INFORMATION AND CONSENT TO DATA PROCESSING PURSUANT TO EUROPEAN REGULATION 679/2016

We inform you that the personal data (including sensitive data now described in Article 9) you provide will be processed using both automated and non-automated tools. In any case, processing will comply with EU Regulation 679/2016, including regarding data security, to fulfill the tasks assigned to us, as specified in the current contract and/or to provide the information you requested and/or to comply with specific legal obligations of the data controller. Providing data is optional, but your refusal will prevent us from continuing the execution of the ongoing contract or fulfilling your specific requests.
Specifically, your data is linked to our specific business activity of “Organization, promotion, and sale of tourist packages” and concerns normal relationship activities with customers/suppliers or prospects; no mass marketing activity is planned unless specific and express consent is given.
Data retention (which under no circumstances will exceed 10 years from the last processing/update) is linked to the existence of a supply of goods/services, legal obligations, or the needs of specific processing to which you are a party. It is your right to request the deletion of data when this right does reply conflict with legal obligations.
Your data will be communicated to our authorized personnel necessary for carrying out the tasks assigned to us, to banks or credit institutions for processing and collecting fees, to public institutions or bodies in relation to the assigned tasks and regulatory/legal obligations, to control and public safety bodies if requested, and to any third parties only as a consequence of using them to fulfill the tasks assigned to us.
You have the right to obtain from the data controller the erasure, restriction, updating, portability, and objection to the processing of personal data concerning you, as well as generally the rights provided for by articles 15, 16, 17, 18, 19, 20, 21, and 22 of EU Reg. 679/2016.
The writer does not plan to transfer your data abroad, but any third parties involved in the processing might avail themselves of this possibility.

DATA CONTROLLER
HITCH SRL
Via Alciato, 1 – 22063 Cantù (CO)

DATA PROTECTION CONTACT PERSON
Mr. Massimo Antonioli

CONSENT
Consent for my data to be processed by the writer for the purpose of executing an ongoing or future contract in the manner indicated in the information notice above or to fulfill specific requests. This consent IS NOT REQUIRED because, pursuant to art. 6 paragraph 1 letter b, the processing is considered lawful; it is requested for the greater protection of the data subject’s rights or in the case of processing special categories of data (sensitive, biometric, or judicial). A withdrawal or non-granting of consent implies the impossibility of continuing the relationship.

OPTIONAL CONSENTS
Consent for the writer to use my personal data internally for informational, commercial, and marketing purposes at later times and/or unrelated to the ongoing contract. These communications may also take place with the aid of multimedia tools such as email, SMS, or MMS. In case of lack of consent, there will be no consequences for any ongoing contracts.