Privacy Policy

  • Privacy summary
  • Privacy Extended
Please, read the extended version


XX - Aprica
Address: Via Palabione 29
23031 APRICA Italy
VAT Number: IT00427680145
Email: apricaskipass@gmail.com
Phone: +39- 0342 746463


PRIVACY POLICY-Extended version

Updated and Effective as of June 2018

We have prepared this privacy policy ("Privacy Policy" or "Policy") to explain to you how we collect, use, and share information and Personal Data (as defined under EU`s privacy regulations, the General Data Protection Regulation GDPR) we obtain through your use of the e-commerce platform (Services), that are provided by us. By using the Services, you consent to such collection, use and sharing of your information and Personal Data and agree to the terms of this Privacy Policy in the name of the data controller and its subsidiaries.


Information You Choose To Submit-To be able to do an online purchase

We collect your personal data because of the following reasons:
The ski pass or a ticket is mostly personal and we have to be able to check if it is the correct person using the ski pass or ticket. Seasonal ski passes and daily passes is different for different age groups. And In case of refunds or issue of new RFID cards, we will have to be able to identify the correct ski pass holder.

To be able to do a purchase You are required to provide certain Personal Data (for example, your name and e-mail address,), and you must also provide a user name and password.

Examples of personal data we collect:

  • Name, email adress, address, zip, country, gender, birthdate, cell phone and picture ( this is product depended), ID number where this could be product mandatory. This information is often mandatory upon control of your personal skipass/ticket purchase.
  • Your purchase information, what products you ordered. The validity period of the product
  • Your team and their personal data, a set of information is collected from your team if you choose to e.g buy a product to friends or family. You confirm that you have made that person aware of how we collect, use and share their Personal data.

We use your Personal Data to fulfil your requests for products and services, to improve our Services, to contact you from time to time, with your consent, about us and our products and services, and as otherwise described in this Privacy Policy.


This information can be later managed by you under MY ACCOUNT


Information We Automatically Collect

We and our third-party service providers automatically collect certain information from your device or web browser when you interact with the Services to help us understand how our users use the Services . For example, each time you visit the Services we and our third-party service providers automatically collect your IP address, mobile device identifier, browser and computer type, access time, the Web page you came from, the URL you go to next, the Web page(s) that you access during your visit and your interaction with our Services.

We and our third-party service providers use such Usage Data for a variety of purposes including to diagnose problems with our servers and software, to administer the Services, to gather demographic information. The Usage Data we collect is generally non-identifying. We mainly use Google analytics to obtain this information.


Information Use

We use the information we collect, including Personal Data and Usage Data:

  • to enable you to use our Services, to create an account or profile, to process information you provide via our Services (including verifying that your email address is active and valid) and to process your transactions;
  • to provide related customer service and care, including responding to your questions, complaints, or comments and sending surveys (with your consent) and processing survey responses;
  • to provide you with information, products, or services that you have purchased;
  • with your consent, to provide you with information, products, or services that we otherwise believe will interest you, including special opportunities from us and our third-party partners;
  • for internal business purposes, such as to improve our Services
  • to administer offers;
  • to contact you with administrative communications and, in our discretion, changes to our Privacy Policy, Terms of Use, or any of our other policies;
  • to comply with regulatory and legal obligations


Social Network and Platform Integration

The Services contain integration with social networks and other platforms in which information is shared between us and such platforms. For example, if you create or log into your account through a third-party social media site, we will have access to certain information from that site, such as your name, email address, age, photo. If you don't want a social network to collect the information about you as described above, or you don't want a social network to share it with us, please review the privacy policy, privacy settings and instructions of the social network before you log into our e-commerce platform.


Our Information Sharing Practice

  • Generally. We share Non-Personal Data, including Usage Data, de-identified Personal Data and aggregated user statistics, with third parties controlled by us. We share User Information, including Personal Data, as otherwise described in this Policy, and under the following circumstances:
  • Service Providers. We use third parties who provide services to us (for example, analytics companies, data management and storage, payment partners In those circumstances, we disclose User Information so that such service providers can perform those services.They are also required to follow and to comply with appropriate security measures to protect your Personal Data.
  • Third-Party. We will not sell or transfer any information to a Third-party without your consent.
  • You will have a choice (opt-in or opt-out) before we share your information with third parties controlled by the Data controller (E.g ski schools and ski rentals) for marketing purposes. Provided that you have chosen to receive marketing messages, we share your information (including Personal Data) with these third parties. We also match your email address with these third parties with whom you have also consented to share your email address and use such match to deliver custom offers or emails to you.
  • We reserve the right to share User Information: in response to court orders, or legal processes.


