(Pursuant to Art. 13 of Regulation EU 2016/679 - GDPR)
This Privacy Policy applies to the website
1. Data Controller
The Data Controller is:
International Leisure Services s.r.l.
Registered Office: Viale Emilia 83/A, 20093 Cologno Monzese (MI), Italy
VAT ID: 10575290969
E-mail: info@leisure-services.com
PEC (Certified Email): leisure-services@pec.it
2. Types of Data Processed
· Navigation Data: IT systems automatically acquire certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g., IP address, request timestamps, etc.).
· Data Provided Voluntarily: Personal details (first and last name), shipping and billing address, email address, phone number, bank details, or payment data required to fulfill the order.
3. Purposes and Legal Bases for Processing
Personal data is processed for the following purposes:
· Order Fulfillment and Contract Management: Administrative, accounting, product shipping, and customer support activities.
Legal basis: Performance of a contract or pre-contractual measures (Art. 6.1.b GDPR). Providing data for this purpose is mandatory; failure to provide it will make it impossible to complete the order.
· Compliance with Legal Obligations: Compliance with tax, accounting, and civil law requirements.
Legal basis: Legal obligation to which the Data Controller is subject (Art. 6.1.c GDPR).
· Commercial Communications and Newsletters (Marketing): Sending promotional materials and special offers.
Legal basis: Explicit user consent (Art. 6.1.a GDPR). Providing data for this purpose is optional and can be revoked at any time.
4. Processing Methods and Data Retention
Data processing is carried out using automated/IT tools as well as manual procedures, implementing appropriate security measures to prevent unauthorized access, loss, or unlawful use of data.
Data will be stored for the following periods:
· Billing and Accounting Data: Retained for 10 years as required by applicable tax and commercial laws.
· Marketing Data: Retained until consent is revoked by the user, or for a maximum of 24 months from collection.
5. Recipients of Personal Data
Within the scope of the purposes described above, data may be disclosed to:
· Couriers and logistics companies responsible for transport and delivery.
· External tax, legal, and accounting advisors.
· Banking institutions and payment service providers (e.g., PayPal, Compass).
· Public authorities and supervisory bodies where required by law.
Data will not be disseminated or transferred to third parties for their own independent marketing purposes under any circumstances.
6. Rights of the Data Subject
As a data subject, under Articles 15–22 of the GDPR, you have the right to:
· Request access to your personal data, as well as its rectification or erasure (Right to be forgotten).
· Request restriction of processing or object to the processing.
· Request data portability to another controller.
· Revoke consent for marketing purposes at any time.
· Lodge a complaint with a Data Protection Supervisory Authority.
To exercise these rights, you may send a written communication to info@leisure-services.com or by registered mail to the registered office of the Data Controller.