{"id":385,"date":"2026-04-22T15:58:02","date_gmt":"2026-04-22T13:58:02","guid":{"rendered":"https:\/\/turismovallidilanzo.it\/privacy-policy-2\/"},"modified":"2026-05-18T12:06:06","modified_gmt":"2026-05-18T10:06:06","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/turismovallidilanzo.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h3>Lanzo Valleys Tourist Operators Consortium<\/h3>\n<p><i>(Information pursuant to Articles 13 and 14 of EU Regulation 2016\/679 \u2013 GDPR)<\/i><br \/>\n<strong>Last updated: May 14, 2026<\/strong><\/p>\n<h4>1.1 Identity and Contact Details of the Owner<\/h4>\n<p>The Data Controller of the personal data collected through this website is:<br \/>\n<strong>Consorzio Operatori Turistici Valli di Lanzo<\/strong>, with registered office in Fraz. F\u00e9 2 \u2013 10070 Ceres (TO), VAT no. IT08207460018, can be reached at the following addresses:<\/p>\n<ul>\n<li>E-mail: <a href=\"mailto:info@turismovallidilanzo.it\">info@turismovallidilanzo.it<\/a><\/li>\n<li>PEC: <a href=\"mailto:consorzio.operatorituristicivallidilanzo@pec.it\">consorzio.operatorituristicivallidilanzo@pec.it<\/a><\/li>\n<li>Tel. <a href=\"tel:+393898379177\">+39 389 8379177<\/a><\/li>\n<\/ul>\n<p>For any requests regarding the processing of your personal data, the interested party may contact the Data Controller at the contact details above.<\/p>\n<h4>1.2 General Principles of Processing<\/h4>\n<p>The Data Controller processes personal data in compliance with the principles established by art. 5 of the GDPR: <\/p>\n<ul>\n<li><strong>Lawfulness, fairness, and transparency<\/strong>: data is processed lawfully, fairly, and transparently with respect to the data subject.<\/li>\n<li><strong>Purpose limitation<\/strong>: Data is collected for specified, explicit, and legitimate purposes and is not further processed in a manner incompatible with those purposes.<\/li>\n<li><strong>Data minimization<\/strong>: The data collected is adequate, relevant, and limited to what is necessary for the purposes of the processing.<\/li>\n<li><strong>Accuracy<\/strong>: The data is accurate and, where necessary, updated.<\/li>\n<li><strong>Storage limitation<\/strong>: Data is stored in a form that permits identification of data subjects for a period of time no longer than is necessary for the purposes for which it was collected.<\/li>\n<li><strong>Integrity and confidentiality<\/strong>: data is processed in a manner that ensures adequate security.<\/li>\n<\/ul>\n<h4>1.3 Types of Data, Purposes and Legal Bases<\/h4>\n<h5>A) Browsing data<\/h5>\n<p>During normal navigation of the site, the computer systems and software procedures automatically acquire some personal data whose transmission is implicit in the use of Internet communication protocols.<\/p>\n<table style=\"border-collapse: collapse; width: 100%; margin-bottom: 1em;\">\n<thead>\n<tr>\n<th style=\"border: 1px solid black; padding: 8px;\">Data<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Purpose<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Legal basis<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Retention<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\">IP address, browser, operating system, domain, pages visited, time<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Site operation and security<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Legitimate interest of the Data Controller (Article 6, paragraph 1, letter f), GDPR)<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">7 days<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h5>B) Contact form<\/h5>\n<p>The site provides a contact form through which users can send requests for information, quotes, or communications to the Consortium.<\/p>\n<table style=\"border-collapse: collapse; width: 100%; margin-bottom: 1em;\">\n<thead>\n<tr>\n<th style=\"border: 1px solid black; padding: 8px;\">Data<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Purpose<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Legal basis<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Retention<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\">Name, email, telephone number (optional), subject, message text<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Management and response to information requests<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Implementation of pre-contractual measures taken at the data subject&#8217;s request (Article 6, paragraph 1, letter b), GDPR)<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">24 months from the closure of the case<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h5>C) Newsletter Subscription<\/h5>\n<p>The Consortium offers the opportunity to subscribe to a newsletter containing information about the activities, events, and tourist offers of the Lanzo Valleys.<\/p>\n<table style=\"border-collapse: collapse; width: 100%; margin-bottom: 1em;\">\n<thead>\n<tr>\n<th style=\"border: 1px solid black; padding: 8px;\">Data<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Purpose<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Legal basis<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Retention<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\">Email address<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Sending of informational and promotional communications (newsletter)<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Free, specific, and unambiguous consent of the data subject (Article 6, paragraph 1, letter a), GDPR<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Until consent is withdrawn<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>The data subject may withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal, by clicking the unsubscribe link included in every communication or by contacting the Data Controller. Following withdrawal, the data will be deleted pursuant to Art. 17 of the GDPR.  <\/p>\n<h4>1.4 Data Recipients<\/h4>\n<p>Personal data will not be disclosed to third parties for their own commercial purposes. However, it may be shared with: <\/p>\n<ul>\n<li><strong>Technical suppliers<\/strong> who provide services essential to the operation of the site (hosting, technical assistance, newsletter sending), appointed as <strong>Data Processors pursuant<\/strong> to Art. 28 GDPR; <\/li>\n<li><strong>Google LLC<\/strong> (United States of America), for the Google Analytics and Google reCAPTCHA services integrated into the site (see the <a href=\"https:\/\/turismovallidilanzo.it\/en\/cookie-policy-2\/\">Cookie Policy <\/a>for details);<\/li>\n<li><strong>Competent authorities<\/strong> (judicial, police or supervisory authorities) in cases provided for by law.