This is to inform you that this website collects personal data of its users. The data is processed pursuant to the criteria laid down by the European regulation on personal data protection, Regulation (EU) 2016/679, in force since 25 May 2018 (hereinafter, G.D.P.R). According to the aforementioned regulation, the processing must be guided by principles of correctness, lawfulness and transparency, and protection of your confidentiality and your rights.
Preamble: The role of Parco Natura Viva Garda Zoological Park S.r.l. and Skiperformance AS in the processing of personal data collected through the Shop
Skiperformance manages the sales carried out within the context of PNV’s Shop (e.g., management of orders, ticket sale, and other activities necessary to the sale of tickets through the Shop). To be able to access the reserved services, including the purchase of products, it is necessary to register with the Website.
The following privacy policy is addressed to all the persons who visit and interact with this website of the Parco Natura Viva Garda Zoological Park S.r.l. company (“PNV”), the so-called web shop (“Shop”), where PNV tickets can be purchased online. The Shop is managed, at the behest of PNV, by Skiperformance AS ("Skiperformance"), which sells the PNV-branded tickets marketed on the Shop.
Data Controller
The Data Controller is Parco Natura Viva Garda Zoological Park S.r.l., in the person of its legal representative pro tempore, with registered office situated in Loc. Figara, 40, 37012, Bussolengo, Verona. Tel: 045 7170113 - Fax: 045 6770247 - Email: info@parconaturaviva.it
E-mail Address of the Data Controller
Privacy@parconaturaviva.it
Categories of data collected
The personal data processed by this Application include: Name, Surname, Address, E-mail address, Telephone number, City and Province.
The Personal Data may be freely provided by the User to make use of the online ticket service or, in the event of Usage Data, automatically collected during use of this Website.
Unless otherwise specified, all the Data requested by this Website is mandatory. If the User refuses to communicate the same, it might prove impossible for this Website to provide the Service. In those instances where this Website indicates some Data as optional, Users are free to refrain from communicating it, without affecting in any way the availability of the Service or its operation.
If Users entertain any doubts on which Data is mandatory, they are encouraged to contact the Data Controller.
Any use of Cookies – or other tracking tools – by this Website, unless otherwise specified, aims to provide the Service requested by the User, as well as to fulfil the other purposes described in this document and in the Cookie Policy.
The User is liable for the Personal Data of third parties obtained, published or shared through this Website and warrants that he/she has the right to communicate or disseminate it, thereby releasing the Data Controller from any liability vis-à-vis third parties.
Purpose and legal ground of the processing
PNV and Skiperformance will process your personal data in order to manage access to the Shop services and facilitate the online purchase of tickets; as well as to enable you to register with the Shop and conclude any purchase contract through the Shop.
More specifically:
1. Processing of data by Skiperformance to access and register with the shop for the purpose of concluding a purchase contract through the PNV shop. Skiperformance will process your personal data to:
- enable registration with the Shop and use of the services reserved for registered users, including the possibility of making purchases online through the Shop;
- enable the conclusion of the purchase contract through the Shop;
o enable you to access the Shop, including as user not logged in, and browse inside the Shop;
- enable you to register with the Website, creating an account, and utilise the services reserved for registered users, such as, in particular, the possibility of making purchases through the Shop;
- enable you to access the Shop and browse inside the Shop as logged-in user;
- maintain and manage your account.
The legal ground for this processing is the implementation of the contract or, depending on the case, the execution of pre-contractual measures adopted at the data subject’s request (Article 6.1.b) of the Regulation).
Provision of the data for the purpose in question is optional: there is in other words no legal or contractual obligation to communicate the data; since, however, processing it is necessary to enable access to the Shop and/or browsing inside the Shop and/or performance of account management and maintenance services, as well as the conclusion of a purchase contract through the Shop, the failure to communicate the data will entail the impossibility for the user to access and/or browse through the Shop and/or register with the Shop and utilise the services reserved for registered users and/or conclude a purchase contract through the Shop.
2. Processing of data by Skiperformance for the purpose of executing a purchase contract. Skiperformance, as data supervisor, will process your personal data to:
- give effect to the obligations on Skiperformance arising from the purchase contract concluded through the Shop, including, but not limited to, the delivery of tickets sold;
- enable you to comply with the obligations on your person arising from the purchase contract concluded through the Shop, including, but not limited to, payment, online as well, for the tickets bought.
The legal ground for this processing is the implementation of the contract (Article 6.1.b) of the Regulation).
