Privcy policy

Privacy policy

Information provided pursuant to art. 13-14 of the GDPR (General Data Protection Regulation) 2016/679

We inform you that, for the establishment and execution of ongoing contractual relationships with you, our organization is in possession of your data, also acquired verbally, directly or through third parties, classified as personal by the Europe Regulation 2016/679 from ( GDPR).

According to the legislation indicated, this processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

Pursuant to article 13 of the GDPR 2016/679, we therefore provide you with the following information:

Nature of the data processed: We process your personal, fiscal and economic data necessary for the performance of existing or future contractual relationships with your company and natural person as well as to achieve effective management of commercial relationships.

The data are processed without your express consent (art. 24 letter a, b, c Privacy Code and art. 6 letter b, e GDPR), only and exclusively for the following Service Purposes: fulfill pre-contractual and contractual obligations and tax deriving from existing relationships with you; fulfill the obligations established by law, by a regulation, by community legislation or by an order from the Authority; exercise the rights of the Owner, for example the right of defense in court.

The computer systems and software procedures used to operate this website acquire during their normal operation some personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error…) and other parameters relating to the operating system and the user’s IT environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.

The data could also be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

We are not in possession of your data that can be classified as particular or of a judicial nature (articles 9 and 10 of the GDPR).

Purpose of processing and duration: Your data is processed for the entire duration of the contractual relationship and also subsequently, for contractual needs and related fulfillment of legal and fiscal obligations, and for effective management of financial and commercial relationships, operations indicated in art. 4 Privacy Code and art. 4 no. 2) GDPR.

The Data Controller will process the personal data for the time necessary to fulfill the purposes indicated above and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes.

Processing methods: The processing will be carried out both with manual and/or IT and telematic tools with organization and processing logic strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organizational, physical and logical measures envisaged by the provisions in force.

Obligation or right to provide data: With regards to the data that we are obliged to know, in order to fulfill the obligations established by law, their failure to provide them on your part makes it impossible to establish or continue the relationship, within the limits in to which such data are necessary for the execution of the same.

Scope of knowledge of your data: The following categories of subjects may become aware of your data, as managers or persons in charge of processing, appointed by the undersigned company, data controller: managers, administrators and auditors; internal secretarial offices; accounting and invoicing staff; service marketing staff; agents and representatives.

Communication and dissemination: Your data will not be disclosed by us to indeterminate subjects by making them available or consulting them. No data deriving from the web service (therefore navigation data specified above and cookies) is communicated or disseminated (except for communication to judicial or police bodies if necessary).

Your data may be communicated by us, to the extent of their respective and specific competence, to entities and in general to any public or private entity with respect to which there is an obligation for us (or faculty recognized by laws or secondary regulations or community) or need for communication, as well as to our consultants, within the limits necessary to carry out their duties at our organisation, subject to our letter of appointment which imposes the duty of confidentiality and security.

Your rights : In your capacity as an interested party, you have the rights referred to in the art. 7 Privacy Code and art. 15 GDPR and precisely the rights of:

1. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
2. obtain indication of : a) the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the owner, managers and representative designated pursuant to art. 5, paragraph 2 Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representatives in the territory of the State, managers or agents;

III. obtain : a) updating, rectification or integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this requirement is proves impossible or involves a manifestly disproportionate use of means compared to the protected right;

1. object, in whole or in part : a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by email and/or by traditional marketing methods by telephone and/or paper mail.

Where applicable, you will also have the rights referred to in the articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limit processing, right to data portability, right to object), as well as the right to complain to the Guarantor Authority. at any time you can obtain confirmation of the existence or otherwise of personal data concerning you and the communication of such data and the purposes on which the processing is based. Furthermore, you can obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as the updating, rectification or, if you have an interest in this regard, integration of the data. You may object, for legitimate reasons, to the processing itself.

We kindly ask you to promptly report any changes to your personal data to the company’s office in order to comply with the art. 11, letter (c) of the aforementioned legislation, which requires that the data collected be accurate and, therefore, updated.

The data controller is 

UNION MANAGEMENT GROUP SRL address Via Saldo D’Acquisto 5/7 – 20864 Agrate Brianza MB – VAT 12478950962.

The Data Controller, who can be contacted to exercise rights and/or for any clarifications regarding personal data protection, can be reached at the address: info@desertadventures.eu