In relation to the Visit Torino project, Visit valsusa, Visit canavese & lanzo
With this information, the Joint Controllers intend to provide all the information required by art. 13 of Regulation (EU) 2016/679 (also called GDPR or General Regulation for the Protection of Personal Data), regarding the processing of personal data in the above-mentioned area.

Joint data controllers and DPO - Data Protection Officer

Joint controllers of personal data are:

• the Chamber of Commerce, Industry, Handicraft and Agriculture of Turin (hereinafter, the Chamber of Commerce of Turin), with headquarters in Turin (TO), via Carlo Alberto n ° 16, tel. 011.57161, email protocol.generale@to.legalmail.camcom.it (address also enabled to receive e-mails);
• Ascom Confcommercio di Torino e Provincia (hereinafter, Ascom Torino), with registered office in Turin (TO), via Massena n° 20, tel. 011.5516111, email info@ascomtorino.it;
• Confesercenti of Turin and Province (hereinafter, Confesercenti Torino), with registered office in Turin (TO), Corso Principe Eugenio n° 7/D, tel. 011.52201, email segreteria@confesercenti-to.it.

The Turin Chamber of Commerce has appointed, pursuant to art. 37 of the GDPR, its own DPO - Data Protection Officer (in the Italian translation RPD, Responsible for the protection of personal data), with whom it is possible to contact by writing to the email address rpd1@pie.camcom.it (address also enabled to receive PEC).

Purpose and legal basis of the processing

Your personal data will be processed exclusively for the following purposes:

• sending information on activities, services, events, specific initiatives within the Project, and, in relation to the Turin Chamber of Commerce, also on activities, services, events, specific initiatives to promote tourism further or subsequent to the Project; in relation to this purpose, the legal basis for data processing is consent;
• in relation to Ascom Turin and Confesercenti Turin, transmission of data to the hotels and tour operators chosen by the user to manage booking requests on their own; in relation to this purpose, the legal basis of data processing is represented by the need to manage pre-contractual requests of which the interested party is a party.

Authorized and Data Processors

Personal data will be processed by staff of the Joint Controllers previously authorized for processing and specially trained and trained.The data may also be processed by external subjects, formally appointed by the Joint Data Controller (s) as Data Processors and also belonging to the following categories:

• companies that provide information systems management and maintenance services;
• companies that provide electronic communications services and, in particular, e-mail.

Recipients of personal data

As indicated in the purposes, the data acquired through the contact / booking box are transmitted to the hotels / tour operators selected by the user, who process the data as independent data controllers.

Data retention period

Ascom Torino and Confesercenti Torino will process the data for the entire duration of the project and will delete it within the following year; the Turin Chamber of Commerce will process the data for 10 years and will cancel it upon expiry of the treatment in addition to the time necessary to proceed with the rejection (maximum one year from the end of the treatment).The processing will in any case cease in case of revocation of the consent by the interested parties.

Nature of the provision of data and consequences of any failure to provide it

All the data requested in the contact / booking box are required. Failure to provide it prevents the forwarding of the data and the transmission of the same to the structures / tour operators chosen by the user. 

Transfer of data to non-EU countries

As indicated above, the Joint Controllers may make use, also through their Data Processors, of IT service companies and telematic communications companies that could place or transit the data even in countries not belonging to the European Economic Area. These service companies are selected on the basis of their certifications and their declarations regarding reliability, security and compliance with national and European legislation on the processing of personal data. In particular, in order to guarantee an adequate level of protection of personal data, these companies can carry out the transfer only to countries (or sectors thereof) that have been the subject of specific adequacy decisions adopted by the European Commission, or on the basis of clauses. Standard Contractuals.

YOUR RIGHTS

Regulation (EU) 2016/679 recognizes different rights to each interested party. Among these, provided that the conditions provided for by the legislation are met from time to time (in particular, articles 15 and following of the Regulation) there are: 

• the right to know if the Joint Controllers are currently processing personal data concerning him and, in this case, to have access to the data being processed and to all information relating to it; 
• the right to the rectification of inaccurate personal data concerning him and / or the integration of incomplete ones; 
• the right to delete personal data concerning him; 
• the right to limit the processing of personal data concerning him; 
• the right to object to the processing of personal data concerning him; 
• the right to the portability of personal data concerning him.

Pursuant to art. 26, par. 2, of the Regulations, the interested party also has the right to be able to view the essential content of the joint ownership agreement that governs the relationships between the Joint Controllers. In order to exercise their rights, the interested party may contact any co-owner or the DPO of the Turin Chamber of Commerce, at the addresses referred to in point 1 of this information.In any case, each interested party also has the right to submit a formal Complaint to the Guarantor Authority for the protection of personal data, according to the methods available on the site. www.garanteprivacy.it 

To receive more information on the rights that can be exercised, it is possible to contact the Joint Controllers or the DPO of the Turin Chamber of Commerce directly, or consult the appropriate page on the website of the Guarantor Authority. www.garanteprivacy.it/home/diritti 

This information was updated on: 18.5.2022