Privacy Policy



Information pursuant to articles 13 and 14 of Regulation (EU) 2016/679 - WEB

With this document ("Information"), the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and the rights that are recognized by the Regulation (EU) 2016/679 on protection of natural persons, with regard to the processing of personal data and their free circulation ("GDPR"). This information may be supplemented by the Data Controller if any additional services requested by you may result in further processing.


1. Holder and Manager of the Treatment, DPO

The Data Controller is OVEROME srl P.IVA / CF: 10958491002 based in Via Pier Vettori, 19 00151 Rome (Rome), Italy

The Owner and the DPO, also through the designated structures, will take care of your request and provide you, without undue delay and in any case, no later than one month after receipt of the same, information relating to the action taken regarding your request.

We inform you that if the Owner has doubts about the identity of the individual submitting the request, he / she may request further information necessary to confirm the identity of the person concerned.

Categories of Interested: Natural persons, legal entities, public and private organizations.


2. Treatments

2.1. Execution of the Contract - Use of the service

TREATMENT: USE OF THE SERVICE - Tourist Services
The processing of your personal data is necessary for the acquisition of preliminary information to the conclusion of contracts that will stipulate with the Data Controller, for the improvement and execution of the contract that provides for the provision of tourist services (guided tours).

Purpose of the treatment

Condition Lawfulness Treatment Purposes Description
Contract Execution Contractual agreements. Contractual agreements for the provision of tourist services.

Nature of the transfer: Mandatory

Consequences refusal to provide data: Failure to provide the data will make it impossible for the company to respond to your pre-contractual / contractual requests and to execute the contract.

Minimum data protection measures: At an IT level, suitable measures are adopted such as: the use of unique access credentials to the assets; anti-virus and firewall measures to guarantee a high level of protection. The servers reside on Amazon Server (Complies with GDPR).

Personal data retention period: Your personal data will be processed actively for the time necessary for the management of the existing relationship and / or the execution of the contract. The information collected for the evaluation of the conclusion of the contract, in case of non-completion, will be canceled within 30 days from the request of the interested party.

Treatment reference standards: Execution of pre-contractual measures, of the contract.

Recipients of the Treatment:
Tourist guides P.IVA / CF: Italy
Tiziana Gentile Labor Consultancy Office P.IVA / CF: GNTTZN69L50G811B based in Via del Mare, 89 00040 Pomezia Rome Italy
Study of Paola P.IVA / CF: DPLNTN57H29A345U based in Via Pier Vettori, 10 00151 Italy
OVEROME USA, Inc. VAT / CF: VAT 47-3213284 USA
OVEROME srl VAT number: 10958491002 - Via Pier Vettori, 19 00151 Rome (Rome), Italy - 06.83.39.35.80

Types of data processed:

Category Guy
common data personal data

Scope of diffusion: The data will be transmitted to the Tourist Guides in charge, for the actual provision of the services offered. The data are also transmitted to the subsidiary company OVEROME USA, Inc ..

 

2.2. Obligations of the law

TREATMENT: ADEMPIMENTS OF LAW
The processing of your personal data by the Data Controller may also be connected to the fulfillment of obligations provided for by laws, regulations and / or Community regulations, or by supervisory and control bodies or other legitimate authorities.

Purpose of the treatment

Condition Lawfulness Treatment Purposes Description
Obligation to Act Obligations of the law. Obligations of the law.

Nature of the transfer: Mandatory

Consequences refusal to provide data: Failure to provide the data will prevent the Data Controller from carrying out the activity requested by you and which implies the fulfillment of the legal obligation by the Data Controller.

Minimum data protection measures: At an IT level, suitable measures are adopted such as: the use of unique access credentials to the assets; anti-virus and firewall measures to guarantee a high level of protection. At paper level, the data reside in special closed cabinets with exclusive access to authorized personnel only.

Personal data retention period: Your personal data will be processed for this purpose for the time necessary to fulfill the legal obligations required by current legislation. In this regard, your personal data will be stored for 10 years from the termination of the contract or, if subsequent, by a binding decision issued by a competent authority (for example, court ruling), without prejudice to any conservation related to particular categories of data, for longer periods of time, prescribed by the legal system.

