Privacy Policy

The company Sisterscom.com S.n.c. (hereinafter, for the sake of brevity, "Sisterscom.com" or the "Company") informs you that the personal data acquired through navigation on this site will be processed in compliance with the law on the protection of personal data.


With reference to the methods of management and processing of the personal data of users who consult this site, pursuant to Article 13 of EU Regulation no. 679/2016, Sisterscom.com provides the following information:


1. Data Controller
The data controller is Sisterscom.com S.n.c., Via Piave 102, 23879 Verderio Inferiore (LC), VAT 03248170163. 


The Company can also be contacted at the info@sisterscom.com e-mail address and at the PEC address amministrazione@pec.sisterscom.com


2. Types of data collected

 

at. Browsing data
The computer systems and software procedures used to operate the website www.aviontourism.com acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the terminals of the users who connect to the site, the MAC (Media Access Control) addresses, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment. 
 

b. Data provided voluntarily by the user
Following the voluntary sending of e-mail messages to the e-mail addresses on the site, Sisterscom.com may process the sender's e-mail address and the additional personal data contained in the message to respond, again by e-mail, to the requests made by the user. 


The interested party is invited not to enter or send through the tools on the site "special data", "biometric data", "genetic data", "data relating to health", "data relating to crimes or criminal convictions" as defined by the legislation in force. Such data, if provided by the interested party, will be immediately deleted.

 

c. Cookies
The site uses technical cookies (session and navigation) to ensure normal navigation and use of the website. The site also uses third-party profiling and analytical cookies (with reduced identification potential), in order to monitor the use of the site by users for the purpose of optimizing the web platform and statistical (analytical). For all information relating to the processing of personal data carried out through cookies, please refer to the extended cookie policy, which can be reached on each page of the portal at the link.


Please note: through the search tools "What will be your next destination?", "Which airport will you fly from?", "Which company will you fly with?", "Travel tips, useful information and news" Sisterscom.com does not process or store data relating to an identified or identifiable person. These tools only act as a filter for identifying information relating to holiday destinations, airlines, airports, useful information for the passenger and news surveyed by the site with the characteristics indicated by the user. No personal data is therefore processed through this tool.


3. Purpose and legal basis of the processing
The navigation data indicated in point 2, letter a) are used to:
a) to obtain anonymous statistical information on the use of the site and to check its correct functioning. The legal basis that legitimizes this purpose of the processing is to be identified in art. 6, par. 1 letter b), GDPR, i.e. in the need to provide the user with the requested service;
b) to comply with legal obligations, regulations or requests from the judicial authorities. The legal basis that legitimizes this purpose of the processing is to be identified in art. 6, par. 1, letter c) GDPR, i.e. in the need to comply with a legal obligation to which the Data Controller is subject;
c) assert or defend a right of Sisterscom.com in court. The legal basis that legitimizes this purpose of the processing is to be identified in art. 6, par. 1 letter f), GDPR, i.e. in the need to ascertain, exercise or defend a right in court.


The data provided voluntarily by the user indicated in point 2, letter b), are processed for:
a) to respond to your requests (by email, telephone, or other contact channels). The legal basis that legitimizes this purpose of the processing is to be identified in art. 6, par. 1 letter b), GDPR, i.e. in the need to provide the user with the requested service;  
b) to comply with legal obligations, regulations or requests from the judicial authorities. The legal basis that legitimizes this purpose of the processing is to be identified in art. 6, par. 1, letter c) GDPR, i.e. in the need to comply with a legal obligation to which the Data Controller is subject;
c) assert or defend a right of Sisterscom.com in court. The legal basis that legitimizes this purpose of the processing is to be identified in art. 6, par. 1 letter f), GDPR, i.e. in the need to ascertain, exercise or defend a right in court.


2. Data retention period
The personal data collected and processed as a result of browsing the www.aviontourism.com site will be stored for the entire period of provision of the service and in any case deleted or made anonymous within 7 days. 


Personal data sent independently by users through the tools on the site (contact channels) will be deleted after providing the requested service or responding to them and in any case within a maximum of 15 days from the end of this activity, with the exception of those necessary for compliance with fiscal, accounting and administrative regulations or to comply with other legal obligations and to document the activities carried out.


