Privacy Policy

Privacy Policy pursuant to Art. 13 of EU Regulation 2016/679 (GDPR)

Pursuant to Article 13 of EU Regulation 2016/679 (hereinafter “GDPR”), we hereby inform you that your personal data will be processed in compliance with the principles of lawfulness, fairness, transparency, data minimization and protection of confidentiality.

1. Data Controller

Russo Morosoli Invest S.p.A. Registered office: Stazione Piazzale Funivia Etna Sud – 95030 Nicolosi (CT) – Italy VAT No.: 00749890877 Phone: +39 095 387426 Email: amministrazione@russomorosoliinvest.com

2. Types of Data Processed

The personal data processed may include:
  • identification data (first name, last name);
  • contact data (email, phone number);
  • browsing data (IP address, browser, device, logs, technical cookies);
  • data related to online purchases (vouchers, tickets, transactions).

3. Purpose of Processing

The personal data provided will be processed for the following purposes:
  • management of information requests submitted through the website;
  • management of online bookings and purchases;
  • issuance and management of vouchers;
  • tax, accounting and administrative compliance;
  • customer support management;
  • improvement of services and user experience;
  • compliance with legal obligations.

4. Legal Basis of Processing

The processing of personal data is based on the following legal grounds:
  • performance of a contract or pre-contractual measures (Art. 6, para. 1, letter b GDPR);
  • compliance with legal obligations (Art. 6, para. 1, letter c GDPR);
  • explicit consent of the data subject, where required (Art. 6, para. 1, letter a GDPR);
  • legitimate interest of the Data Controller (Art. 6, para. 1, letter f GDPR).
The provision of data is necessary in order to deliver the requested services. Failure to provide such data will make it impossible to supply the requested service.

5. Processing Methods

Personal data are processed using electronic and telematic tools, in compliance with applicable security measures, in order to ensure confidentiality, integrity and availability of the data.

6. Disclosure of Data to Third Parties

Personal data may be disclosed exclusively to:
  • authorized personnel of the Data Controller;
  • IT service providers, hosting providers, payment processors and technical service suppliers;
  • tax, accounting and legal consultants;
  • public authorities, where required by law.
Personal data will not be disseminated.

7. Data Retention

Personal data will be retained for the time strictly necessary to achieve the purposes for which they are collected and, in any case, for:
  • contractual and administrative purposes: 10 years;
  • contact data for information requests: 24 months.

8. Transfer of Data to Third Countries

Personal data will not be transferred to non-EU countries. Should this become necessary, such transfer will take place in compliance with the provisions of the GDPR.

9. Data Subject’s Rights

The data subject may exercise at any time the rights provided for by Articles 15–22 of the GDPR, including:
  • access to personal data;
  • rectification and updating;
  • erasure (right to be forgotten);
  • restriction of processing;
  • objection to processing;
  • data portability;
  • withdrawal of consent.
Requests may be sent to: amministrazione@russomorosoliinvest.com. You also have the right to lodge a complaint with the competent Data Protection Authority.