INFORMATION ON THE PROCESSING OF PERSONAL DATA - European General Data ProtectionRegulation 2016/679

INFORMATION ON THE PROCESSING OF PERSONAL DATA
Provide pursuant artt. 13 and 14 of the European General Data Protection Regulation 2016/679 (GDPR)

Dear costumer, The company A.R.IM S.r.l. (for Hydromania waterpark, hereinafter referred to as “Company”) headquartered in Vicolo Casale Lumbroso, 200-00166 Rome, is the Data Controller of your data (also “Manager” below), provided pursuant the European General Data Protection Regulation 2016/679 concerning the protection of individuals and the personal data treatment (hereinafter referred to as Regulation/ GDPR ).

Therefore, according to artt. 13 and 14 of the Regulation, we provide you with the following information.

Personal data treatment means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1 DATA CONTROLLER

The Data Controller is A.R.IM who is also responsible to the legitimate and correct use of your personal data and who can be contacted for any information or request at the following addresses:
- Data controller: A.R.IM. S.r.l
- Address: Vic. di Casale Lumbroso, 200 - 00166 Roma RM, IT
- Contact: info@hydromania.it

1.1 Data Protection Officer (DPO-RPD) contacts: e-mail: rpd@hydromania.it

2 PURPOSE OF THE DATA PROCESSING

Your personal data are collected and processed for the following purposes:

2.1 Online selling of tickets and/or season tickets (Ticketing)
- Processed data: Name and surname, address or other elements for personal identification; bank and / or payment details, contacts data (telephone number, email, etc.)
- Legal basis: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.

2.2 Direct Marketing and promotional activities:
- Processed data: Name and surname, address or other elements for personal identification; contacts data (telephone number, email, etc.)
- Legal basis: the data subject has given consent to the processing of his or her personal data for one or more specific purposes- European Regulation (art. 6/ GDPR 2016/679)

2.3 Fulfillment of specific obligations established by law, by a regulation or by community legislation
- Processed data: Name and surname, address or other elements for personal identification; contacts data (telephone number, email, etc.)
- Legal basis: processing is necessary for compliance with a legal obligation to which the controller is subject.-European Regulation (art. 6/ GDPR 2016/679)

3 DATA RETENTION TIME

Personal data shall be collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes; further processing for archiving purposes in the public interest or statistical purposes management of any complaints / disputes or for legal purposes. Specifically, the Data Controller will process data for no more than 10 years from data collection for Marketing Purposes.

4 DATA PROTECTION

We process your personal data with regard to the protection of the fundamental rights and freedoms of natural persons, we regularly check and evaluate the effectiveness of the technical measures adopted, in order to guarantee the security of the processing (from article 32 of the Regulation).

5 ADDRESSES

Your data may be sent to the following addresses or categories of recipients: Consultants and freelancers in single or associated form; Companies and businesses; Judicial Authority, by law obligation; Persons authorised to process data. The updated list of data processors is available from the Data Controller. Personal data will not be subject to any transfer outside the EU.

6 RIGHTS OF THE INTERESTED PARTY

In addition to the above information, to ensure that your data is processed as correctly and transparently as possible, you must be aware of the fact that:
- has the right to ask the data controller to access your personal data and to correct or cancel them or limit the processing that concerns you or to oppose their treatment;
- if you have given consent for one or more specific purposes, you have the right to withdraw this consent at any time;
- has the right to lodge a complaint with the following Supervisory Authority: Guarantor for the protection of personal data; Furthermore, the interested party has the right to the portability of his personal data. 6.1 Profiling The processing takes place through automated processes that do not determine the profiling of the interested parties.

7 PURPOSE BASED ON CONSENT

Taking note of my right to withdraw consent at any time, I consent to the processing of my personal data by the Data Controllers, for the purposes indicated below (art.7 Regulation 2016/679).

Rome March 23 2020