Notice pursuant to Article 13 of Regulation (EU) 2016/679.
Privacy notice for Marmotour Michelangelo
Marmotour Michelangelo website and associated contact channels. This notice describes the processing of personal data carried out within this scope, its purposes and how data subjects may exercise their rights.
Controller
The entity identified below acts as the Controller and determines the purposes and means of the processing described in this notice.
- Legal name
- Marmotour Michelangelo Srl
- Trading name
- Marmotour Michelangelo
- Registered office or address
- Viale XX Settembre 150, 54033 Carrara MS, Italy
- VAT number
- 01492190457
- Data protection contact
- info@marmotour.com
- Contact page
- https://www.marmotour.eu/en/contact-directions/
- Telephone
- +39 338 783 9855
Personal data processing activities
Browsing, website operation and security
The technical systems used to make the website available may process browsing data required to display pages, maintain security and diagnose faults. The website does not use its own analytics, marketing or profiling tools.
- Categories of personal data
- IP address
- date and time of the request
- requested URL or resource
- technical information about the browser and device
- technical, diagnostic and security logs
- Source of personal data
- Collection: from the data subject - Source type: data subject - Data generated while browsing the website
- Purposes and corresponding legal basis
- to provide the pages, images, videos and resources requested by the user - Article 6(1)(f) GDPR - legitimate interests pursued by the Controller
- to maintain the security, operation and technical maintenance of the website - Article 6(1)(f) GDPR - legitimate interests pursued by the Controller
- Legitimate interests pursued
- keeping the website available and secure
- preventing abuse, unauthorised access and technical faults
- Retention period
- Criteria: For no longer than is strictly necessary for technical and security purposes. Data are retained for longer only where this is required because of faults, legal obligations or the need to establish, exercise or defend legal claims.
- Recipients or categories of recipients
- hosting, maintenance and technical infrastructure providers - processors, where applicable
- persons authorised by the Controller - persons authorised to process personal data
- Transfers to third countries
- The Controller does not envisage directly transferring browsing data to countries outside the European Economic Area.
- Requirement to provide data and consequences
- Provision is required - Processing the necessary technical data allows the website to be accessed. - Consequences: Without these data, the website may be unavailable or may not function correctly.
Contact, information and booking enquiries
When a data subject contacts Marmotour by email, telephone or through another published contact channel, the data they provide are processed to answer the enquiry, supply information and manage any booking or availability request.
- Categories of personal data
- first and last name, if provided
- contact details provided, such as an email address or telephone number
- content of the enquiry
- information needed to organise visits, tours or experiences
- Source of personal data
- Collection: from the data subject - Source type: data subject - Data provided voluntarily through the contact channels
- Purposes and corresponding legal basis
- to respond to requests for information, availability, bookings and assistance - Article 6(1)(b) GDPR - steps taken at the data subject’s request prior to entering into a contract, or performance of the requested relationship
- to retain a record of communications needed to manage enquiries in an orderly manner - Article 6(1)(f) GDPR - legitimate interests pursued by the Controller
- Legitimate interests pursued
- managing received enquiries correctly
- keeping a record of communications for operational needs or in the event of a dispute
- Retention period
- Criteria: For the time required to manage the enquiry and any related follow-up. Data may be retained for longer to comply with legal obligations or to establish, exercise or defend legal claims.
- Recipients or categories of recipients
- providers of the email and telephone services used - independent controllers or processors, depending on the service
- persons authorised by the Controller - persons authorised to process personal data
- administrative, tax or legal advisers - processors or independent controllers, where necessary
- Transfers to third countries
- Voluntary use of external channels, where available, may involve processing by the relevant providers under their own privacy notices.
- Requirement to provide data and consequences
- Provision is required - Contact details are required to provide a response or manage a booking. - Consequences: Without them, it may not be possible to respond to or manage the enquiry.
