INFORMATION PURSUANT TO ART. 13 OF EU REGULATION 2016/679 REGARDING THE
PROCESSING OF PERSONAL DATA
Pursuant to Art. 13 of EU Regulation 2016/679, relating to the protection of natural persons with
regard to the processing of personal data and the free movement of such data, Levelling S.r.l.
(hereinafter “Levelling”), headquartered in BRESCIA (BS), VIA FRATELLI PORCELLAGA 24/A,
CAP 25122, VAT No. 04475810984, owner of the website: about.levelling.me, in its capacity as
Data Controller, informs you that the personal data acquired, voluntarily provided by the data
subject also through the completion of data collection forms present on the Websites, will be
processed in compliance with the aforementioned legislation.
Any third-party websites referenced and/or linked, including via links (specifically including the
websites of third-party suppliers) within the Website, are the sole responsibility of the third
parties that manage them and are therefore subject to the respective suppliers' own terms and
conditions and privacy policies. In particular, the undersigned provides the following information.
CATEGORIES OF DATA
Browsing Data
The IT systems and software procedures responsible for the operation of the site collect, during
their normal operation, certain personal data whose transmission is implicit in the use of Internet
communication protocols. These are information that are not collected to be associated with
identified subjects but could, by their very nature, allow the identification of users through
processing and association with data held by third parties. This category of data includes IP
addresses or domain names of the computers used by users connecting to the site, URI
(Uniform Resource Identifier) addresses of requested resources, the time of the request, the
method used to submit the request to the server, the size of the file obtained in response, the
numerical code indicating the status of the server's response (successful, error, etc.), and other
parameters related to the user's operating system and IT environment. This data is used solely
to derive anonymous statistical information about the use of the site and to monitor its proper
functioning. Additionally, the data may be used to establish liability in the event of hypothetical
cybercrimes against the site: subject to this eventuality, web contact data persist for a limited
period and are periodically deleted.
Data Voluntarily Provided by the User
The data subject may voluntarily provide the requested information necessary for the provision
of services by completing the appropriate data collection forms present on the platform.
Therefore, common data of an essentially identifying nature (e.g., first name; last name;
physical and/or telephone and/or electronic contact details), login credentials, email address,
passwords, and payment settings data (including credit card information and promotional codes,
gift vouchers, and account balance) may be collected. The data controller will not collect and/or
process “special categories of personal data” as defined in Art. 9 of the Privacy Regulation (e.g.,
health status).
Cookies
The Websites use cookies in some of their areas. Cookies are files that store information on
hard drives or in the browser cache. They allow the respective Websites to check if the user has
already visited them, load any customizations and/or preferences (language, screen size, etc.),
and collect some statistical data (most visited pages, visit durations, etc.). Through this data, it is
possible to make the Websites more aligned with users' requests and needs and to facilitate
navigation. For example, cookies ensure that information on the site during future visits
corresponds to the preferences collected and/or set.
PURPOSES OF PROCESSING AND LEGAL BASIS
Processing will also be carried out with the aid of computer means for the following purposes:
a) Purchase and Delivery of Products and Services
We use personal data to receive and manage orders, provide products and services, process
payments, and communicate with the data subject regarding orders, products, services, and
promotional offers. The data collected for this purpose, and in particular for managing guided
tour reservations, will be processed without the need for explicit consent from users, pursuant to
Art. 6, paragraph 1, letter b) of the Privacy Regulation, to fulfill contractual and/or
pre-contractual obligations towards users.
b) Providing and Improving Services and Resolving Any Related Issues
We use personal data to provide functionalities, analyze performance, correct errors, and
improve the use and efficiency of our Services. The data collected for this purpose will be
processed without the need for explicit consent from users, pursuant to Art. 6, paragraph 1,
letters b) and c) of the Privacy Regulation, to fulfill contractual and/or pre-contractual obligations
towards users, as well as to comply, in general, with legal and/or regulatory obligations.
