Itinerari in Italia, in accordance with the provisions of the law in force, undertakes to treat the personal data provided by users with the utmost respect and responsibility, limiting the acquired data to a minimum.
In the privacy policy, that Itinerari in Italia has included on its website, it already sets out the purposes of data collection, the methods and times of use, basing its activity on maximum transparency.
In addition to the privacy information, which also provides for consent to the processing of data for the purposes indicated, where not already provided for by law, Itinerari in Italia has also included the possibility of providing consent for advertising, promotion and approval activities.
In particular, it is believed here also to highlight to users the rights that they can exercise.
Rights of the interested party
The interested party is allowed the right of access to the collected data (art. 15 GDPR) [1] which relates to him, in an easy way, in order to know and obtain communications in particular with regard to the purpose and methods of treatment, but not only. For the exercise of this right, Itinerari in Italia requires that the information or processing activities in relation to which the user needs to be aware are specified.
Furthermore, in relation to these processed data, if the interested party recognizes their inaccuracy, he may request their correction or integration (Article 16 of the GDPR) [2], also by providing an additional declaration.
The interested party also has the right to impose a restriction on the processing of data to the data controller (art. 18 GDPR) [3], e.g. when the interested party disputes the accuracy of the same and for all the time necessary for verification; when the treatment is illegal; when the data, although no longer processed, are necessary for the purposes of judicial protection; when balancing rights.
Still the interested party must be guaranteed the right to be forgotten (art. 17 GDPR) [4], that is, the right to obtain the cancellation of their personal data by the data controller, who, within the limits of their possibilities, must also take care to have these data deleted also to the subjects to whom it has communicated the data.
Furthermore, the interested party has the right to object to the processing of personal data [5]: in the event that the processing takes place for purposes of public interest or legitimate interest; or in cases of processing for marketing purposes; finally, the interested party may object to the use of the data, when this responds for scientific or historical research purposes.
Right to data portability.
This right provides data subjects to receive, from itinerinitalia.com, “personal data concerning the obligations of a data controller” so that he can transmit them and another data controller (for example, another company).
The right concerns the data “provided” by the interested party. Therefore, it is limited to personal data only, it does not apply to anonymous data, but instead applies to pseudo anonymous data.
Data subjects have the right to obtain personal data in a structured, commonly used and machine-readable form and, where possible, to request direct transmission to another owner.
Exercise of rights
Once the rights of the interested party have been highlighted, Routes in Italy can be contacted by email by users all at the email address info@itinerariinitalia.it, if they intend to use one of the faculties above.
The deadline for replying is 1 month for all rights. This term can be extended to 3 months in cases of particular complexity. In this case Delta Informatica will notify the interested party within the month.
The exercise of rights is generally free of charge. However itinerarinintalia.com can evaluate if the answer is complex to the point of having to ask for a contribution internally, stabilize the amount, but only if it is a manifestly unfounded or excessive or repetitive request. The answer will be provided in writing, the entire address provided in the request. Routes in Italy may request information within an identification purpose and the interested party is required to provide such information, as well as proof of their identity.
Transfer of data to non-EU countries
This site may share some of the data collected with services located outside the European Union area (in particular with Google, Facebook and Microsoft (LinkedIn). The transfer is authorized based on specific decisions of the European Union and of the Guarantor for the protection of personal data, in particular the decision 1250/2016 (Privacy Shield – you can view the information page on the Italian Guarantor website), for which no further consent is required. The companies mentioned above guarantee their adhesion to the Privacy Shield .
Security measures
This site processes user data in a lawful and correct manner, adopting the appropriate security measures to prevent unauthorized access, disclosure, modification or unauthorized destruction of data. The treatment is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, categories of agents involved in the organization of the site (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers, may have access to the data). hosting provider, IT companies, communication agencies).
Right of access of the interested party (C63, C64)
The interested party has the right to obtain confirmation from the data controller that it is or
less in progress a processing of personal data concerning him and in this case, to obtain
access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be
press releases, in particular if recipients from third countries or international organizations;
d) when possible, the retention period of the personal data provided or, if not
it is possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller for correction or
the cancellation of personal data or the limitation of the processing of personal data
concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
g) if the data are not collected from the data subject, all available information
on their origin;
h) the existence of an automated decision-making process, including the profiling of which
in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic
used, as well as the importance and expected consequences of this treatment for the data subject.
If personal data are transferred to a third country or to an international organization,
the interested party has the right to be informed of the existence of adequate guarantees for
pursuant to Article 46 relating to the transfer.
The data controller provides a copy of the personal data being processed.
In case of further copies requested by the interested party, the data controller can charge
a reasonable expense contribution based on administrative costs. If the interested party presents
the request by electronic means, and unless otherwise indicated by the interested party,
information is provided in a commonly used electronic format.
The right to obtain a copy referred to in paragraph 3 must not infringe the rights and rights
freedom of others.