Treatment reference standards: Compliance with a legal obligation.

Recipients of the Treatment:
Tourist guides P.IVA / CF: Italy
Tiziana Gentile Labor Consultancy Office P.IVA / CF: GNTTZN69L50G811B based in Via del Mare, 89 00040 Pomezia Rome Italy
Study of Paola P.IVA / CF: DPLNTN57H29A345U based in Via Pier Vettori, 10 00151 Italy
OVEROME USA, Inc. VAT / CF: VAT 47-3213284 USA
OVEROME srl VAT number: 10958491002 - Via Pier Vettori, 19 00151 Rome (Rome), Italy - 06.83.39.35.80

Types of data processed:

Category Guy
common data personal data
economic data tax

 

2.3. Marketing

TREATMENT: DIRECT MARKETING
The Data Controller intends to process your personal data in order to send you commercial communications about the products and services of the Data Controller, including direct marketing conducted using the results of the analysis, as well as proceeding with direct sales and completion of investigations or market research.

Purpose of the treatment

Condition Lawfulness Treatment Purposes Description
Consent Explicit consent to receipt of commercial communications. Explicit consent to receipt of commercial communications.

Nature of conferment: Optional

Consequences refusal to provide data: Failure to provide data will not affect the satisfaction of your requests and the execution of contracts but will make it impossible for the Data Controller to send you marketing communications.

Minimum data protection measures: At an IT level, suitable measures are adopted such as: the use of unique access credentials to the assets; anti-virus and firewall measures to guarantee a high level of protection.

Personal data retention period: Your personal data, treated as described, will be deleted within 30 days from the termination of the last contractual agreement with the Data Controller. In any case, if you decide to withdraw your consent or oppose the processing, your personal data will be deleted within 30 days of the request.

Treatment reference standards: a) Express consent of the interested party, b) art. 130, paragraph 4, of the Privacy Code, c) Express consent of the interested party.

Recipients of the Treatment:
Tourist guides P.IVA / CF: Italy
Tiziana Gentile Labor Consultancy Office P.IVA / CF: GNTTZN69L50G811B based in Via del Mare, 89 00040 Pomezia Rome Italy
Study of Paola P.IVA / CF: DPLNTN57H29A345U based in Via Pier Vettori, 10 00151 Italy
OVEROME USA, Inc. VAT / CF: VAT 47-3213284 USA
OVEROME srl VAT number: 10958491002 - Via Pier Vettori, 19 00151 Rome (Rome), Italy - 06.83.39.35.80

Types of data processed:

Category Guy
common data personal data

 

2.4. Marketing

TREATMENT: WEB - REGISTRATION AND ACCESS TO RESERVED AREA
Your personal data may be used by the Owner to satisfy your request for registration on the Site and to be able to provide the services connected to the reserved area of the Site.

Purpose of the treatment

Condition Lawfulness Treatment Purposes Description
Consent Registration and access to the reserved area of the site. Registration and access to the reserved area of the site.

Nature of the transfer: Mandatory.

Consequences refusal to provide data: Failure to provide the requested data will make it impossible for the Owner to continue with his registration on the Site.

Minimum data protection measures: At an IT level, suitable measures are adopted such as: the use of unique access credentials to the assets; anti-virus and firewall measures to guarantee a high level of protection. At paper level, the data reside in special closed cabinets with exclusive access to authorized personnel only.

Personal data retention period: The Data Controller will process your personal data only for the time necessary to manage the contract between you and the Data Controller. In any case, your personal data will be stored for a maximum period of 10 years from the termination of the contract.

Treatment reference standards: The legal basis for registration on the Site and the provision of related services is the need to execute your request, in compliance with Article 6, paragraph 1, letter b), GDPR. Therefore, it is not necessary to acquire your prior consent to the processing.