3. Processing methods
The personal data collected will be processed, stored and processed with electronic tools and will be stored both on computer and paper supports, organized in databases, and on any other type of suitable support.


Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access.
The processing of personal data carried out by Sisterscom.com does not involve automated decision-making.

 

4. Communication of browsing and personal data
The communication of browsing data is mandatory for the provision of the requested service (navigation on the site) and therefore mandatory for this purpose: failure to communicate navigation data by the interested party will make it impossible for Sisterscom.com to allow navigation on the site www.aviontourism.com. 


The communication of personal data voluntarily provided is mandatory: failure to provide such data will make it impossible for Sisterscom.com to provide the user with the requested feedback (through the contact channels).

 

5. Subjects to whom personal data may be communicated
The personal data collected will not be disseminated and may be communicated, in addition to subjects who are recognized as having the right and interest to access your personal data by law or secondary and/or community regulations, to authorized personnel within the Data Controller, as well as to companies, associations or professional firms that provide services and activities on behalf of the Data Controller as Data Processor, in particular for the provision of services ICT (e.g. web hosting services, cloud providers, etc.), for the fulfilment of legal obligations, as well as for any organisational and administrative need necessary to provide the services requested.


The names of the subjects who may become aware of your personal data as "Data Processors" are shown in an updated list available from Sisterscom.com (to be requested at the addresses indicated in point 1).

 

6. Transfer of data abroad or to international organisations
Sisterscom.com does not transfer the personal data of data subjects collected through the www.aviontourism.com site and the tools provided therein outside the European Economic Area or to international organizations.

 

7. Linking to third-party sites or services
This information is provided only for the processing of personal data carried out through this site or the tools provided for by it, and not for other websites that may be consulted by the user via links, whose managers operate as independent data controllers. Users are therefore invited to carefully read their privacy policies before accessing third-party services. 


8. Rights of the data subject
In relation to the data processing regulated by this policy, the Data Subject has the right to exercise the rights provided for by EU Regulation no. 679/2016 (GDPR) at any time. 

 

  • The right to be informed of any processing of your personal data (pursuant to Art. 13 GDPR). The Data Subject has the right to obtain confirmation as to whether or not his or her personal data is being processed and, if so, must be informed about any aspect relating to the processing operations, including, for example, information about: 
    • Data Processors (who process data in the name and on behalf of the Data Controller), 
    • any other recipient of the data (to whom your personal data may be disclosed), 
    • the purpose and legal basis,
    • the types of data processed, 
    • the data retention period,
    • the transfer of personal data to third countries or international organisations.
  • The right to access your personal data, as well as the right to rectification of inaccurate data and the right to the integration of incomplete data.
  • Right to erasure (so-called right to be forgotten) under the conditions established by art. 17 GDPR, for example, when your personal data is no longer necessary in relation to the purposes for which it was collected or otherwise processed. 
  • Right to limit processing to the purposes and/or methods for which your personal data was collected, under the conditions provided for by art. 18 GDPR.
  • Right to data portability, i.e. the right to receive a copy of all personal data that you have provided to the Data Controller or to transmit such data to another Data Controller without hindrance. 
  • Right to withdraw consent, when expressed to legitimize the processing of your personal data. This right can be exercised at any time, without prejudice to the lawfulness of the processing based on the consent given before its withdrawal.
  • The right to lodge a complaint with a Supervisory Authority, in the event that he/she believes that the processing concerning him/her violates the legislation in force. In this case, he must contact the authority of the Member State in which he or she habitually resides, works or the place where the alleged violation occurred. The contact details of the Italian Supervisory Authority (Garante per la Protezione dei Dati Personali) can be found on its website. 

     

In addition, the Data Subject has the right to object to the processing of his or her personal data when the processing:

  • is necessary for the performance of a task carried out in the public interest,
  • it is necessary for the pursuit of a legitimate interest of the Data Controller,
  • it is aimed at direct marketing activities, including profiling.


To exercise the rights listed above, the data subject may send a request to the e-mail account info@sisterscom.com. Sistercom.com will provide a response within 30 days of receipt of the request.

 

Sisterscom.com reserves the right to update this Privacy Policy.
 

The texts are protected by copyright and cannot be copied.
If you wish, you can share this page.