Right of rectification (C65)
The interested party has the right to obtain the correction of personal data from the data controller
inaccuracies that concern him without undue delay. Taking into account the purposes of the
treatment, the interested party has the right to obtain the integration of incomplete personal data,
even by providing a supplementary statement.
[3] Right to limitation of treatment (C67)
The interested party has the right to obtain the limitation of the processing from the data controller
when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data, for the period necessary for the owner
of the treatment to verify the accuracy of such personal data;
b) the treatment is unlawful and the interested party opposes the cancellation of personal data and
instead asks that its use be limited;
c) although the data controller no longer needs it for processing purposes, i
personal data are necessary for the interested party for the assessment, exercise or defense of
a right in court;
d) the interested party has opposed the processing pursuant to Article 21, paragraph 1, pending
verification regarding the possible prevalence of the legitimate reasons of the data controller
than those of the interested party.
If the processing is limited pursuant to paragraph 1, these personal data are processed,
except for storage, only with the consent of the interested party or for verification
GENERAL REGULATION ON DATA PROTECTION 99
CHAPTER III – Rights of the interested party Art. 18
to, the exercise or defense of a right in court or to protect the rights of
another natural or legal person or for reasons of significant public interest in the Union
or a Member State.
The interested party who obtained the limitation of treatment pursuant to paragraph 1 is
informed by the data controller before this limitation is lifted.
Article 17
Right to erasure (“right to be forgotten”) (C65, C66)
The interested party has the right to obtain the cancellation of personal data from the data controller
that concern him without undue delay and the data controller has the obligation to
delete personal data without undue delay if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected
or otherwise processed;
b) the interested party revokes the consent on which the treatment is based in accordance with the article
6, paragraph 1, letter a), or article 9, paragraph 2, letter a), and if nothing else exists
legal basis for processing;
c) the interested party opposes the treatment pursuant to Article 21, paragraph 1, and does not exist
no legitimate prevailing reason to proceed with the treatment, or opposes
to the treatment pursuant to Article 21, paragraph 2;
d) personal data have been unlawfully processed;
e) personal data must be deleted to fulfill a legal obligation under
Union or Member State law to which the data controller is subject;
f) personal data have been collected in relation to the offer of information society services
referred to in Article 8, paragraph 1.
The data controller, if he has made personal data public and is obliged, pursuant to
paragraph 1, to delete them, taking into account available technology and implementation costs
adopts reasonable measures, including technical ones, to inform the data controllers
who are processing the personal data of the data subject’s request to delete any link, copy or reproduction of your personal data.
Paragraphs 1 and 2 do not apply to the extent that processing is necessary:
a) for the exercise of the right to freedom of expression and information;
b) for the fulfillment of a legal obligation that requires the treatment required by law
of the Union or of the Member State to which the data controller is subject or for the ex-
execution of a task performed in the public interest or in the exercise of audiences
powers with which the data controller is invested;
c) for reasons of public interest in the public health sector in accordance with the article
9, paragraph 2, letters h) and i), and of article 9, paragraph 3;
d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes
in accordance with Article 89, paragraph 1, to the extent that the right referred to
in paragraph 1 you risk making it impossible or seriously jeopardizing the achievement
the objectives of this treatment; or
e) for the assessment, exercise or defense of a right in court.
[5] Right to object (C69, C70)
The interested party has the right to object at any time, for reasons related to his
particular situation, to the processing of personal data concerning him pursuant to the article
6, paragraph 1, letters e) or f), including profiling based on these provisions.
The data controller refrains from further processing personal data except that
he demonstrates the existence of binding legitimate reasons to proceed with the treatment that prevail
on the interests, rights and freedoms of the interested party or for the assessment,
the exercise or defense of a right in court.
If personal data are processed for direct marketing purposes, the interested party has
the right to object at any time to the processing of personal data concerning him
carried out for these purposes, including profiling to the extent that it is connected
to that direct marketing.
If the interested party objects to the processing for direct marketing purposes, the data
personal data are no longer processed for these purposes.
The right referred to in paragraphs 1 and 2 is explicitly brought to the attention of the interested party
and is presented clearly and separately from any other information at the latest
at the time of the first communication with the interested party.
GENERAL REGULATION ON DATA PROTECTION 101
CHAPTER III – Rights of the interested party Art. 21
In the context of the use of information society services and without prejudice to the directive
2002/58 / EC, the interested party can exercise his right of opposition by means
automated systems that use technical specifications.
If personal data are processed for scientific or historical research purposes or for statistical purposes
pursuant to Article 89, paragraph 1, the interested party, for reasons related to his situation
in particular, has the right to object to the processing of personal data concerning him,
except if the processing is necessary for the execution of a public interest task.
This website uses cookies. We use cookies to personalize content and ads, provide social media features and analyze our traffic. We also provide information on how you use our site to our partners who deal with web analytics, advertising and social media, who may combine it with other information that you have provided them or that they have collected based on your use of their services.
Cookies are small text files that can be used by websites to make the user experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
Your consent applies to the following websites:
Cookie declaration last updated on 11/05/2018 by Cookiebot:
Required (4)
The necessary cookies help to make a website usable by enabling basic functions such as page navigation and access to protected areas of the site. The website cannot function properly without these cookies.
