(to print, sign and send by email)

INFORMATION ON PERSONAL DATA – PRIVACY (Article 13 GDPR Reg. (EU) 679/2016)

Pursuant to art. 13 of EU Regulation 2016/679 (hereinafter “GDPR 2016/679”), laying down provisions for the protection of persons and other subjects regarding the processing of personal data, we inform you that the personal data provided by the user will be processed in compliance with the aforementioned legislation and confidentiality obligations. It is also noted that:

1 – Data Controller: the Data Controller is Mr. Matteo Marchionni legal representative pro tempore of the homonymous company “That’s Marche di Marchionni Matteo” with registered office in Pesaro (PU), Italy, postal code 61122, Via Strada Liliano Cassiani n. 6, registered with the Pesaro Chamber of Commerce with REA PS – 263369, VAT number 02717430413 and PEC email: matmarchio85@pec.it. MAIL: mat@thatsmarche.com and website www.thatsmarche.com.

2 – Data Processor: the Data Processor is Mr. Matteo Marchionni, owner of the individual company of the same name or the suppliers of the services connected to the package and / or tourist services covered by the contract.

3 – Purpose of the processing: the personal data provided are necessary for the completion of the purchases of services and / or tourist packages on its Website www.thatsmarche.com and in the online and paper contractual forms, as well as for the obligations required by law ; in particular: a) possible registration on the website and provision of services, b) sending commercial information (direct marketing), c) acquiring data on the user’s habits (profiling), d) information on health conditions and / or age and / or specific medical conditions for the sole purpose of verifying the compatibility of the User with the tourist offer offered; e) market surveys and f) any other purposes with the explicit consent of the interested party.

4 – Provision of data, refusal and revocation: the provision of the user’s personal data is necessary for the purpose of carrying out the activities referred to in the preceding point and any manifestation of refusal (or revocation of consent) to the processing involves the ‘impossibility of carrying out the same activities.

5 – Processing and storage methods. Duration: the processing will be carried out in analog (paper) and digital (by means of IT tools), in compliance with the provisions of art. 32 of the GDPR 2016/679 regarding security measures, by the Data Controller and / or by persons specifically appointed including companies that carry out outsourced activities, management of websites or cloud computing services, external suppliers, professionals and consultants who are appointed as data processors in compliance with the provisions of art. 29 GDPR 2016/679; in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, subject to the release of free and explicit consent expressed at the bottom of this information, the user’s personal data will be processed and stored for the time necessary to achieve the purposes for which they are provided and, in any case, for the period of time required by law, including for tax purposes, no more than 10 (ten) years.

6 – Scope of communication and dissemination: the data collected will not be disclosed and will not be communicated without the explicit consent of the user, except for the necessary communications that may involve the transfer of data to public bodies and / or suppliers of tourist services ( by way of example but not limited to: Hotels, accommodation facilities, renters, etc.), for the fulfillment of the purposes referred to in the points of this information.

7 – Transfer of personal data: the data will not be transferred to member states of the European Union or to third countries not belonging to the European Union; if the need arises, the Data Controller will ask the user to give explicit consent; the site www.thatsmarche.com is hosted in the datacenter of the company NAME HERO based in Amsterdam. The paper and / or digital data are stored at the headquarters of “That’s Marche di Marchionni Matteo” in Pesaro (PU), Italy, CAP 61122, Via Strada Liliano Cassiani n.6, or on physical supports therein google or similar with datacenter in the territory of the European union.

8 – Particular categories of personal data: in mind of articles 9 and 10 of EU Regulation 2016/679, you will not be required to provide data that can be qualified as “particular categories of personal data” (formerly “sensitive data”), ie those data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data intended to uniquely identify the person, data relating to health or sexual life or sexual orientation , data regarding criminal convictions, crimes or security measures; in any case, if such data is requested for the purposes of the travel contract or tourist service, they can be processed only with the free and explicit consent of the user concerned, expressed in writing at the bottom of this information and exclusively for the purposes of the service contract and / or tourist travel.

9 – Existence of an automated decision-making process, including profiling: automated decision-making processes are used, including profiling with technical, analytical and marketing purposes through cookies (see the so-called “Cookie Policy”), as well as Google Analytics with anonymized IP, of referred to in Article 22, paragraphs 1 and 4, of EU Regulation 679/2016. The interested party has the right to request the intervention of the Owner and to be able to express their opinion, even contest the final decision.

10 – Rights of the interested party: at any time, the user may exercise, pursuant to articles 15 to 22 of EU Regulation 2016/679, the right to: a) request confirmation of the existence or otherwise of their personal data ; b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period; c) obtain the correction and deletion of data; d) obtain the limitation of the processing; e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without hindrance; f) oppose the processing at any time and also in the case of processing for direct marketing purposes; g) oppose an automated decision-making process relating to individuals, including profiling; h) ask the data controller to access personal data and to correct or delete them or limit their processing or to oppose their processing, in addition to the right to data portability; i) revoke the consent at any time (even if the revocation will make it impossible to continue the contractual relationship), without prejudice to the lawfulness of the treatment based on the consent given before the revocation; j) lodge a complaint with a supervisory authority (Guarantor for the protection of personal data – www.garanteprivacy.it).

* * *

The interested user, (name), (surname), (date and place of birth), (tax code), (residence)

_________________________________________________________,

(on his own and / or in the capacity of exercising parental authority / guardian or other of

_________________________________________________________)

having read the above information, declares to have understood and accepted it and expresses to

⃝  ALLOW     ⃝ DO NOT ALLOW

to the processing of personal data that are provided in relation to the purposes indicated in art. 3, lett. “A” of this information; he also declares to have read and understood and to this end of:

⃝  ALLOW     ⃝ DO NOT ALLOW

the use of personal data provided for the performance of direct marketing activities, i.e. aimed at carrying out direct sales activities, including by telephone, or for the placement of products or services, for sending commercial information, advertising material and / o information with traditional methods (mail and / or operator call) or through automated contact systems (sms, mms, whatsapp, email, fax, etc.) (Article 3, letter “b” of this information);

⃝  ALLOW     ⃝ DO NOT ALLOW

the use of personal data provided for the detection of consumption preferences and the analysis (including studies and market research) also in personalized, automated or electronic form, of the information acquired through the use of the products and / or services used ( art. 3, lett. “c” and “e” of this information);

⃝  ALLOW     ⃝ DO NOT ALLOW

the use of personal data provided relating to health conditions, disabilities, intolerances for the sole purpose of evaluating the adequacy of the tourist offer covered by the travel / tour / tourist services contract and the booking and / or programming of specific services (art . 3, letter “d” of this information);

⃝  ALLOW     ⃝ DO NOT ALLOW

the use and / or publication in any digital, computer or paper mode and platform, of photographs and / or videos depicting the user or the exerciser, even if they are a minor, taken and / or filmed during the course of the tour or travel package by the Owner;

⃝  ALLOW     ⃝ DO NOT ALLOW

the use of automated decision-making processes, including profiling for technical, analytical and marketing purposes using cookies, as well as Google Analytics with anonymized IP.

Attach a copy of your identity document or passport.

Place, Date

______________________

___________________________________________

(Sign)