Privacy notices for passengers in accordance with the EU’s General Data Protection Regulation (‘GDPR’)
Information on the data controller
Data controller under Article 4(7) GDPR:
Indirizzo: Via Attilio Regolo 25 – 00192 Roma
Indirizzo e-mail: email@example.com
How We Obtain Information About You
We may collect personal data that you choose to provide to us through the Site, including, but not limited to, your first and last name, physical address, e-mail address, or telephone number, such as when you:
- Register on the Site, to create a User Account;
- Fill out a form on the Site;
- Sign-up to receive direct marketing communications on the Site;
- Make purchases / subscriptions on the Site;
- Vote in Romeing awards, enter a competition, respond to a survey.
When you visit our Site, we also may collect certain information by automated means using technologies such as cookies, non-cookie-based tokens, web server logs, tracking pixels, and web beacons. Cookies are files that websites send to your computer or other Internet-connected device to identify your browser uniquely or to store information or settings in your browser. Your browser may tell you when you receive certain types of cookies and how to restrict or disable certain cookies.
Information We Obtain
Information That You Provide to Us, and our legal basis for processing the personal data
Personal data that you provide directly to us will be apparent from the context in which you provide it, for example:
- If you register on the Site, to create a User Account, you will generally provide a username, a email address and communication preferences.
- If you sign up to receive electronic marketing communications from us, you will generally provide your name and email address.
- If you make any purchase(s) for example subscriptions or place an ad you will generally provide your full name and email address. Payments are processed by our payment provider Paypal.We will not store your payment card information.
- If you choose to vote in Romeing awards, enter a competition, or fill out a survey, you will generally provide your name, and email address.
Information That We Collect Automatically
Our web servers may log information such as your operating system type, browser type, domain, and other system settings, as well as the language your system uses and the country and time zone where your device is located. The web server logs may also record information such as the address of the web page that referred you to our Sites and the IP address of the device you use to connect to the Internet. They may also log information about your interaction with the Sites, such as which pages you visit. To control which web servers collect information by automated means, we may place tags called “web beacons” — small files that link web pages to particular web servers and their cookies. We may also collect information from your browser, such as your browsing history, and use it in conjunction with data gathered from forms and e-mails to help us understand and respond to your needs.
Where the information gathered is completely anonymised, the information will not constitute personal data. Where your personal data is not in an anonymous form, our legal basis for processing your personal data in this way, is that it is in our legitimate interest to continually evaluate that personal data in operating and improving our business (and to ensure that the products and services we provide are relevant to the market) that is not overridden by your interests, rights and freedoms to protect personal data about you.
Social Media Widgets
The Site includes social media functions, such as Google, Twitter and Facebook widgets. These widgets may collect information about which pages you visit on the Site and the IP address of the device you use to connect to the Internet. The widgets may also set a cookie to ensure the features are functioning properly.
Social media functions and widgets are hosted either by a third party or directly on the Site. Your interactions with the social media functions and widgets located on the Site are governed by the privacy policies of the companies that provide them. If you use any of the social media functions or widgets on our Site, we strongly suggest you review the privacy policies of the companies that provide those functions and features.
Information That We Obtain From Third Parties
Information that we collect from third parties will generally consist of publicly-available profile information (such as your preferences and interests), for example from public social media posts.
How We Use Information That We Obtain
Information That You Provide to Us
We may use personal data that you provide to us to respond to your inquiry, for example, to contact you about your request, ask a question, provide announcements about products and future events, conduct surveys, and contact you for other reasons related to offering and improving our services. We use the personal data for these purposes because we have a legitimate business interest in providing services to our customers and other interested individuals that is not overridden by your interests, rights and freedoms to protect personal data about you. If you make a purchase on our Site, we also collect personal data because it is necessary for us to enter into a contract with you.
In addition to the uses discussed above, we may also use the personal data you provide on our Site to:
- operate, evaluate, and improve our business;
- develop new products and services;
- perform market research;
- advertise and market our products and services;
- determine the effectiveness of our advertising and marketing;
- analyze our products, services, and websites;
- administer the Site;
- segment and personalise the marketing communication that you have viewed on the Site.
We use the personal data for the purposes described above because we have a legitimate interest in operating and improving our business that is not overridden by your interests, rights and freedoms to protect personal data about you.
We may also use the information to protect against and prevent fraud, claims, and other liabilities and to comply with or enforce applicable legal requirements, industry standards, and our policies and terms. We use personal data for these purposes when it is necessary to protect, exercise or defend our legal rights, or when we are required to do so by law that applies to us.
Information That We Collect Automatically
We use personal data that we collect automatically through cookies, non-cookie-based tokens, web beacons, and other automated means for purposes such as customizing and enhancing our visitors’ visits to the Site, facilitating use of the Sites, collecting statistics about your visits to the Site, and understanding the manner in which our visitors browse the Site. We also use the information to help diagnose technical and service problems, administer the Site, and identify visitors to the Site. We use clickstream data to determine how much time visitors spend on web pages of the Site, how visitors navigate through the Site, and how we may tailor the Site to meet the needs of our visitors. We use the personal data for the purposes described above because we have a legitimate interest in operating and improving our Site that is not overridden by your interests, rights and freedoms to protect personal data about you.
To learn how to opt out of Google Analytics, visit: https://tools.google.com/dlpage/gaoptout.
Other Uses of Information
In addition to the uses described above, we may use personal data that you provide to us or that we collect for other purposes. Where that is the case, we will provide an additional privacy notice to you that describes the purposes for which we will use the personal data and our legal basis for doing so.
Information We Share
We do not sell or otherwise disclose personal data that you provide to us or that we collect on our Site. Visitor comments may be checked through an automated spam detection service.
If you leave a comment on our site you may opt-in to saving your name, email address and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year.
If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login will persist for two weeks. If you log out of your account, the login cookies will be removed.
If you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.
How long we retain your data
If you leave a comment, the comment and its metadata are retained indefinitely. This is so we can recognize and approve any follow-up comments automatically instead of holding them in a moderation queue.
For users that register on our website (if any), we also store the personal information they provide in their user profile. All users can see, edit, or delete their personal information at any time (except they cannot change their username). Website administrators can also see and edit that information.
You have the right to request information from us at any time about your personal data we have stored and the origin, recipients or categories of recipients to whom these data are forwarded or otherwise disclosed, the purpose of the storage and processing, the planned storage period, our automated decision-making procedure,
the right to data portability, the existence of a right to rectification, erasure, restriction of or objection to processing, and any existing right to lodge a complaint with a supervisory authority. You also have the right to rectification of incorrect data and, in cases where the legal requirements are met, to blocking and erasure, as well as to restrict the processing of data. You may also send requests for information, withdrawals of consent, objections and other concerns regarding data processing by email to firstname.lastname@example.org or to the address stated in the introduction.