Privacy policy regarding the processing of personal data on the website turistadietrocasa.ch
Pursuant to the Federal Data Protection Act (DPA), Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC (eDirective), we provide you with the necessary information regarding the processing of personal data collected during your experience on our website turistadietrocasa.ch
1) CATEGORIES OF PERSONAL DATA SUBJECT TO PROCESSING | DEFINITIONS
Personal data provided - or otherwise acquired in accordance with applicable legislative and contractual provisions - inherent in, related to, and/or instrumental to the evaluation of your experience on our site, will be processed in accordance with privacy regulations and confidentiality obligations applicable to you.
Personal data: any information about an identified or identifiable person.
Specifically, we will process the following personal data: browsing data (for more information about the data collected with Cookies, please read the Cookie Policy).
It should be noted that the computer systems responsible for the operation of this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
Data subjects: natural or legal persons whose data are being processed (hereinafter, also "You").
Processing means any operation concerning personal data, regardless of the means and procedures adopted, namely the collection, storage, use, review, communication, archiving or destruction of data.
Communication: i.e., making personal data accessible, such as by allowing access, transmission or publication.
2) IDENTITY AND CONTACT DETAILS OF THE JOINT DATA CONTROLLERS.
The entities that jointly determine the purposes and means of processing (hereinafter also only the "Joint Controllers" or the "Companies" or "we") are:
- Ferrovie Luganesi SA, Lugano Station, Via C. Maraini, 6900 Lugano (CH)
- Lugano Public Transportation Ltd., Information and Sales Office, at Pensilina Terminal Lugano center, Corso Pestalozzi, 6900 Lugano (CH)
Co-owners can be contacted at the contact details given on the website, within the "Contact" section.
3) PURPOSE OF PROCESSING | JUSTIFYING REASON | DATA RETENTION PERIOD
PURPOSE OF TREATMENT | JUSTIFICATORY REASON | LEGAL BASIS | DATA RETENTION PERIOD |
a) Activities strictly necessary for the user's navigation on this Internet site and to check its proper functioning. | Overriding Interest of the Data Controller | Legitimate Interest of the Data Controller | Data will be retained until the end of the browsing session. For data processed with technical cookies, please see our Cookie Policy |
(b) Obtain anonymous statistical information on site usage. | Please see our Cookie Policy | Please see our Cookie Policy |
3.1 MODE OF DATA PROCESSING
The processing will be carried out in automated and/or manual form, using methods and tools designed to ensure maximum security and confidentiality, by individuals specially trained to do so. The personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
4) RECIPIENTS OF PERSONAL DATA
We may share personal information with employees and/or personnel acting under the authority of the Data Controllers (duly instructed to do so), as well as third parties bound to the Data Controllers by contractual relationship, for the purpose of fulfilling contractual obligations and fulfilling one or more of the aforementioned processing purposes. These third parties will process the data provided as data controllers or independent data controllers. Specifically, we may share the collected personal data with the following categories of recipients: a) entities that provide services related to the operation of this website (e.g., hosting providers, webmasters); b) support and consulting companies (e.g., web&digital marketing agencies); c) competent authorities for compliance with legal obligations and/or the provisions of public bodies, upon request
5) TRANSMISSION OF PERSONAL DATA OUTSIDE THE CONFEDERATION
The site is based in Switzerland (hosting) and, therefore, personal data processed will not be transmitted outside the Swiss Confederation.
6) RIGHTS OF THE DATA SUBJECT
Under the DPA, you are granted the following rights (non-exhaustive list):
● obtain rectification of inaccurate or outdated personal data; ● To be informed in writing and free of charge whether personal data concerning you are being processed; ● Prevent the disclosure of any sensitive personal data to third parties; ● obtain portability of personal data or request that it be transferred to third parties; ● request restriction or blocking of data processing, prevention of data disclosure to third parties, or rectification or destruction of personal data; ● require the prohibition of specific processing of personal data and specific disclosure of personal data to third parties or the deletion or destruction of specific personal data; ● if neither the correctness nor the inaccuracy of personal data can be proven, request the addition of a note to indicate dispute; ● require that the rectification, destruction, blocking, especially disclosure to third parties, in addition to the notice on the challenge or ruling be disclosed to third parties or published; ● Have the processing of personal data declared unlawful. |
Under the GDPR, you are granted the following rights:
● To obtain confirmation from the data controller as to whether or not personal data concerning you are being processed, and if so, to obtain access to the personal data (Access); ● To obtain from the data controller the rectification of inaccurate personal data concerning him/her (Rectification); ● Obtain from the data controller the deletion of personal data concerning him/her (Deletion); ● Obtain from the data controller the restriction of processing (Limitation); ● Receive in a structured, commonly used, machine-readable format personal data about you provided to a data controller and have the right to transmit such data to another data controller without hindrance from the data controller to whom you provided it (Portability); ● To object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her (Objection). |
Reserving all other administrative and judicial remedies, if you believe that the processing of your data violates the provisions of the DPA and GDPR, you have the right to lodge a complaint with the competent supervisory authority (For Switzerland: Federal Data Protection and Transparency Commissioner; for the European Economic Area, you can consult the website of the European Data Protection Board here https://edpb.europa.eu/about-edpb/about-edpb/members_it).