Third-party services and platforms
The website contains links to external services. The relevant provider is contacted only when the user chooses to open a link.
MarmoTour Tripadvisor profile
- Purpose of the link
- Optional access to the Marmotour Michelangelo profile and reviews
- Service provider
- Tripadvisor
- Service address
- https://www.tripadvisor.it/Attraction_Review-g660764-d2256504-Reviews-MarmoTour_Michelangelo-Carrara_Province_of_Massa_Carrara_Tuscany.html
Google Maps
- Purpose of the link
- Optional access to directions, waypoints and MarmoTour entrances
- Service provider
- Service address
- https://www.google.com/maps
Marmotour Shop
- Purpose of the link
- Optional access to the Marmotour online shop
- Service provider
- Marmotour Shop
- Service address
- https://www.marmotour-shop.com/
- Purpose of the link
- Optional start of a WhatsApp conversation with Marmotour
- Service provider
- Meta Platforms
- Service address
- https://wa.me/393387839855
Marmotour on Facebook
- Purpose of the link
- Optional access to the official Marmotour Facebook page
- Service provider
- Meta Platforms
- Service address
- https://www.facebook.com/marmotour.michelangelo/
Marmotour on Instagram
- Purpose of the link
- Optional access to the official Marmotour Instagram profile
- Service provider
- Meta Platforms
- Service address
- https://www.instagram.com/marmotour.michelangelo/
Carrara Bus Turistici
- Purpose of the link
- Optional access to entry information for tourist coaches
- Service provider
- Municipality of Carrara or the service operator
- Service address
- https://www.carrarabusturistici.it/informazioni-accessi.php
AlexDigitale
- Purpose of the link
- Optional access to the website of the developer named in the credits
- Service provider
- AlexDigitale
- Service address
- https://alexdigitale.net/bv/
After a user voluntarily opens a link, each third-party provider processes data under its own privacy notice. The Controller does not determine the purposes, means or retention periods of processing carried out independently by those providers.
Processing methods and security measures
Personal data are processed using technical and organisational methods proportionate to the processing described.
- Technical measures
- hosting configured with the provider’s security measures
- protected administrative access
- routine maintenance of the tools used
- Organisational measures
- access to data restricted to authorised persons
- use of data limited to the stated purposes
- retention periods consistent with the enquiries received
Rights of data subjects
Where the relevant conditions are met, the data subject may exercise the rights provided for in Articles 15–22 GDPR.
- access to personal data — Article 15 GDPR
- rectification of inaccurate data — Article 16 GDPR
- erasure of personal data — Article 17 GDPR
- restriction of processing — Article 18 GDPR
- data portability — Article 20 GDPR
- objection to processing — Article 21 GDPR
The Controller will respond without undue delay and normally within one month of receiving a request. This period may be extended by a further two months where necessary, taking into account the complexity and number of requests; the data subject will be informed of any extension and the reasons for it.
Requests may be sent to the Controller at info@marmotour.com.
Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with a supervisory authority under Article 77 GDPR. In Italy, the competent authority is the Garante per la protezione dei dati personali.
Cookies and tracking technologies
The website does not use its own analytics, marketing or profiling tools and does not automatically load active content from third-party platforms. External services are reached only when the user chooses to open a link.
- No first-party analytics, marketing or profiling tools are enabled on the website.
- No third-party scripts or active content are loaded automatically by the website.
- External services are reached only after a user action and apply their own privacy notices and settings.
Legal references
This notice has been prepared with particular regard to the following legislation.
- Regulation (EU) 2016/679 (GDPR), in particular Articles 5, 6, 12, 13, 15-21, 28, 32 and 77.
- Italian Legislative Decree No 196 of 30 June 2003 (Personal Data Protection Code), as amended by Italian Legislative Decree No 101 of 10 August 2018.
Updates to this notice
The Controller may update this notice following changes to processing activities, services or applicable law. The updated version will be made available through the same channels used to publish this document.