PRIVACY POLICY

Home

PRIVACY POLICY

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), this privacy notice describes how personal data of users interacting with this corporate website are processed.

1. Data Controller
I.T.A.P. S.P.A. INCREMENTO TURISTICO ALPE PAMPEAGO
Loc. Pampeago, 9 - 38038 Tesero TN (Italy)
Email: ti.rametal@ofni‎

2. Types of data processed

Identification data: name, email address (voluntarily submitted via contact form);
Browsing data: IP address, browser type, operating system, date/time of access;
Data collected through cookies: technical, analytical, and profiling cookies (e.g., via Google Analytics, Meta Pixel).

3. Purposes and legal bases of processing
Personal data are processed for the following purposes:

Responding to contact or information requests (legal basis: legitimate interest of the Controller);
Statistical analysis and web traffic monitoring via tools like Google Analytics (legal basis: consent);
Marketing and remarketing using tracking tools such as Meta Pixel (legal basis: consent).

4. Processing methods
Data processing is carried out using IT and automated tools, applying appropriate technical and organizational measures to ensure data security and confidentiality.

5. Data recipients
Data may be processed by external parties appointed as Data Processors, such as:

Technical service providers (e.g., hosting);
Analytics and marketing service providers (e.g., Google, Meta);
IT and legal consultants.

6. Data transfer to third countries
Some tools used may involve the transfer of data to non-EU countries (e.g., United States). Such transfers are made in compliance with GDPR safeguards (e.g., adequacy decisions, standard contractual clauses).

7. Data retention period

Data submitted via contact forms are retained for a maximum of 12 months;
Data collected for statistical and marketing purposes are retained until consent is withdrawn or according to third-party policies

8. Data subject rights
Users may exercise their rights at any time under Articles 15–22 of the GDPR, including:

Access, rectification, deletion of data;
Restriction and objection to processing;
Data portability;
Withdrawal of consent, without affecting the lawfulness of processing based on consent before its withdrawal;
Complaint to the Supervisory Authority

To exercise these rights, contact: ti.rametal@ofni‎