Recipients of the Treatment:
Tourist guides P.IVA / CF: Italy
Tiziana Gentile Labor Consultancy Office P.IVA / CF: GNTTZN69L50G811B based in Via del Mare, 89 00040 Pomezia Rome Italy
Study of Paola P.IVA / CF: DPLNTN57H29A345U based in Via Pier Vettori, 10 00151 Italy
OVEROME USA, Inc. VAT / CF: VAT 47-3213284 USA
OVEROME srl VAT number: 10958491002 - Via Pier Vettori, 19 00151 Rome (Rome), Italy - 06.83.39.35.80

Types of data processed:

Category Guy
common data personal data

 

 

3. Cookies Notice:

3.1. Url Information: https://www.iusprivacy.eu/informativa-overome-srl-1000330393

3.2. Extended Cookie Information:

On this site we use technology to gather information to improve your online experience.
This policy refers to the use of cookies and the methods by which to manage them.
We reserve the right to change this policy at any time. Any change in this policy will take effect from the date of publication on the Site.
Cookies are small text strings that the sites visited by the user send to his terminal (usually the browser), where they are stored before being re-transmitted to the same sites at the next visit of the same user.
During the navigation on a site, the user can also receive cookies on their terminal that are sent from different websites or web servers (so-called "third parties"), on which some elements may exist (such as, for example, images, maps, sounds, specific links to pages of other domains) on the site that the same is visiting.

Cookies, usually present in users' browsers in very large numbers and sometimes even with long temporal persistence, are used for different purposes: execution of computer authentication, monitoring of sessions, storage of information on specific configurations concerning users accessing the server, etc.

In order to arrive at a correct regulation of such devices, it is necessary to distinguish them since there are no technical characteristics that differentiate them from one another precisely on the basis of the aims pursued by those who use them.

  • FIRST-PARTY cookies, persistent (session) technicians
    Technical cookies are those used for the sole purpose of "transmitting a communication over an electronic communications network, or as strictly necessary for the provider of a WEB service explicitly requested by the user to provide this service". They are not used for other purposes and are normally installed directly by the owner or operator of the website. They can be divided into navigation or session cookies, which guarantee the normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas). This site makes use of technical cookies of persistent session of the first part.
  • FIRST-PARTY, analytical cookies
    Analytical cookies, also called "analytics", allow the creation of detailed statistics on visitors to a website such as, for example, the display of certain pages, the number of visitors, the time spent on the site by users and the arrival methods. Cookies analytics are similar to technical cookies when used directly by the site operator to collect information in aggregate form on the number of users and how they visit the site. This site uses first-party analytical cookies.
  • FIRST-PARTY cookie, profiling
    Profiling cookies are designed to create profiles related to the user and are used in order to send advertising messages in line with the preferences expressed by the same in the context of surfing the net. Because of the particular invasiveness that such devices can have in the private sphere of users. This site may share this information with other parties, such as, for example, advertisers. The European and Italian legislation provides that you can refuse consent regarding the use of these cookies. This site makes use of FIRST PART cookies, profiling.
  • THIRD PARTY, analytical cookies
    Analytical cookies, also called "analytics", allow the creation of detailed statistics on visitors to a website such as, for example, the display of certain pages, the number of visitors, the time spent on the site by users and the arrival methods. This site uses a web analytics service provided by Google.
  • THIRD PARTY cookies, profiling
    In order to provide you with additional functions and services on this site, we work with third parties who, independently and not directly controlled by us, may use their cookies to collect information about the activities you have performed while browsing the pages. of this site. This information may be used to offer advertising in line with your interests, based on the content you visit, or to measure the effectiveness of advertising campaigns. These cookies may be contained in various elements present on the web page, such as banner ads, images, videos, etc. A sensitive example is the presence of so-called "social plugins" or "social sharing buttons" of the main social networks (Facebook, Twitter, Google+ and LinkedIn), aimed at sharing the contents of the web page on the social networks themselves. The use of data collected through third-party cookies, on which we do not exercise any type of control, is governed by the relevant information, which we ask you to refer to. This site uses third-party cookies, profilers.

