Online Private Experience: Uffizi Galleries Inside

Privacy Policy

EU's new General Data Protection Regulation (GDPR) comes into effect on May 25, 2018. We want to let you know we’ve updated our Privacy Policy and Terms and Conditions

Information about the European General Data Protection Regulation (GDPR)

We inform you that for the establishment and execution of the contract with you, when you book one of our services our organization comes into possession of some of your data, also acquired verbally, qualified as personal by the European Regulation 2016/679 (GDPR).According to the law, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy. According to article 13 of the GDPR 2016/679, therefore, we provide you with the following information: Nature of the data processed:We process your data:• Anagraphic, fiscal and of an economic nature necessary for the performance of contractual relationships with you, whether current or future;• Spontaneously supplied by you for the personalized execution of the current or future contract, bearing in mind that there is no obligation on your part to supply them. The data are processed with your express consent (Article 24 letter a, b, c Privacy Code and Article 6 letter b, and GDPR) accepting - with a click in the box at the end of the completion of the form - the terms and conditions of the service we perform.All data will be used solely and exclusively to fulfill:• Pre-contractual, contractual, post-contractual and tax obligations arising from relationships with you;• To the obligations established by law, regulations, community legislation or an order of the Authority.We are not in possession of your data that can be classified as sensitive, particular or of a judicial nature (articles 9 and 10 of the GDPR). Purpose of the processing and duration:Your data are processed for the entire duration of the relationship contract and also subsequently, for contractual requirements and related fulfillment of legal obligations and taxation, and for effective management of financial and commercial relationships. The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes of service. Methods of processing: The processing will be carried out with both manual and / or computerized tools telematics with organizational and elaboration logistics closely related to the purposes themselves and however in order to guarantee the security, integrity and confidentiality of the data in compliance with the organizational, physical and logical measures provided for by the provisions in force. Obligation or right to provide data:As regards the data that we are obliged to know, in order to fulfill the obligations established by law, their non-conferment by you involves the impossibility of establishing or continuing the relationship, to the extent that such data are necessary for execution of the same. Scope of knowledge of your data: The following categories of subjects may become aware of your data, as managers or processors, appointed by the undersigned company:• Data controller;• Accounting and billing staff;• Those involved in the marketing and execution of services. Communication and dissemination:Your data will not be disseminated to third parties by us for their provision or consultation.Your data may be communicated by us to entities, as far as their respective and specific competence is concerned and in general to any public or private entity with respect to which there is obligation for us (or faculty) recognized by law or secondary or community legislation) or need for communication, as well as to our consultants, within the limits necessary to carry out their duties at our office organization, after our letter of appointment imposing the duty of confidentiality and security. Rights of the interested party: In accordance with Art. 7 of Legislative Decree 196/03 of the Articles of the GDPR 679/16: 15 / Right of access, 16 / Right of rectification, 17 / Right to cancellation, 18 / Right to limitation of treatment, 20 / Right to portability, 21 / Opposition right, 22 / Right to oppose the automated decision-making process of GDPR679 / 16. You can exercise your rights by writing to the Data Controller with an email to: [email protected] Withdrawal of consent: With reference to Art. 23 of Legislative Decree 196/03 and Article 6 of GDPR 679/16, you can revoke the consent given at any time. Owner and manager of the treatment: The data controller is PIER CARLO TESTA, Director of the company "The Original & Best Walking Tours" with registered office in Via Sassetti 1 in Florence (Italy). The Data Processor, who can be contacted to exercise  rights and / or for any clarificationsregarding the protection of personal data, can be reached at: [email protected]