INFORMATION ON THE PROCESSING OF PERSONAL DATA
Provide pursuant artt. 13 and 14 of the European General Data Protection Regulation
2016/679 (GDPR)
Dear costumer,
The company A.R.IM S.r.l. (for Hydromania waterpark, hereinafter referred to as
“Company”) headquartered in Vicolo Casale Lumbroso, 200-00166 Rome, is the
Data Controller of your data (also “Manager” below), provided pursuant the
European General Data Protection Regulation 2016/679 concerning the protection of
individuals and the personal data treatment (hereinafter referred to as Regulation/
GDPR ).
Therefore, according to artt. 13 and 14 of the Regulation, we provide you with the
following information.
Personal data treatment means any operation or set of operations which is performed
on personal data or on sets of personal data, whether or not by automated means, such
as collection, recording, organisation, structuring, storage, adaptation or alteration,
retrieval, consultation, use, disclosure by transmission, dissemination or otherwise
making available, alignment or combination, restriction, erasure or destruction.
1 DATA CONTROLLER
The Data Controller is A.R.IM who is also responsible to the legitimate and correct
use of your personal data and who can be contacted for any information or request at
the following addresses:
- Data controller: A.R.IM. S.r.l
- Address: Vic. di Casale Lumbroso, 200 - 00166 Roma RM, IT
- Contact: info@hydromania.it
1.1 Data Protection Officer (DPO-RPD) contacts:
e-mail: rpd@hydromania.it
2 PURPOSE OF THE DATA PROCESSING
Your personal data are collected and processed for the following purposes:
2.1 Online selling of tickets and/or season tickets (Ticketing)
- Processed data: Name and surname, address or other elements for personal
identification; bank and / or payment details, contacts data (telephone number,
email, etc.)
- Legal basis: processing is necessary for the performance of a contract to which
the data subject is party or in order to take steps at the request of the data
subject prior to entering into a contract.
2.2 Direct Marketing and promotional activities:
- Processed data: Name and surname, address or other elements for personal
identification; contacts data (telephone number, email, etc.)
- Legal basis: the data subject has given consent to the processing of his or her
personal data for one or more specific purposes- European Regulation (art. 6/
GDPR 2016/679)
2.3 Fulfillment of specific obligations established by law, by a regulation or by
community legislation
- Processed data: Name and surname, address or other elements for personal
identification; contacts data (telephone number, email, etc.)
- Legal basis: processing is necessary for compliance with a legal obligation to
which the controller is subject.-European Regulation (art. 6/ GDPR 2016/679)
3 DATA RETENTION TIME
Personal data shall be collected for specified, explicit and legitimate purposes and not
further processed in a manner that is incompatible with those purposes; further
processing for archiving purposes in the public interest or statistical purposes
management of any complaints / disputes or for legal purposes.
Specifically, the Data Controller will process data for no more than 10 years from
data collection for Marketing Purposes.
4 DATA PROTECTION
We process your personal data with regard to the protection of the fundamental rights
and freedoms of natural persons, we regularly check and evaluate the effectiveness of
the technical measures adopted, in order to guarantee the security of the processing
(from article 32 of the Regulation).
5 ADDRESSES
Your data may be sent to the following addresses or categories of recipients:
Consultants and freelancers in single or associated form; Companies and businesses;
Judicial Authority, by law obligation; Persons authorised to process data.
The updated list of data processors is available from the Data Controller.
Personal data will not be subject to any transfer outside the EU.
6 RIGHTS OF THE INTERESTED PARTY
In addition to the above information, to ensure that your data is processed as correctly
and transparently as possible, you must be aware of the fact that:
- has the right to ask the data controller to access your personal data and to correct or
cancel them or limit the processing that concerns you or to oppose their treatment;
- if you have given consent for one or more specific purposes, you have the right to
withdraw this consent at any time;
- has the right to lodge a complaint with the following Supervisory Authority:
Guarantor for the protection of personal data;
Furthermore, the interested party has the right to the portability of his personal data.
6.1 Profiling
The processing takes place through automated processes that do not determine the
profiling of the interested parties.
7 PURPOSE BASED ON CONSENT
Taking note of my right to withdraw consent at any time, I consent to the
processing of my personal data by the Data Controllers, for the purposes indicated
below (art.7 Regulation 2016/679).
Rome March 23 2020