Provision of the data for the purpose in question is optional: there is in other words no legal or contractual obligation to communicate the data; it is, however, a necessary requirement for the conclusion of the purchase contract through the Shop: failure to communicate the data will accordingly entail the impossibility for the user to conclude such contract and thus to make purchases through the Shop.
3. Processing of the data by PNV for administrative-accounting and tax-related purposes. PNV, in its capacity as Data Controller, will process users’ data for the purpose of fulfilling administrative and/or accounting and/or tax obligations associated with performance of the Shop services and/or the purchase contract concluded through the Shop, including, but not limited to, keeping accounting records and issuing sales invoices.
The legal ground for this processing is compliance with the legal obligations PNV is subject to (Article 6.1.c) of the Regulation).
Provision of the data for the purpose in question is mandatory, since its processing is necessary to enable PNV to comply with legal obligations resting on it. Any refusal to provide the data for this purpose will entail the impossibility for the user to utilise the services of the Shop and, in particular, to conclude the purchase contract through the Shop.
4. Processing of data by PNV for marketing and customer profiling purposes. PNV, in its capacity as Data Controller, will process your personal data for:
a. PNV might also process your contact details, your Interests and any other personal data you will freely provide us with, to send you commercial communications in line with your preferences, based on a specific customer profile;
b. Profiling activity related to purchasing behaviour and market researches.
The legal ground for this processing is consent to the processing of one’s data (Article 6.1.a of the Regulation). Consent to this processing is requested at the time of making a purchase through the Shop.
Provision of the data for the purpose in question is optional, and failure to express the consent relating to this purpose does not therefore undermine any processing for the abovementioned purposes. It should be borne in mind that if consent is expressed the regulation stipulates that the same may be revoked at any time, without affecting the lawfulness of the processing founded on the consent granted before the revocation. The consent may be revoked by sending an email to Privacy@parconaturaviva.it
5. Processing of data by PNV for purposes of legitimate interest of the Data Controller, more specifically, access control for safety and organisational reasons.
The legal ground for this processing is the legitimate interest in the processing of one’s data (Article 6.1.f of the Regulation)
Provision of the data for the purpose in question is mandatory.
It is in any event always possible to ask the Data Controller to clarify the concrete legal ground of each processing and specify, in particular, whether the processing is founded on the law, stipulated by contract, or necessary to conclude a contract.
Data storage period
With regard to the purposes referred to in the preceding section headed: “Purpose and legal ground of the processing”, the Data Controller/Supervisor will store:
1. The Personal Data collected for purposes linked to access to and registration with the shop and aimed at the conclusion of a purchase contract through the PNV shop, in which case Skiperformance will process the user’s data for the period strictly necessary to performance of the individual processing activities (e.g.: the registration data will be processed only when the account is closed, keeping in mind the technical times necessitated by it; the data necessary to the conclusion of the contract until delivery of the ticket or, in the event of failure to deliver it, until termination of the contract).
2. The Personal Data collected for purposes of performing the purchase contract; in this case, Skiperformance will process your data for the time strictly necessary to perform the individual processing activities (e.g. the data necessary to implement the purchase contract until delivery of the ticket or, in the event of failure to deliver it, until termination of the contract), without prejudice to the fact that, once such term has expired, PNV may store the data for the purposes and for the maximum storage periods stipulated by the Regulation and/or by the law.
3. The Personal Data collected for administrative-accounting and tax purposes; for this reason, PNV will process the user’s data until expiry of the deadlines stipulated by law for fulfilment of each administrative-accounting and tax obligation, and/or for the storage times laid down by the law for storage of the relevant documentation.
4. The Personal Data collected for marketing purposes based on the User’s consent; for this reason, PNV may store the Personal Data longer until such consent is revoked. The Data Controller might be obliged to store the Personal Data for a longer period to comply with a legal obligation or by order of an authority. The data relating to the purchase details will be stored no longer than 24 months for direct marketing purposes and no longer than 12 months for the analysis of purchasing behaviour. Any other data is stored for the time required by the rules applicable to the processing in question, especially with regard to regulatory obligations of a tax and accounting nature.
5. The Personal Data collected for purposes traceable to the Data Controller’s legitimate interest will be retained until such interest has been fulfilled. The User may obtain additional information on the legitimate interest pursued by the Data Controller under the relevant sections of this document or by contacting the Data Controller.
At the end of the storage period, the Personal Data will be erased. Accordingly, once such term has expired, the rights of access, erasure and rectification and the right to Data portability may no longer be exercised.
