|

Privacy Policy

This Website collects some Personal Data from its Users.

Summary of the Privacy Policy - Personal Data processed using the following services:

Contact form on the website
Personal Data: last name; first name; email; phone number

Booking engine
Personal Data: last name; first name; email; phone number; credit card

Google Analytics 4 Google Ireland
Personal Data: Usage Data

1. INTRODUCTION
We respect your privacy in accordance with Regulation (EU) 2016/679 (of the European Parliament and Council on the protection of individuals regarding the processing of personal data and the free movement of such data). Our aim is to protect and safeguard your personal data when you interact with our website.

2. WHO ARE WE?

  • The Data Controller is the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (Article 4, paragraph 1, point 7 of Regulation (EU) 2016/679).
  • The Data Processor is a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller (Article 4, paragraph 1, point 8 of Regulation (EU) 2016/679).

Data Controller:

Data Processor:

  • QUOVAI SRL Via Custoza, 13 - 56040 Monteverdi Marittimo (PI)
  • Email: supporto@quovai.com
  • VAT: 01871320493

3. WHAT INFORMATION DO WE COLLECT AND USE?
Personal Data: Information that identifies or makes an individual identifiable, directly or indirectly, and may provide information about their characteristics, habits, lifestyle, personal relationships, health status, economic situation, etc.

We do not collect your personal data during anonymous browsing of the site. We collect your data (provided voluntarily) to provide you with services.

(A) For our online shop service, we collect the following information:

  • first and last name
  • email address
  • mobile number
  • credit card data

(B) If you submit an information request or any other type via our contact form, the following information is collected to provide feedback:

  • first and last name
  • email address and/or mobile number
  • any information voluntarily disclosed (by you in the free text sections) that may contain special data such as disabilities, need for assistance, etc.

QUOVAI S.r.l. does not collect or process personal data qualified as "special data" (such as data revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of associations or organizations of a religious, philosophical or trade union nature, or data revealing health status or data relating to criminal convictions and offenses), unless you have given your explicit consent, which may be the case when submitting an information request (case (B)). For operational and maintenance needs, this site may collect system logs, i.e., files that record interactions and may also contain personal data, such as the IP address.

The data you provide via the portal will be processed for the following purposes (among others): responding to information requests and managing support requests; providing sales or booking services; sending information on future events; managing payments; keeping statistics to measure the portal's performance in an aggregated and anonymous form (they do not allow in any way the identification of the individual). Your credit card details (name and surname, card number, and expiration date) are collected through the Stripe payment gateway (stripe.com/it) and are stored in encrypted form until the service is provided.

4. ON WHAT LEGAL BASES DO WE PROCESS YOUR PERSONAL DATA?
We collect, use, and share the data in our possession as described based on the following legal bases:

  • The processing is lawful if it is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject. Administrative and accounting purposes are expressly included. This context also includes the service provided by the administrative part and, therefore, the processing of the data subject's personal data for managing the booking and sending responses to assistance requests. The legal basis is based on Article 6 para. 1 lett. b) of Regulation (EU) 2016/679.
  • Consent to the processing of one's personal data for one or more specific purposes (for example, sending promotional material via email following voluntary registration to the newsletter). For this purpose, you must express your consent, which can be revoked at any time. The legal basis is based on Article 6 para. 1 lett. a) of Regulation (EU) 2016/679.

Mailing list to receive information:
During the booking procedure, your email address is entered into a contact list (with prior consent) to which email messages may be sent. Our legitimate interests include our interest in providing you with a safe and effective service. Art. 130 paragraph 4 of the Privacy Code also allows the sending of promotional communications via email to customers (current or former customers) to advertise services similar to those previously purchased (so-called soft spam). There is the right to opt-out. The legal basis is based on Article 6 para. 1 lett. f) of Regulation (EU) 2016/679.

5. DATA PROCESSING LOCATION
The data processing related to the web service provided by QUOVAI S.r.l. takes place at the company's headquarters and on the Data Centers of the company HETZNER located in Germany. No data transfer occurs outside the European Union.

The Platform may share some of the collected data with services located outside Italy, specifically the Google Analytics service. Google Analytics 4 is a web analytics service provided by Google Inc. ("Google") with the data processing location in Ireland. Google uses the collected personal data to track and examine the use of the site, compile reports, and share them with other services developed by Google. This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the IP addresses of users within the member states of the European Union or in other countries that are part of the European Economic Area agreement.