Anonymous Data

When we use the term "anonymous data," we are referring to data and information that does not permit you to be identified or identifiable, either alone or when combined with any other information available to a third-party. We may create anonymous data from the Personal Data we receive about you and other individuals whose Personal Data we collect. Anonymous data will include analytics information and information collected by us using cookies. We make Personal Data into anonymous data by excluding information (such as your name, photo and birthdate). Anonymous data are used to analyze usage and make improvements to our e-commerce platform


Your rights
we want you as a customer to have full control with your personal data.
As an online customer you may go to MY ACCOUNT and manage your personal data:

  • You may update your personal information, both your customer account and members of your team.
  • You may download a copy of your information
  • You may delete your customer profile and members of your team.
  • You may change your opinion about getting offers.


Choice of /Opt-IN/Opt OUT for further Communication

We offer you the opportunity to manage your communications from us. Even after subscribing to one or more newsletters and/or opting in to one or more offers to receive marketing and/or promotional communications from us or our third-party partners, users may elect to modify their preferences by going to the MY ACCOUNT anytime or by following the "Communications settings " and/or "Unsubscribe" link provided in any email received. You may also be able to change your preferences by updating your profile or account, depending on which of our Services you are using. Even if you do opt-out of marketing emails, we reserve the right to send you transactional and administrative emails including those related to the Services, service announcements, and to contact you regarding any goods or services you have ordered.


Choice of Updating, downloading and Deleting Your Personal Data

You may access the information we hold about you any time through MY ACCOUNT . Here you would may update, correct, modify or delete from our database any Personal Data. If you delete certain information you may not be able to order services in the future without re-submitting such information. Please note that we will maintain Personal Data in our database whenever we are required to do so by law.
Please note that we need to retain certain information and/or to complete any transactions that you began prior to requesting such change or deletion (for example, when you did a purchase of a lift ticket, you may not be able to change or delete the Personal Data provided until after the completion of such a purchase, e.g a yearly subscription ticket could have a validity of up to one year).
We will retain your Personal Data for the period necessary to fulfil the purposes outlined in this Policy unless a longer retention period is required or permitted by law.

Payment Details

Payment data will be processed for purposes pursuant to directive 2015/2366 (EU) and subsequent changes to payment services in the European internal market (so-called PSD2).


Contact us:
We are happy to answer any questions, you will find our contact details on top of the document If you are not satisfied on how we treat your personal data according to this privacy policy you have the right to contact the destinations local country data protection agency.


INFORMATION ON THE PROCESSING OF PERSONAL DATA
for ski passes and other services purchase and use
Pursuant to Article 13 of the EU Regulation 2016/679
 
The information provided below describes, as required by the EU Regulation 2016/679, the processing operations performed on the personal data of the users visiting the S.I.T.A. SPA website aprica.skiperformance.com.
 
The information provided does not concern other online websites, pages or services that can be accessed via hyperlinks on the above website but relate to resources outside the aprica.skiperformance.com domain.
 
DATA CONTROLLER
 
Visiting the website listed above may result into processing data relating to identified or identified natural persons.
 
The data controller is S.I.T.A. SPA, located in Via Palabione 29, 23031 Aprica (SO), Italy
Email: sitaimpianti@gmail.com, Phone (switchboard): +39 0342252057.


DATA PROTECTION OFFICER
 
The S.I.T.A. SPA ‘s Data Protection Officer (DPO) can be contacted here: Alterego Group srl Via Giovanni Battista Pergolesi 16, 20124 Milano (MI), Italy
Email: RPD@alteregosrl.com, Phone (switchboard): +39 02 26 26 40 92.
 
LEGAL BASIS FOR THE PROCESSING
 
This site processes data mainly based on user consent. The consent is given through the banner placed at the bootm of the homepage on first acces, or through the use or consultation of the site, which behavior is final. With the use or consultation of the site visitors and users approve this statement and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service. Through the communication or service request forms, further consents are collected concerning the specific purpose of the service.
 
