Purposes of processing, lawfulness of processing and obligatory or optional nature, data storage period
The processing of data, when necessary following specific consent, has the following purposes:
a) Replying to requests for information, making bookings and/or providing services requested. The legal basis of processing for such purposes is provided by Art. 6 (1) (b) of the GDPR (performance of a contract) as processing is necessary in order to meet the requests of the data party or provide services for the same. Providing personal data for this purpose is optional but failure to do so would imply the impossibility to receive replies to requests or to activate the services provided by the website. Any personal data processed for such purposes will be kept for the period of time strictly necessary to achieve the aforementioned purposes.
b) To comply with any legal, accounting or fiscal obligations. The legal basis of processing for such purposes is provided by Art. 6 (1) (c) of the GDPR (compliance with a legal obligation). Providing personal data for this purpose is optional. Once personal data has been provided, processing is necessary in order to comply with a legal obligation to which the controller is subject. Any personal data processed for such purposes will be kept for the period of time strictly necessary to comply with a specific legal obligation or applicable law.
c) To carry out marketing activities. The data provided will be processed, further to explicit and specific consent, to send promotional and marketing communications, including newsletters, using automated tools or other. The legal basis of processing for such purposes is provided by Art. 6 (1) (a) of the GDPR (consent of the data subject). Providing data for direct marketing activities is optional resulting from choices freely expressed by the data subject; failure to provide consent for such purposes will not jeopardize fruition of other services. Any personal data processed for such purposes will be kept until revocation of consent by the data subject or, in the event of failure to revoke consent, for a maximum time period of 10 years.