c) Sending Promotional Communications and Advertising Material
Offering our own or third-party products and/or services, conducting surveys and market
research, using any means including, in particular, telephone with an operator and/or automated
systems (e.g., SMS, MMS, fax, auto-responders, push notifications, social media). The data
collected for this purpose will be processed with the explicit and free consent of the data subject
pursuant to Article 6, paragraph 1, letter a) of the Privacy Regulation.
d) Providing the Newsletter Service
We process, using computer and telematic tools, the data directly provided by you through the
completion of the appropriate form on our website to provide an automatically and freely
distributed newsletter service via email. Such data will be kept for the duration the newsletter
service is active. You may unsubscribe from the service by sending an email to
info@levelling.me. The data collected for this purpose will be processed based on your consent
provided pursuant to Art. 6, par. 1, lett. a) of Regulation (EU) 2016/679.
NATURE OF CONSENT
Providing personal data requested for the processing referred to in point 2 letters a) and b) is
mandatory, and in case of refusal to provide them, we will not be able to provide the requested
service. If you wish to have the processing referred to in point 2 letters c) and d) carried out, you
must provide us with your consent. Consent can be revoked at any time without affecting the
lawfulness of processing based on consent given before its withdrawal.
METHODS OF PROCESSING AND RETENTION PERIOD
Data is collected, processed, and stored predominantly on magnetic, electronic, and/or
telematic media. In any case, processing is based on assignments formalized prior to the start
of the processing phase, and simultaneously with adequate information and training on security
measures and procedures to ensure an adequate level of security. It is specified that the data
subject will not be subject to any decision based solely on automated processing, including
profiling, which produces legal effects concerning them or significantly affects their person.
Personal data will be kept only for the time necessary to continue the purposes for which they
were collected, in compliance with the principle of minimization referred to in Art. 5.1.c) of the
Privacy Regulation. As this is a periodic continuous service, data will be processed by Levelling
S.r.l. as long as the aforementioned service is active or not interrupted by the user, subject to
additional retention periods provided by current legislation for specific fiscal/administrative
and/or similar purposes.
COMMUNICATION
Your data may be communicated to:
Consultants (tax, IT service providers, etc.), specifically assigned for this purpose;
Any public authorities that request them or to whom information must be communicated
in compliance with specific legal obligations;
Companies that provide services to Levelling S.r.l., functional to the performed activity.
The list of subjects subsequently appointed as Data Processors will be made available, upon
request, in the legally required forms, at the contact details of the Data Controller indicated in
the following point 8 of this information notice. The collected and processed data will not be
disseminated, made available, or consulted in any form to subjects other than those indicated in
this information notice and/or provided by privacy legislation, nor to undefined subjects.
TRANSFER OF DATA ABROAD
Data provided by users may be transferred outside the national territory within the scope of
pursuing the purposes referred to in Art. 2, to companies belonging to the categories listed in
the previous point, headquartered in countries within the European Union or outside the
European Union; in the latter case, an adequate level of data protection equivalent to the
European one will be ensured. The regulation on third-party cookies, described in this
information notice, remains unaffected and unaffected.
RIGHTS OF THE DATA SUBJECT
Under the conditions provided by EU Regulation 2016/679, you may exercise the following
rights:
Art. 7 Right to withdraw consent, exercisable at any time without affecting the lawfulness
of processing based on consent given before withdrawal;
Art. 15 Right of access by the data subject;
Art. 16 Right to rectification;
Art. 17 Right to erasure;
Art. 18 Right to restriction of processing;
Art. 20 Right to data portability;
Art. 21 and Art. 22 Right to object and automated decision-making processes relating to
natural persons.
To verify the existence of the conditions and the methods for exercising the aforementioned
rights, please refer to the full text of the cited provisions, available on the website:
www.garanteprivacy.it. We inform you that, should you consider your rights as stated above to
be violated, current legislation allows you to file a complaint with the national Supervisory
Authority.
IDENTIFICATIVE AND CONTACT DATA OF THE DATA CONTROLLER
The Data Controller is Levelling S.r.l., VAT No. 04475810984, headquartered in BRESCIA (BS),
VIA FRATELLI PORCELLAGA 24/A, CAP 25122;
Email: info@levelling.me
PEC: levelling@pec.it
Telephone: +39 334 704 2158