Regulatory Compliance

The processing of Personal Data of users of this Site will be carried out in Italy in compliance with:

• General Data Protection Regulation EU/2016/679 (GDPR).
• The Italian Legislative Decree n. 196 of 30 June 2003, regarding the Protection of Personal Data.
• The recommendation n. 2/2001 of the European Data Protection Authorities, to identify the minimum requirements for the collection of personal data online.

The Italian supervisory authority is the "Garante per la protezione dei dati personali", with headquarters in Piazza di Monte Citorio n. 121, 00186 – Roma (https://www.garanteprivacy.it/).

Owner and Data Controller

Following consultation of this Site, data relating to identified or identifiable persons may be processed. The Data Owner of the processing of such data is:

Policy Principles

Each person has the right to the protection of their personal data and in compliance with this right this Privacy Policy provides any useful information to understand how to collect and use the information that identifies users of the Site.

The Owner undertakes to comply with a principle of strict necessity in the processing of data that may identify the User, even indirectly. The Owner does not collect and treat in any way "sensitive data" according to the definition of Reg.UE 679/2016.

Users' Personal Data will be processed by the Data Controller by taking appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The Site has been configured so that the use of personal data is reduced to the minimum necessary and makes use of anonymous data whenever it is possible to pursue the same purposes.

Purposes of Data Processing

The Data Controller and the third party service providers used by it, unless otherwise specified, collect the User Data for purposes strictly related to the provision of its Services. The core purposes are:

• To contact and respond to requests sent by the User.
• To collect statistical data on the use of the Website.
• To satisfy contracts stipulated with the User concerning the purchase or reservation of products and services.
• To display contents concerning their activity from and through other platforms.

To these are added purposes whose purpose is to provide a better experience to the User, such as commenting on contents, interaction with social networks and integration with external platforms.

With the explicit consent of the User, data may be used for sending commercial information via email, surveys on customer satisfaction, market research, promotional activities in general, profiling and analysis of the browsing experience for marketing and promotional purposes.

Collected Data from this Website

The types of Personal Data collected and used for each purpose are indicated in the specific sections of this document. Personal Data collected from this Site may be freely provided by the User or, in the case of Navigation Data, collected automatically during the consultation of the pages of this Site.

Navigation Data

While browsing this Website, some personal data are acquired whose transmission is implicit in the use of Internet communication protocols and for which the User cannot give consent. Some examples of information on the devices we collect include:

• Attributes such as operating system, hardware version, device settings.
• Connection information such as the name of mobile operator or ISP, browser type, language and time zone, IP address.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site, checking its correct functioning, and ascertaining responsibility in case of hypothetical computer crimes against the Site.

Personal Data Explicitly Provided by the User

The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this Site or through pages/areas used for this function involves the subsequent acquisition of the sender's address and any other data included in the message. The User assumes responsibility for third-party Personal Data published or shared via this Website. Examples of data collected include: Navigation data, Name, Surname, Email, Telephone number, Address, ZIP code, Province, Country, State, Requests and additional data.

Data Collected from Third-Party Services

This Website uses third-party services for the purposes indicated in the respective section of this site. The information acquired is in any case subject to the User's privacy settings.

• Google Analytics (Google LLC): Used for evaluating the use of this website, compiling reports, and personalizing ads. IP-address data for EU-based traffic is used solely for geo-location derivation before immediate discard. Processing location: USA. Privacy Policy
• Google Tag Manager (Google LLC): A tag management service allowing this site to integrate other scripts. Processing location: USA. Privacy Policy
• Google Maps (Google LLC): A map visualization service that allows this site to integrate maps and calculate routes based on your location. Processing location: USA. Privacy Policy

Cookies Policy

Cookies are installed inside the browser while browsing a Website and may contain various information, some of which identify User preferences. This Website and its domain https://www.exploringamalficoast.com do not save personal contact details in cookies.

The cookies used by this site are session cookies (which disappear when the browser is closed) and persistent cookies (expire on a pre-established date). They serve the purpose of identifying the User and recording preferences or maintaining site functionality and security. For deactivation modalities, please consult the Cookie Policy.

Data Processing, Sharing & Methods

The processing is carried out through IT and/or telematic tools, automated tools and with organizational and logical methods strictly related to the purposes indicated. Personal Data will be processed exclusively by authorized persons:

• Employees in charge of company organization: administrative, commercial, marketing, legal, system administrators.
• External subjects: technical service providers, mail carriers, hosting providers, IT companies.
• Competent authorities: law enforcement or governmental authorities in cases provided for by law or if strictly necessary to prevent, detect, or prosecute criminal acts and fraud.

The updated list of managers can always be requested at any time at the email address of the Owner and Data Controller.

Place, Communication & Retention Period

Data are processed at the operational headquarters of the Data Controller. Personal Data may be transferred to a country other than that in which the User is located, but will never be transferred outside countries belonging to the European Union unless safeguard clauses or equal levels of protection are guaranteed.

Data are processed and stored for the time required by the purposes for which they were collected:

• Contractual data are retained until contract execution is completed.
• Legitimate interest data are retained until such interest is met.
• Consent-based data are retained until consent is revoked.
• Legal obligations may require data to be retained for longer periods (e.g., at least one year to avoid repetition of improper use).

User Rights

The User can know their rights and be up-to-date on legislation by consulting the Website of the Guarantor for the protection of Personal Data at www.garanteprivacy.it. Under the GDPR, the User has the right to:

• Revoke a previously expressed consent to the processing of personal data.
• Oppose the processing of data if it occurs on a legal basis other than consent.
• Access data and obtain all information on the Data processed.
• Verify and request the correction of personal data.
• Obtain the limitation of treatment under certain conditions.
• Request cancellation or removal (right to be forgotten) of personal data.
• Transfer data to another Data Controller (data portability) where technically feasible.
• Propose a complaint to the competent personal data protection authority or act in court.

Users may exercise their rights at any time by forwarding a request to the Owner and Data Controller via email.

Legal Obligations & Defense in Court

The User's Personal Data may be used for defense by the Owner in court or in stages leading to potential establishment against abuses or related service violations. Furthermore, the Owner reserves the right to share information with regulatory bodies or law enforcement agencies in response to legal requests or to detect, prevent, and resolve unauthorized uses or illegal activities.

Policy Changes, Updates & Legal Notices

The Data Controller reserves the right to modify this Privacy Policy in consideration of regulatory updates. Changes will be binding as soon as published in this section. All documentation retrievable from this Site has been created with care, but users are required to check its accuracy. By accessing this Site, the User implicitly declares to have read, understood, and accepted the Legal Notice and Privacy information.