In this page you will find information on how to manage your personal data through our site. We provide this information to comply with legal obligations regarding the protection of personal data provided for by Regulation (EU) 2016/679 or “Regulation”.

Data Controller and Data Protection Officer
The Data Controller of personal data, that is, who makes the decisions regarding the methods and purposes of the processing, is A.C.S.D. Accidental Tourist (hereinafter “Company”) which has its registered office at Via Roma, 647 San Donato in collina – 50010 – Bagno a Ripoli, Firenze – Italy. To contact the owner you can use the email addressoffice@accidentaltourist.com.

Information on the processing of personal data
When you visit, consult or use the services available on this site, we may process the following personal data (ie data relating to identified or identifiable persons). For each type of data you will find information concerning the purpose of the processing, the mandatory nature or otherwise, the methods and place of treatment, the legal basis of the processing, as well as the subjects to whom the data may be communicated and the relative retention period .

Name, surname, username
Purpose of the treatment
Account registration. Provision of the service requested by you (eg registration to webinars, newsletters, quotes) together with any contact details (see below) and with your consent, sending promotional messages on the Company’s products and services and, possibly of other group companies.
With your consent, together with the additional information below, activities of profiling and analysis of the browsing experience for marketing and promotional purposes.

Required or not to provide data
Required for account creation.
Mandatory for the execution of the requested service.
Except in the case where the data is necessary for other purposes, the release of data for sending promotional messages on the products and services of the Company and, possibly, other companies of the group or for profiling activities is optional and may be omitted.

Mode and place of treatment
The processing connected to the web services of this site takes place at the headquarters of the Owner. Personal data are mainly processed with automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Legal basis for data processing
Regarding the purposes related to the management of the account and the execution of the requested service, your data are processed on the basis of the need to execute your request.
Regarding the purposes of sending promotional messages and / or for profiling purposes, data are processed only if you have given your specific consent.

Recipients of the data
The data could be communicated to other companies, which operate as data processors, for the technical management of the account and the site.
Moreover, in case of consent to the processing of data for marketing purposes, and any profiling, the data may also be processed by marketing agencies, market research or other companies, as data controllers, for purposes related to the management and transmission newsletter and business information via email, direct sales, market research or other promotional activities and for profile analysis.

Data retention period
For the period strictly necessary to achieve the purposes for which they were collected (ie, for the duration of the relationship with the customer, and for the conservation for civil, fiscal and accounting purposes).
In case of data processing for marketing and / or profiling purposes, the data are kept until the consent is revoked, or in the maximum terms permitted by law.

Information for billing and payment data
(VAT number, credit card, social security number, address, company name)
Purpose of the treatment
Tax and accounting management of transactions. Provision of the service you have signed up (eg registration to webinars) Third parties offering the payment service have access only to limited information regarding this data.

Required or not to provide data
Mandatory for the completion of the purchase and supply of the requested service / product.

Mode and place of treatment
Personal data are mainly processed with automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Legal basis for data processing
Your data is processed on the basis of the need to execute the purchase contract.

Recipients of the data
The data could be communicated to other companies, which operate as data controllers, for the technical management of the account and the site. Furthermore, in case of consent to the processing of data for marketing purposes, and any profiling, the data may also be processed by marketing agencies, market research or other companies, as data controllers for purposes related to the management and sending of data. newsletters and business information via email, direct sales, market research or other promotional activities or profiling activities.

Data retention period
For the period strictly necessary to achieve the purposes for which they were collected. In case of data processing for marketing purposes, the data are stored until the consent is revoked, or within the maximum terms permitted by law.

Personal data contained in the CV (contact data, work experience, etc.)
Purpose of the treatment
Management of received applications and selection of personnel.

Required or not to provide data
Mandatory for the evaluation of the candidature by the Company.

Mode and place of treatment
The processing connected to the web services of this site takes place at the headquarters of the Owner. Personal data are mainly processed with automated tools. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Legal basis for data processing
Your data are processed on the basis of the need to evaluate your CV based on your request expressed by sending the CV itself.

Recipients of the data
The data may be disclosed to third parties (eg personnel selection agencies) for purposes strictly related to the management of the application.

Data retention period
For the period strictly necessary to achieve the purposes for which they were collected, that is, for the period necessary to evaluate the application sent. In any case, received CVs are deleted every 12 months.

You will find further information concerning the processing of your personal data (for example in relation to the purchase / subscription of products or services of the Company or other group companies that provide the services available on the portal, customer care services, etc. .) in the information that is available in other sections of the site and which are appropriately highlighted.

Rights of the interested parties
You can access your data at any time and for free, receive your personal electronic data in a structured and commonly used mechanically readable format and ask us to send it to another data controller (data portability), and have them corrected, updated, modified or delete (subject to any applicable exceptions). We inform you that requests for deletion of data are subject to current legal requirements and to the conservation of documents imposed on us by laws or regulations.

Where the processing of your data is based on consent, you have the right to withdraw your consent at any time. Therefore, you always have the right to object to the sending of newsletters and to the processing of data for all or only some of the marketing or commercial purposes. You can also update the data provided to the Company by sending an email to info@meta.roma.it, or by mail to A.C.S.D. Accidental Tourist – Via Roma, 647 San Donato in collina – 50010 – Bagno a Ripoli, Firenze.
When contacting us, you will need to make sure that you include your name, email address, postal address and / or telephone number (s) to make sure we can handle your request correctly.

If you believe there is a problem with how you handle personal data, you will have the right to file a complaint with your national personal data protection authority or any other EU or EEA country.