Processing method
The Data Controller adopts the safety measures suitable for preventing the unauthorised access to, dissemination, amendment or destruction of the Personal Data. The processing is carried out through IT and/or electronic tools, pursuant to organisational methods and a logic closely associated with the aforementioned purposes. Besides the Data Controller, the Data might in some instances be accessed by other persons involved in the organisation of this Website (administrative, commercial and marketing staff, lawyers, system administrators) or by external persons (such as third party technical service providers, e.g. providers of turnstiles and magnetic cards, owners of payment platforms, hosting providers, IT companies) appointed, if need be, even as Data Supervisors by the Data Controller. The updated list of Data Supervisors may always be requested from the Data Controller.
Place of processing
The Data is processed at the operational headquarters of the Data Controller/Supervisor. For more information, please contact the Data Controller.
The User’s Personal Data may be transferred to a country other than the one in which the User is located, including third countries (outside the EU) as well. To obtain further information on the processing place, the User may refer to the section concerning the details about Personal Data processing.
If one of the aforementioned transfers has taken place, the User may request information from the Data Controller by contacting it through the contact details set out at the beginning.
Categories of data recipients
The data will be exclusively processed by:
• persons authorised by the Data Controller under Article 29 of the GDPR;
• duly appointed external persons who undertake activities on the Data Controller’s behalf, including but not limited to: credit institutions and related external companies;
Provision is made for communication to third parties, institutions, public offices or public administrations by virtue of legal obligations. The Data Controller might resort, subject to prior consent, to automated processes, profiling included, to fulfil the purposes envisaged in this privacy policy.
User Rights
Users may exercise specific rights in respect of the Data processed by the Data Controller.
In particular, the User is entitled to:
• revoke consent at any time. The User may revoke consent to the processing of his Personal Data previously expressed by him/her.
• object to the processing of his/her own Data. The User may object to the processing of his/her Data whenever that occurs on a legal ground other than consent. Further details on the right of objection are set out in the section below.
• access his/her own Data. The User is entitled to obtain information on the Data processed by the Data Controller on specific aspects of the processing, and to receive a copy of the Data processed through use of the specific procedure available on the website.
• check and request rectification. The User may check the correctness of his/her own Data and request its update or rectification.
• obtain the restriction of the processing. When certain conditions are met the User may request the restriction of the processing of his/her own Data. In that case, the Data Controller will not process the Data for any purpose other than its storage.
• obtain the erasure or removal of his/her Personal Data. When certain conditions are met the User may request the erasure by the Data Controller of his/her own Data.
• receive his/her own Data or have them transferred to another Data Controller. The User is entitled to receive his/her own Data in a structured format, commonly in use and readable by an automatic device, and, wherever technically feasible, to obtain its unhindered transfer to another data controller. This provision is applicable when the Data is processed with automated tools and the processing is founded on the User’s consent, upon a contract the User is a party to or upon contractual measures associated therewith.
• lodge a complaint. The User may lodge a complaint with the competent personal data protection authority or institute judicial proceedings.
How to exercise the rights
To exercise the User rights, Users may address a request to the Data Controller’s contact details set out in this document. The requests are filed free of charge and attended to by the Data Controller as quickly as possible, at the latest within a month.
Further information on the processing
Defence of proceedings
The User’s Personal Data may be used by the Data Controller in judicial proceedings or during the phases preparatory to instituting the same to defend itself against abuses by the User in the use of this Website or the Services associated therewith.
The User represents that he/she is aware of the fact that the Data Controller might be obliged to disclose the Data by order of the public authorities.
System Log-in and maintenance
Due to needs related to its operation and maintenance, this Website and any third party services used by it might collect system Log-in, i.e. files that record interactions and could contain Personal Data as well, such as the User’s IP address.
Use of Cookies
The PNV website makes use of “cookies” to enable the user to customise his/her own visit to the website. A “cookie” is a text file that is saved on your computer from a web page. “Cookies” may not be used to inject viruses into your computer. The full Cookie policy can be perused directly at the web address:
https://parconaturaviva.skiperformance.com/shop/en/store#/shop/en/support/cookie
Information not included in this policy
Additional information about the processing of Personal Data may be requested at any time from the Data Controller by using its contact details.
Amendments to this Privacy Policy
The Data Controller reserves the right to introduce amendments to this privacy policy at any time by informing Users on this web page and, if possible, on this Website, as well as, wherever technically and legally feasible, by sending a notification to Users through one of the contact details the Data Controller is in possession of. You are thus kindly invited to regularly consult this page, paying regard to the date of the latest amendment set out at the bottom.
