The Regional Tourism Board Puglia Promozione

The data controller for the data collected after this website is consulted and/or the relative services are provided is the ‘Pugliapromozione’ Regional Tourism Agency, with registered office in Bari, Piazza Moro, 33/A - Tax Code and VAT number 93402500727, Tel: (+39) 080 5821411, e-mail privacy@aret.regione.puglia.it. Data will be processed at the registered office of Pugliapromozione - Fiera del Levante PAD 172, Lungomare Starita - 70132 Bari, Italy.

Pugliapromozione's Data Protection Officer (DPO) can be contacted by writing to the following address: dpo@aret.regione.puglia.it
. The DPO is the contact person for users wishing to receive information on the processing of their data and/or for the Supervisory Authority.

a) Purposes of data processing and legal basis

Personal data are collected and processed by Pugliapromozione for institutional purposes strictly connected to the use of the website and its services. In particular, personal data may be processed for the following purposes:

- to promote tourism and support tourist information offices;

- to provide registration services and access to reserved areas or to specific services, such as those available by accessing the "DMS" and "PugliaEvents", in order to use our channels to promote your business or events (as part of the website registration process, we collect personal data and password information using the relevant online registration forms);

- to promote the businesses of tour operators and to send legally required communications;

- to collect information about navigation problems, browser compatibility and how the website pages are viewed or loaded (in this case, data are collected and processed in the context of requests for technical assistance);

- to prevent or research fraudulent activities or misuse that may harm the Website.

Specifically, we use the data of all "tour operators" (service users) to:

- endorse fairs and send e-mail invites to participate;

- take part in events and send e-mail invites to participate;

- complete profiling (choosing between themes/products and preferred local areas) to create seller/buyer agendas;

- participate in so-called "educationals” (based on responses and availability, operators may be chosen by journalists on tour);

- include accommodation facilities in catalogues and/or press articles;

- increase visibility on the ‘Viaggiareinpuglia’ desktop and mobile website, as well as on the ‘Visit Puglia’ app;

- ensure distribution on advertising websites in order to boost communications (in line with Pugliapromozione’s mission);

- publish information in open data format on dati.puglia.it;

- contribute to the newsletter.

With regard to services dedicated to "accommodation facilities", we use data to:

- complete SPOT system accreditation;

- send data on tourism flows through the SPOT system;

- provide information on prices and services.

With regard to "Beach establishments" and "Holiday farms without accommodation", we use data to:

- provide information on prices and services.

Current legislation also states that there must be specific grounds for processing users' personal data and, in this case, the justification is:

- to perform a task of public interest or that is connected to exercising the public powers held by Pugliapromozione (institutional purposes);

- to perform an existing contract or to implement the pre-contractual measures adopted upon request, or, in some cases, to fulfil the need to provide feedback to users’ or tour operators’ requests (contractual or pre-contractual purposes);

- to comply with specific legal and/or regulatory requirements (fulfilment of obligations imposed by the Law, by a Regulation or by EU legislation);

- to pursue a legitimate interest of Pugliapromozione or of third parties (e.g. service users);

- under limited circumstances, the consent already granted by users (for one or more specific purposes such as marketing - in the context of sending promotional newsletters - and profiling).

b) Data subject to processing

Purely by means of example, the personal data that shall be processed are those identifying the individuals using the services, such as:

- surname, name and place of birth;

- tax code and/or VAT number;

- telephone number/e-mail address;

- address and house number;

- any other personal data needed to fulfil the requirements involved with the relationship in place between service users and Pugliapromozione.

The data provided in the forms present on the Website are mandatory and are indispensable for Pugliapromozione to provide its services or to fulfil legal or regulatory obligations. Refusal to provide this data will make it impossible to provide the services on offer.

Providing non-compulsory data, on the other hand, is optional and shall have no consequences regarding the use of the website and its services.

Depending on the case in question and, if necessary, on a case-by-case basis, you will be duly informed of whether providing your personal data to Pugliapromozione is mandatory or optional. We will highlight whether providing your data is mandatory or optional by means of a notice or by using a special symbol to mark only the data that are necessary for the provision of services. Please be reminded that failure to provide optional personal data shall not lead to any obligation or disadvantage for users.

