Personal data processing shall mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data such as the collection,
storing, organisation, structuring, retention, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other means of making the data available,
comparison or interconnection, limitation, deletion or destruction. Data which, pursuant to Article 9 of the GDPR, may fall under the definition of 'special categories of personal data' may also be requested,
i.e. data that reveals the racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade-union membership, data concerning health or sex life or sexual orientation of the person.
These categories of data shall only be processed by the Data Controller subject to prior consent.
The personal data processed is as follows:
Data required for the use of the platform
When the user registers on the reserved area of the website, the Data Controller shall process the following personal data:
- personal information [first name, last name, email address, date of birth, place of birth, nationality, tax code number, gender, land line phone, mobile phone, domicile, residence, details of the user's photo ID, credit/debit card]
- information on social media accounts [Facebook, Google]
- special data categories (sensitive) [disabilities, diseases, religion]
Data necessary for subscription to the newsletter
Personal data processed for subscribing to the newsletter, directly or through the use of the user's Facebook profile, is as follows: First Name, Last Name, Email.
Information systems and software procedures operating this website acquire, during normal operations, some personal data whose transmission is implicit when using Internet communication protocols.
This data category includes IP addresses or the domain names of computers and terminals used by users, URI/URL addresses (Uniform Resource Identifier/Locator) of resources requested, time of the request,
method used to submit the request to the server, size of file obtained in response, the numerical code indicating response status given by the server (successful, error, etc.) and other parameters related to the user's
operating system and computer environment. Such data, necessary for the use of the web services, is also processed in order to:
- obtain statistical information on the usage of the services (most visited pages, hourly or daily visitors, geographical areas of origin, etc.);
- verifying the correct operation of the services offered.
Navigation data shall not be retained for more than 365 days and is deleted immediately after the aggregation of such data (except where needed by judicial authorities to investigate any eventual offences).
Data provided by the user
The optional, explicit and voluntary sending of messages to the website's contact details involve the acquisition of the sender's contact data, necessary to respond to their request,
as well as of all personal data included in the communications.
The user is entitled to register on the portal to take advantage of specific services offered by the Data Controller in the reserved area of the website.
Cookies and other tracking systems
Please refer to the detailed information available at the following link: https://www.lol.travel/it/cookie
Data required to use the sms service
Activation of the SMS service, which is optional and can be activated only and exclusively at the request of the user and is aimed at receiving information relating to their booking through this channel, entails the acquisition of the sender's contact details, including the mobile phone number, necessary for replying, as well as all the personal data included in the communication. The user has the option of registering on the portal to take advantage of the services offered by the Data Controller in the reserved area. The service is activated upon payment and at the request of the user only and limited to the individual booking for which the activation of the service is requested in the purchase phase of the tourist service.