If the amendments relate to any processing whose legal ground is consent, the Data Controller will gather the User’s consent afresh, if need be.
Payment Details
Payment data will be processed for purposes pursuant to directive 2015/2366 (EU) and subsequent changes to payment services in the European internal market (so-called PSD2).
Legal References
This privacy policy is drawn up pursuant to multiple legislative enactments, including Articles 13 and 14 of Regulation (EU) 2016/679. Unless otherwise specified, this privacy policy concerns this Website exclusively.
Last revised: 24 May 2018
Information You Choose To Submit-To be able to do an online purchase
We collect your personal data because of the following reasons:
The ski pass or a ticket is mostly personal and we have to be able to check if it is the correct person using the ski pass or ticket. Seasonal ski passes and daily passes is different for different age groups. And In case of refunds or issue of new RFID cards, we will have to be able to identify the correct ski pass holder.
To be able todo a purchase You are required to provide certain Personal Data (for example, your name and e-mail address,), and you must also provide a user name and password.
Examples of personal data we collect:
This information can be later managed by you under MY ACCOUNT
Information We Automatically Collect
We and our third-party service providers automatically collect certain information from your device or web browser when you interact with the Services to help us understand how our users use the Services . For example, each time you visit the Services we and our third-party service providers automatically collect your IP address, mobile device identifier, browser and computer type, access time, the Web page you came from, the URL you go to next, the Web page(s) that you access during your visit and your interaction with our Services.
We and our third-party service providers use such Usage Data for a variety of purposes including to diagnose problems with our servers and software, to administer the Services, to gather demographic information. The Usage Data we collect is generally non-identifying. We mainly use Google analytics to obtain this information.
Information Use
We use the information we collect, including Personal Data and Usage Data:
Social Network and Platform Integration
The Services contain integration with social networks and other platforms in which information is shared between us and such platforms. For example, if you create or log into your account through a third-party social media site, we will have access to certain information from that site, such as your name, email address, age, photo. If you don't want a social network to collect the information about you as described above, or you don't want a social network to share it with us, please review the privacy policy, privacy settings and instructions of the social network before you log into our e-commerce platform.
Our Information Sharing Practice
Your rights
we want you as a customer to have full control with your personal data.
As an online customer you may go to MY ACCOUNT and manage your personal data:
Parco Natura Viva Garda Zoological Park srl guarantees its users to be able to exercise the rights on their data. In particular, clicking on "Manage personal data" in the "Account Settings" menu, you can:
Download personal data
By clicking on the "Download personal data" button, the system will send an email with all user data compressed and password protected, which is automatically generated and communicated only during the data download procedure.
Delete your data
By clicking on the "Delete user account" button, all user data will be deleted from the system, with the exception of the data that Parco Natura Viva Garda Zoological Park srl must keep by law, and the data necessary to process the orders.
Choice of /Opt-IN/Opt OUT for further Communication
We offer you the opportunity to manage your communications from us. Even after subscribing to one or more newsletters and/or opting in to one or more offers to receive marketing and/or promotional communications from us or our third-party partners, users may elect to modify their preferences by going to the MY ACCOUNT anytime or by following the "Communications settings " and/or "Unsubscribe" link provided in any email received. You may also be able to change your preferences by updating your profile or account, depending on which of our Services you are using. Even if you do opt-out of marketing emails, we reserve the right to send you transactional and administrative emails including those related to the Services, service announcements, and to contact you regarding any goods or services you have ordered.
Choice of Updating, downloading and Deleting Your Personal Data
You may access the information we hold about you any time through MY ACCOUNT . Here you would may update, correct, modify or delete from our database any Personal Data. If you delete certain information you may not be able to order services in the future without re-submitting such information. Please note that we will maintain Personal Data in our database whenever we are required to do so by law.
Please note that we need to retain certain information and/or to complete any transactions that you began prior to requesting such change or deletion (for example, when you did a purchase of a lift ticket, you may not be able to change or delete the Personal Data provided until after the completion of such a purchase, e.g a yearly subscription ticket could have a validity of up to one year).
We will retain your Personal Data for the period necessary to fulfil the purposes outlined in this Policy unless a longer retention period is required or permitted by law.
Payment Details
Payment data will be processed for purposes pursuant to directive 2015/2366 (EU) and subsequent changes to payment services in the European internal market (so-called PSD2).
Contact us:
We are happy to answer any questions, you will find our contact details on top of the document If you are not satisfied on how we treat your personal data according to this privacy policy you have the right to contact the destinations local country data protection agency.