<\/li>\n<\/ul>\n<h4>1.5 Transfer of Data to Third Countries<\/h4>\n<p>Using Google Analytics and Google reCAPTCHA services involves the transfer of personal data to the <strong>United States of America<\/strong>.<\/p>\n<p><strong>Legal basis for the transfer<\/strong>: The transfer is primarily based on the <strong>European Commission (EU) Adequacy Decision 2023\/1795 of July 10, 2023<\/strong>, which established the <strong>EU-U.S. Data Privacy Framework (DPF)<\/strong>. This decision establishes that U.S. organizations adhering to the DPF guarantee a level of protection essentially equivalent to that of the European Union, pursuant to Article 45, paragraph 1, GDPR and Article 1 of Decision (EU) 2023\/1795.   <\/p>\n<p><strong>The Data Controller has verified Google LLC&#8217;s active DPF certification<\/strong> on the official portal of the U.S. Department of Commerce. If, for any reason, Google LLC is not or ceases to be certified under the DPF, the transfer will be based on the <strong>Standard Contractual Clauses (SCCs)<\/strong> approved by the European Commission pursuant to Art. 46, paragraph 2, letter c), GDPR, supplemented where necessary by additional security measures.  <\/p>\n<p>For further information on the transfers and guarantees adopted, the data subject may contact the Data Controller at the contact details indicated in section 1.1, as indicated in Article 13, paragraph 1, letter f), GDPR. <\/p>\n<h4>1.6 Consent of Minors<\/h4>\n<p>Pursuant to Article 2-quinquies of Legislative Decree 196\/2003 (Privacy Code), consent to the processing of personal data of minors is valid from the <strong>age of 14<\/strong>. The Data Controller does not intentionally collect data from individuals under this age. Should it become aware of such data, it will promptly delete it.    <\/p>\n<h4>1.7 Rights of the interested parties<\/h4>\n<p>The data subject has the right to exercise, at any time, the following rights pursuant to Articles 15\u201322 GDPR:<\/p>\n<table style=\"border-collapse: collapse; width: 100%; margin-bottom: 1em;\">\n<thead>\n<tr>\n<th style=\"border: 1px solid black; padding: 8px;\">Right<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Legislative Reference<\/th>\n<th style=\"border: 1px solid black; padding: 8px;\">Description<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\"><strong>Access<\/strong><\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Art. 15 GDPR<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Obtain confirmation of processing and a copy of your data<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\"><strong>Rectification<\/strong><\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Art. 16 GDPR<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Correct inaccurate or incomplete data<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\"><strong>Erasure (&#8220;right to be forgotten&#8221;)<\/strong><\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Art. 17 GDPR<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Obtain the erasure of your data, even if you withdraw your consent<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\"><strong>Restriction of processing<\/strong><\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Art. 18 GDPR<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Temporarily block processing<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\"><strong>Portability<\/strong><\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Art. 20 GDPR<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Receive your data in a structured format<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\"><strong>Objection<\/strong><\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Art. 21 GDPR<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Objection to processing, especially for direct marketing<\/td>\n<\/tr>\n<tr>\n<td style=\"border: 1px solid black; padding: 8px;\"><strong>Withdrawal of Consent<\/strong><\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Art. 7, par. 3, GDPR<\/td>\n<td style=\"border: 1px solid black; padding: 8px;\">Withdraw your consent at any time<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><strong>How to exercise your rights<\/strong>: The interested party may send their request via email or certified email to the addresses indicated in section 1.1.<\/p>\n<p><strong>Response times<\/strong>: The Data Controller will respond within 30 days of receiving the request, unless a justified extension of 60 days is requested in the event of complexity, pursuant to Art. 12, paragraph 3, GDPR. <\/p>\n<p><strong>Right to lodge a complaint<\/strong>: The data subject has the right to lodge a complaint with the competent supervisory authority, namely the <strong>Italian Data Protection Authority<\/strong> (<a href=\"https:\/\/www.garanteprivacy.it\/\" target=\"_blank\">www.garanteprivacy.it<\/a>).<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Lanzo Valleys Tourist Operators Consortium (Information pursuant to Articles 13 and 14 of EU Regulation 2016\/679 \u2013 GDPR) Last updated:&#8230;<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"footnotes":""},"class_list":["post-385","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/turismovallidilanzo.it\/en\/wp-json\/wp\/v2\/pages\/385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/turismovallidilanzo.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/turismovallidilanzo.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/turismovallidilanzo.it\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/turismovallidilanzo.it\/en\/wp-json\/wp\/v2\/comments?post=385"}],"version-history":[{"count":3,"href":"https:\/\/turismovallidilanzo.it\/en\/wp-json\/wp\/v2\/pages\/385\/revisions"}],"predecessor-version":[{"id":397,"href":"https:\/\/turismovallidilanzo.it\/en\/wp-json\/wp\/v2\/pages\/385\/revisions\/397"}],"wp:attachment":[{"href":"https:\/\/turismovallidilanzo.it\/en\/wp-json\/wp\/v2\/media?parent=385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}