Name Supplier Purpose Maturity Type
__RequestVerificationToken cookiebot.com Helps prevent CSRF (Cross-Site Request Forgery) attacks. HTTP Session Cookie
ASP.NET_SessionId cookiebot.com Preserves the user’s status on the various pages of the site. HTTP Session Cookie
ASPXAUTH cookiebot.com Identifies the user and allows authentication on the Session HTTP Cookie server
CookieConsent cookiebot.com Stores the user’s cookie consent status for the current domain 1 year HTTP Cookie
Preferences (1)
Preference cookies allow a website to remember information that affects the way the site behaves or presents itself, such as your preferred language or the region you are in.
Name Supplier Purpose Maturity Type
userlang cookiebot.com Remember the language version of a website selected by the user 1 year HTTP Cookie
Statistics (2)
Statistical cookies help website owners to understand how visitors interact with sites by collecting and transmitting information anonymously.
Name Supplier Purpose Maturity Type
_ga cookiebot.com Register a unique ID used to generate statistical data on how the visitor uses the website. 2 years HTTP Cookie
_gid cookiebot.com Register a unique ID used to generate statistical data on how the visitor uses the website. HTTP Session Cookie
Marketing (27)
Marketing cookies are used to monitor visitors on websites. The intent is to display relevant and engaging ads for the individual user and therefore those of greater value for publishers and third party advertis
Name Supplier Purpose Expiration Type
_hjIncludedInSample cookiebot.com Determines whether the user should be logged in for statistical purposes. HTTP session cookies
Ads / User Lists / # google.com Unclassified session pixel tracker
c [x2] bidswitch.net
rubiconproject.com It regulates the synchronization of the buyer and the exchange of user data between the various advertising services. 1 year HTTP cookie
collect google-analytics.com Used to send data to Google Analytics on the device and visitor behavior. It tracks the visitor on devices and marketing channels. Session Pixel Tracker
fr facebook.com Used by Facebook to provide a range of advertising products such as real-time offers from third party advertisers. 3-month HTTP cookie
GPS youtube.com Register a unique ID on mobile devices to allow tracking based on your GPS geographic location. HTTP session cookies
id yieldlab.net Register a unique ID that identifies the device of the user who returns to the site. The ID is used for targeted advertising. 1 year HTTP cookie
IDE doubleclick.net Used by Google DoubleClick to record and produce reports on user actions on the site after publishing or clicking on an advert for the advertiser in order to measure the updating of an advertisement and the targeted advertisement of the user . 1 year HTTP cookie
khaos rubiconproject.com Records anonymized user data, such as IP addresses, geographic location, websites visited and on which advertisements you clicked on purchases, with the ad tools the ads shown, based on the address paths on the websites it uses the same network of advertisements. 1 year HTTP cookie
KRTBCOOKIE_ # pubmatic.com Registers a unique user ID that identifies the user’s device during subsequent logins to sites that use the same advertising network. The ID is used to allow targeted advertising. 3 months HTTP Cookie PREFyoutube.com Register a unique ID used by Google for statistics related to how the visitor uses YouTube videos on different websites. 8 months HTTP Cookie PUBMDCIDpubmatic.com Register a unique user ID that identifies the device of the user during subsequent access to sites that use the same advertising network. The ID is used to allow targeted advertising. 3 months HTTP CookiePugTpubmatic.com Unclassified 29 days HTTP Cookieput_ # rubiconproject.com Records anonymized user data, such as IP addresses, geographic location, websites visited and which advertisements the user clicked on, with the goal of optimizing the ads shown, based on the movements of the user on the websites that use the same network of adverts. which ads the user clicked, with the aim of optimizing the ads shown, based on the movements of the user on the websites that use the same advertising network. 29 days HTTP Cookierpxrubiconproject.com Unclassified 29 days HTTP Cookietest_cookiedoubleclick.net Used to check if the browser user supports cookies.SessionHTTP Cookietrfaceb ook.comNot ClassifiedSessionPixel Trackertuuid [x2] 360yield.combidswitch.netNot Classified3 MonthsHTTP Cookietuuid_last_update360yield.comNot Classified3 MonthsHTTP Cookietuuid_lubidswitch.netNot Classified1 YearHTTP Cookieum360yield.comNot Classified3 MonthsHTTP CookieHowtimes3HTTP CookiesHowtimyHowToHowToHowTipsHowToIPThttp: Embedded YouTube videos. 179 days HTTP Cookies
Unclassified (4)
Unclassified cookies are cookies that are being classified, together with individual cookie suppliers.
Name Supplier Purpose Maturity Type
ZD-buid cookiebot.com Unclassified Persistent HTML Local Storage
ZD-currentTime cookiebot.com Unclassified Session HTML Local Storage
ZD-settings cookiebot.com Unclassified Persistent HTML Local Storage
ZD-suid cookiebot.com Unclassified Persistent HTML Local Storage
