces that, pursuant to article 7 of Legislative Decree 196/2003:
1. The User has the right to obtain confirmation as to whether or not personal data relating to him or her
exist, regardless of their being already recorded, and their intelligible communication (to the User).
2. The User has the right to obtain information on:
1. the origin of the personal data;
2. the purpose and methods of the data processing;
3. the logic applied in the case of processing with the assistance of electronic tools;
4. the identifying details of the data controller, managers of the data processing, and designated
representative pursuant to article 5, subsection 2;
3. the subjects or categories of subjects to which the personal data may be communicated or which might
gain knowledge of the data as designated representative in Italy, as managers or as appointed persons.
4. The User has the right to obtain:
1. the updating, rectification or, where interested therein, the completion of the data;
2. the erasure, blocking or transformation into an anonymous form of data which have been
processed unlawfully, including those the keeping of which is not necessary for the purposes for which they
were collected or subsequently processed;
3. the statement that the operations as per a) and b) above have been notified, as also related to their
contents, to the subjects to whom the data were communicated or disseminated, except when the
provision of such information proves impossible or involves a manifestly disproportionate effort compared
with the right that is to be protected.
5. The User has the right to object, in whole or in part:
1. on legitimate grounds, to the processing of personal data relating to him or her, even though
relevant to the purpose of the collection;
2. to the processing of personal data relating to him or her which is carried out for purposes of commercial information or advertising or direct marketing, or else for the performance of market or
interactive commercial communication surveys.

Requests must be sent to the postal address of the Data Controller or by e-mail to the address privacy@gobyguide.com.