6. WHAT KIND OF PERSONAL INFORMATION DO WE DISCLOSE TO THIRD PARTIES?
We DO NOT disclose, transfer, or sell your personal data to companies or third parties not directly involved in the main purposes of our activity. Your data will be known by our employees. Additionally, other recipients include subjects we use to execute the contract; subjects providing services for managing the platform; subjects providing legal and/or tax and accounting consultancy activities; competent authorities and supervisory and control bodies for fulfilling legal obligations; and Public Administrations for their institutional purposes.

The subjects belonging to the above categories operate, in some cases, in total autonomy as distinct Data Controllers, in other cases, as Data Processors specifically appointed by the Data Controller in compliance with Article 28 of Regulation (EU) 2016/679. However, we may be forced to disclose personal data following a request from the Judicial Authority, as well as for the purpose of preventing fraud or crimes in general or if we believe that such action is necessary to protect our business.

7. COOKIES
For information related to Cookies, please refer to our specific Cookie Policy.

8. HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We retain your personal data for the time necessary to carry out the operations inherent to the Data Controller's activity in compliance with Regulation (EU) 2016/679. The processing of personal data is carried out mainly using IT tools for the time strictly necessary to achieve the purposes for which the data was collected and for the subsequent 10 years from the date of acquisition. Upon expiration, online data will be deleted or anonymized by our supplier QUOVAI S.r.l unless there are further purposes for retention. We must retain your tax data for the 10 years required by Italian law. After this period, there is no longer a legal basis for further retention, so we delete them. We do not collect special categories of personal data. However, if such information is entered in a free text section of the site or in emails sent to us, it will be retained (if identified and recognized) for the time strictly necessary to achieve the initial purposes.

9. HOW DO WE PROTECT YOUR PERSONAL DATA?
To prevent unauthorized access to your personal data and to maintain its accuracy, we commit to implementing appropriate security measures that protect its confidentiality, integrity, and security. It is important to note, however, that no Internet transmission can ever be 100% secure. In areas of the sites where personal data is collected, Secure Socket Layer (SSL) technology is used, ensuring that all communications between the user's computer and us cannot be intercepted or deciphered.

By convention, Internet addresses (URLs) that involve an SSL connection start with https:// instead of http://. Additionally, in most common browsers, a green padlock icon is shown to the left of the URL to indicate that a full SSL connection has been established between the user's browser and our Platform. If your browser does not support SSL technology, you should update it to the latest version.

10. HOW DO WE HANDLE THE PRIVACY OF YOUR MINORS?
The Platform is directed at a general audience and does not offer services directed at minors. Minors under the age of 18 must NOT provide us with information or personal data. If we discover that a minor has provided us with personal data without parental or guardian authorisation, we will immediately delete such information.

11. WHAT ARE YOUR RIGHTS?
Under Regulation (EU) 2016/679, you may, according to the methods and within the limits set by current legislation, exercise the following rights by addressing a request to the Data Controller's contact details:

- Access your personal data;
- Withdraw consent;
- Object to the processing of your personal data (when it occurs on a legal basis other than consent);
- Verify and request rectification;
- Obtain restriction of processing (in which case we will not process your data for any other purpose than storage);
- Obtain the deletion or removal of your personal data;
- Request data portability;
- File a complaint.

Requests should be addressed directly to us as the Data Controller. We strive to respond to all legitimate requests within a month. Occasionally, it may take more than a month if your request is particularly complex. If you believe that the processing of your data violates privacy laws or that your rights have been infringed in any way, you can contact the supervisory authority:

Garante per la Protezione dei Dati Personali: Piazza di Monte Citorio n. 121, Rome, 00186, Italy Telephone number: 06-69677-3785 Website: http://www.garanteprivacy.it/

12. HOW CAN YOU CONTACT US?
For any requests related to the processing of your personal data, you can

- Email us at supporto@quovai.com
- Call us at +39-02-87198048

13. CHANGES TO THIS PRIVACY POLICY
This Privacy Policy is effective as of the date indicated at the beginning of the document. The Data Controller may modify this Privacy Policy at any time; if so, we will publish the updated version here and change the effective date below.

Privacy Policy - 2024.06