Cookie management
Below is the list of the most common browsers with links to the settings for managing cookies:

The browsers provide for the "private" browsing mode, by activating which cookies are always deleted after the closing of each browsing session.

Secondly, you can disable third-party profiling cookies by visiting http://www.youronlinechoices.com .
You can also disable the analysis cookies of Google Analytics by downloading the appropriate additional component of the browser for the deactivation of Google Analytics at the following web address: https://tools.google.com/dlpage/gaoptout .

Third Party Cookie Policy
Cookie Policy Facebook https://it-it.facebook.com/policies/cookies/
Cookie Policy Google https://www.google.it/intl/it/policies/technologies/cookies/
Cookie Policy Google https://www.linkedin.com/legal/cookie-policy
Cookie Policy Twitter https://twitter.com/it/privacy

Grant Consent use Cookies
Continuing the navigation starting from the banner containing the so-called brief information, scrolling this page or clicking on any of its elements, allow the use of cookies used on this website by accepting the policy on cookies described above.
It is always possible to revoke the consent previously given by the methods indicated in the paragraph headed "MANAGEMENT OF COOKIES".

3.3. Site Cookies: To view all the cookies used on this site click on https://webcookies.org/scan/16911901

3.4. Types of cookies active on the site:

Type of Cookie
Third party analytics WITHOUT anonymisation of the IP address using cookies in order to cross user data.
Technicians - session - persistent first part

3.5. List of Web Services:

Service Type Description
Payment Gateway PayPal
Buttons and Widget Social Media YouTube button and widget
Buttons and Widget Social Media Like button and Facebook widget
Registration and Authentication Registration with Form
Statistics, Performance Google Analytics
Support, Chat, Ticket Zendesk widget
Support, Chat, Ticket Zopim widget

4. What rights do you have as an interested party:

In relation to the treatments described in this Privacy Policy, as an interested party you can, as required by the European Regulation 679/2016, exercise the rights set out in Articles 15 to 21 and, in particular:

  • right of access - article 15 GDPR: the right to obtain confirmation that personal data concerning you is being processed and, in this case, obtain access to your personal data, including a copy thereof.
  • right of rectification - Article 16 GDPR: right to obtain, without undue delay, the correction of inaccurate personal data concerning you and / or the integration of incomplete personal data;
  • right to cancellation (right to be forgotten) - Article 17 GDPR: right to obtain, without undue delay, the cancellation of personal data concerning you.
  • right to limitation of treatment - Article 18 GDPR: right to obtain limitation of treatment, when:
  1. the interested party disputes the accuracy of personal data, for the period necessary for the holder to verify the accuracy of such data;
  2. the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
  3. personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
  4. the interested party opposed the treatment pursuant to art. 21 GDPR, in the period of waiting for the verification on the possible prevalence of legitimate reasons of the holder of the treatment with respect to those of the interested party.
  • right to data portability - Article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Owner and the right to transmit them to another holder without impediments, if the treatment is based on consent and is done by automated means. Furthermore, the right to obtain that your personal data is transmitted directly from the Bank to another holder if this is technically feasible;
  • right of opposition - Article 21 GDPR: right to object, at any time for reasons related to your particular situation, to the processing of personal data concerning you based on the lawfulness of legitimate interest or the performance of a task in the public interest or exercise of public powers, including profiling, unless there are legitimate reasons for the Data Controller to continue processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or defense of a law in court; may object to processing at any time if personal data are processed for direct marketing purposes, including profiling, to the extent that it is related to such direct marketing;

The above rights may be exercised against the Owner, by contacting the references indicated above.

The exercise of your rights as an interested party is free under Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Holder may charge a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.

    • REVOCATION RIGHT:

The interested party has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before revocation.
    • RIGHT OF COMPLAINT:

The interested party has the right to lodge a complaint with the Authority for the protection of personal data, Piazza di Montecitorio n. 121, 00186, Rome (RM).

Reference Links

GDPR - Privacy Policy - EU - Italian Version: https://www.iusprivacy.eu/informativa-overome-srl-1000330393

USA - Privacy Policy: https://www.overome.com/privacy-policy-cookie-restriction-mode