Data may be disclosed to other public or private parties who, by law or according to applicable regulations, are required to be aware of said data or are allowed to be aware of them. In particular, the data processed may be disclosed, as well as to our internal members of staff who are authorized to process them, also to the regional authorities or other public bodies concerned (e.g. Municipalities, Province, etc.), to ISTAT - Italian National Institute of Statistics - (in an aggregated form) or to third-party companies or other parties that outsource activities on behalf of Pugliapromozione (e.g. InnovaPuglia S.p.A., a company subject to the management and control of the Puglia Region, with registered office in Valenzano, Bari, strada provinciale per Casamassima Km 3 70010, appointed as data processor in relation to specific types of processing).

Users’ and operators’ personal data will not be transferred abroad to countries other than those belonging to the European Union, unless they ensure adequate levels of protection for individuals. Should this be necessary to provide Pugliapromozione’s institutional services or the services that you have requested (for example, for certain processing activities that may be outsourced to suppliers outside the European Union), we assure you that your personal data shall only be transferred once specific agreements have been concluded between Pugliapromozione and the suppliers in question, containing safeguard clauses and appropriate guarantees to ensure the protection of personal data (e.g. standard contractual clauses approved by the European Commission), or only if other requirements are met in compliance with applicable Italian and EU legislation.

The data collected will be kept for the entire duration of the requested services and, even after they are completed, in order to fulfil all the legal obligations that may be connected or derive from them, except where the user or tour operator has given their express consent for some of the services offered; in the latter case, data may be processed until said consent is withdrawn.
Therefore, the criteria used to determine the retention period are based on:
(i) the specific laws governing the institutional activities of Pugliapromozione; (ii) the terms established by the Puglia Region, where Pugliapromozione acts as data processor; (iii) tax legislation regarding the processing of administrative and accounting data; in particular, financial data (e.g. payments, refunds, etc.) are kept for the period of time required by applicable fiscal and accounting laws.

For further and more detailed information regarding specific processing activities and the specific categories of personal data processed, you can write to privacy@aret.regione.puglia.it or exercise the access rights specified below.

Users of the services offered by Pugliapromozione and tour operators have the rights provided for by the new European legislation on the processing of personal data, and more precisely the right:

a) to obtain confirmation as to whether or not personal data concerning them are being processed, and, where this is the case, access to said personal data and the information relating to the processing;

b) to obtain, without undue delay, the rectification of any inaccurate personal data and to integrate any incomplete data, also by providing a supplementary statement;

c) to obtain the cancellation of personal data if:
- the data are no longer necessary with respect to the purposes for which they were collected or processed,
- the data have been unlawfully processed,
- the data must be deleted to fulfil a legal obligation,
- they have withdrawn their consent,
-  they object to the processing;

d) to obtain the restriction of processing where one of the following applies:
- the accuracy of the personal data is contested, for the period necessary for Pugliapromozione to check their accuracy;
- if the processing is unlawful, cancellation of personal data is objected to and it is instead requested that their use be restricted;
- if the personal data are necessary to ascertain or exercise a data subject’s right in court, while Pugliapromozione no longer needs them for the purposes of the processing;
- if the data subject has objected to processing, pending checks into whether Pugliapromozione’s legitimate grounds may take precedence over the data subject's;

e) where applicable, to receive personal data concerning them in a structured, commonly used and machine-readable format and to transmit said data to another data controller without hindrance from Pugliapromozione;

f) to fully or partially object to processing; if personal data are being processed for scientific or historical research purposes or for statistical purposes, for reasons connected to the specific circumstances, they also have the right to object to processing, unless this is necessary to perform a task of public interest;

g) to withdraw their consent at any time (in these cases, the withdrawal of consent shall not affect the lawfulness of any processing based on said consent before it was withdrawn);

h) to lodge a complaint with the personal data protection authority (for further details on how to do this, it is recommended to visit the www.garanteprivacy.it website).

The aforementioned rights may be exercised by sending a request to Pugliapromozione, or to the Data Protection Officer: - via

 e-mail to the following email address: dpo@aret.regione.puglia.it or to privacy@aret.regione.puglia.it ; or via certified e-mail to the address: ufficioprotocollopp@pec.it ; or via registered letter with acknowledgement of receipt to the following address "Agenzia Regionale Pugliapromozione, Piazza Moro, 33/A, Bari, Italy".

The ‘Pugliapromozione’ Regional Tourism Agency will see to any amendments, or simple updates, to all or part of this privacy policy on data processing, also to take into account any changes to laws or regulations that govern this issue and to protect the rights of service users. Users of our services whose data are in our possession shall be notified of any amendments or updates, via e-mail; in any case, amendments and updates shall be made available in the "Privacy" section as soon as they are adopted. We therefore kindly ask that you regularly visit this section in order to view the most recent and up-to-date information.