You may exercise your rights under the DPA and GDPR (to the extent applicable) by contacting the Data Controller by writing to the above addresses.
7) ADDITIONAL INFORMATION | CHANGES | UPDATES
The Data Controller reserves the right to revise, update, add or remove any part of this privacy policy at its discretion at any time. If changes are made, the date of update will be indicated.
Date of last update: May 17, 2023
Privacy policy on the processing of personal data of turistadietrocasa.ch
According to the Federal Data Protection Act (FDPA), Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/EC (eDirective), we provide you with the necessary information regarding the processing of personal data collected and processed during your experience on our website turistadietrocasa.ch
1) CATEGORIES OF PERSONAL DATA PROCESSED | DEFINITIONS
Personal data provided by you - or otherwise acquired in compliance with the legislative and contractual provisions in force - inherent in, connected with and/or instrumental to the assessment of your experience on our website, will be processed in compliance with the provisions of the applicable privacy laws and the obligations of confidentiality.
Personal Data: all information relating to an identified or identifiable person.
In particular, we will process the following personal data: browsing data (for information on data collected through cookies, please see our Cookie Policy).
We specify that the computer systems responsible for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and devices used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer.
Data subjects: natural or legal persons whose data is processed (also referred to as "you").
Processing: any operation with personal data, irrespective of the means applied and the procedure, and in particular the collection, storage, use, revision, disclosure, archiving or destruction of data.
Disclosure: making personal data accessible, for example by permitting access, transmission or publication.
2) IDENTITY AND CONTACT DETAILS OF THE JOINT DATA CONTROLLER
The entities that jointly determine the purposes and means of the processing (hereinafter also referred to as the "Joint Data Controllers" or the "Companies" or "we") are:
- Ferrovie Luganesi SA, Lugano Station, Via C. Maraini, 6900 Lugano (CH)
- Lugano Public Transportation Ltd., Information and Sales Office, at Pensilina Terminal Lugano center, Corso Pestalozzi, 6900 Lugano (CH)
The Joint Data Controllers may be contacted at the addresses indicated in the "Contacts" section of the website.
3) PURPOSE OF THE PROCESSING | DATA RETENTION PERIOD
PURPOSE OF THE PROCESSING | JUSTIFICATION | JUSTIFYING REASON | LEGAL BASIS | DATA RETENTION PERIOD |
a) Activities strictly necessary for the navigation on this website, and to control website's correct functioning. | Overriding Interest of the Data Controller | Legitimate Interest of the Data Controller | Data will be retained until the end of the browsing session. For personal data processed with technical cookies, please read our Cookie Policy. |
(b) Obtaining anonymous statistical information on the use of the website. | Please read our Cookie Policy. | Please read our Cookie Policy. |
3.1 MEANS OF DATA PROCESSING
The processing will be carried out in automated and/or manual form, using methods and tools designed to ensure maximum security and confidentiality, by subjects specially trained to do so. The personal data collected will be kept in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
4) RECIPIENTS OF PERSONAL DATA
We may share your personal information with employees and/or staff acting under the Joint Data Controllers' authority (duly instructed for the former purposes), as well as third parties contractually linked to us, in order to fulfill contractual obligations and achieve one or more of the aforesaid purposes of processing. Such third parties will process your data in their capacity as data processors, or as independent data controllers. More in detail, we may share your personal information to the following categories of recipients: a) subjects who provide services related to the functioning of this website (e.g., hosting provider, webmaster); b) firms or companies within the scope of assistance and consultancy relations (e.g. web&digital marketing agencies); c) competent Authorities for the fulfilment of legal obligations and/or provisions of public bodies, upon request.
5) TRANSFERS OF PERSONAL DATA OUTSIDE THE CONFEDERATION
This website is hosted in Switzerland and thus data will not be transferred outside the Swiss Confederation.
6) RIGHTS OF THE DATA SUBJECT
According to the conditions established by the FDPA, the Data Controller acknowledges the following rights to you as a Data Subject (non-exhaustive list):
|
Under the GDPR, you are granted the following rights:
Object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you (Objection). |
With the exemption of any other administrative or jurisdictional remedy, if the user considers that the processing of his or her data breaches the provisions of the FDPA and the GDPR, he or she has the right to file a complaint with the competent supervisory authority (i.e. the Federal Data Protection and Transparency Commissioner; For the European Economic Area, you can consult the website of the European Data Protection Board here https://edpb.europa.eu/about-edpb/about-edpb/members_en).
You may exercise your rights under the FDPA and GDPR by contacting the Data Controller by writing at the above-indicated contacts.
7) ADDITIONAL INFORMATION | AMENDMENTS | UPDATES
The Data Controller reserves the right to revise, update, add or remove any part of the present privacy policy at its own discretion and at any time. In case of modifications, the date of update will be indicated.
Date of last update: May 17, 2023