CATEGORIES OF PERSONAL DATA AND PURPOSES OF THE PROCESSING
 
Browsing data
 
The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols.
 
This data category includes the IP addresses and/or the domain names of the computers and terminal equipment used by any user, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user's operating system and computer environment.
 
These data are necessary to use web-based services and are also processed in order to
extract statistical information on service usage (most visited pages, visitors by time/date, geographical areas of origin, etc.);
check functioning of the services.
Browsing data are kept for no longer than 2 years and are erased immediately after being aggregated (except where judicial authorities need such data for establishing the commission of criminal offences).
 
Data communicated by users
 
Sending messages, on the basis of the user's free, voluntary, explicit choice, to the S.I.T.A. SPA's contact addresses and filling in and sending the forms made available on the S.I.T.A. SPA's websites entail the acquisition of the sender's contact information as necessary to provide a reply as well as of any and all the personal data communicated in that manner.
These data are stored to pursue the aforementioned purpose and for no more than 2 years (except where judicial authorities need such data for establishing the commission of criminal offences).
Form Registration data is used to allow access to a reserved area for the purchase of ski passes, these data are kept until the user is canceled.
Payment data will be processed for purposes pursuant to directive 2015/2366 (EU) and subsequent changes to payment services in the European internal market (so-called PSD2).

Specific information notices will be displayed on the pages of the S.I.T.A. SPA 's websites that are used for providing certain services.
 
Cookies and other tracking devices
 
No cookies are used to profile users not are other user tracking systems implemented.
 
So-called session (non-persistent) cookies are used exclusively to the extent this is necessary to enable secure, efficient browsing. Storage of session cookies in terminal equipment or browsers is under the user's control, whilst cookie-related information is stored server-side after HTTP sessions in the service logs for no longer than 7 days like all other browsing data.
Cookies detail :
On the site there are 3-part cookies:
• Facebook, policy statement: www.facebook.com/policies
• Linkedin, policy statement: www.linkedin.com/legal/privacy-policy?_l=en
• Twitter, policy statement: twitter.com/en/privacy
• Google , policy statement: policies.google.com/privacy?hl=en
We inform you that you can manage cookies permission through your browser settings. Below are the links with the instructions for the various browsers:
Browser
Impostazioni
Google Chrome
https://support.google.com/accounts/answer/61416?hl=it
Google Chrome
(mobile devices Android)
https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DAndroid&hl=it
Mozilla Firefox
https://support.mozilla.org/it/kb/Attivare%20e%20disattivare%20i%20cookie
Microsoft Internet Explorer
http://windows.microsoft.com/it-it/windows-vista/block-or-allow-cookies
Microsoft Edge
https://support.microsoft.com/it-it/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy
Apple Safari
https://support.apple.com/kb/PH17191?viewlocale=it_IT&locale=it_IT
Apple Safari
(mobile devices iOS)
https://support.apple.com/it-it/HT201265
Opera
http://help.opera.com/Windows/10.00/it/cookies.htm
DATA RECIPIENTS
 
The following entities are recipients of the data collected in the course of visiting the websites listed above. They have been appointed as data processors by S.I.T.A. SPA pursuant to Article 28 of the Regulation:
Skiperformance AS being the provider of the development and operational supply and management services for the technological platforms relied upon. 
 
The personal data collected as above are also processed by staff from the S.I.T.A. SPA, acting on specific instructions concerning purposes and arrangements of such processing.
 
DATA SUBJECTS' RIGHTS
 
Data subjects have the right to obtain from the S.I.T.A. SPA, where appropriate, access to their personal data as well as rectification or erasure of such data or the restriction of the processing concerning them, and to object to the processing (pursuant to Articles 15 to 22 of the Regulation). Please contact the S.I.T.A. SPA Data controller or Data Processor Officer to lodge all requests to exercise these rights.
 
RIGHT TO LODGE A COMPLAINT
 
If a data subject considers that the processing of personal data relating to him or her as performed via this website infringes the Regulation, he or she has the right to lodge a complaint with the Garante pursuant to Article 77 of the Regulation, or else to bring a judicial proceeding against the Garante pursuant to Article 79 of the Regulation.