Privacy Policy

PRIVACY NOTICE

Pursuant to EU Regulation 679/2016

Dear Client,

EU Regulation 679/2016 lays down rules relating to data protection: your personal data will be processed in compliance with this Regulation, respecting your fundamental rights and freedoms, as well as your dignity, particularly in observance of the principles of fairness, lawfulness and transparency.

We inform you that:

1. The data you provide will be processed in your interest for the following purposes:

• activities related to the services you requested, in particular, the organization of holidays; your refusal will make it impossible for us to provide you the requested service;
• to comply with legal and accounting or administrative obligations and for the management of contracts and litigation (mandatory conferment); your refusal will make it impossible for us to provide you the requested service;
• sending communications, notices or newsletters regarding new initiatives and services of our company, associated companies, partners or clients (optional conferment).

1. In accordance with security requirements, your data may also be processed through computer systems, as well as in a printed form or as images: the processed data will not be transferred outside the European Union.
2. Your personal data are provided through your explicit consent to data processing. The data will be kept for 10 years after the end of the present contract.
3. Processing typically concerns personal data. Your personal data will not be disseminated and will be protected according to the security measures set out by the law.
4. If it is necessary in order to deliver a procedure and/or service in your interest and to which you agreed, we may share your data with:

• public, welfare or insurance organizations, associations or other public or private entities exclusively for the purpose of fulfilling specific legal obligations;
• other professionals outside our company for the fulfillment of the activities with the purposes indicated above.

1. The data controller is PB Oasis srl, via del Lido 76 Casalecchio di Reno BO .A Data Protection Officer (DPO) is not required given the type of data processing performed.
2. As the interested party you have the following rights:

• right to be informed: even before data collection you have the right to know how your data will be collected, processed and stored and for what purpose;
• right of access to data (Art. 15): after their collection, you have the right of access to your data and the right to know how they have been processed and for what purpose;
• right to rectification (Art. 16): you have the right to correct your data if they are inaccurate or incomplete;
• right to erasure or ‘right to be forgotten’ (Art. 17): you have the right to have your personal data erased forever (except for compliance with other legal obligations, especially in the case of reporting to public institutions or data protection authorities);
• right to restrict processing (Art. 18): you can restrict or block the use of your data;
• right to data portability (Art. 20): you have the right to move, copy or transfer your personal data;
• right to object: you have the right to prohibit your data from being processed without your explicit consent;
• right to object to automated decisions: you have the right to not be subject to decisions based solely on automated processing, including profiling.