Pursuant to art. 13 of EU Regulation 679/2016
a) Identity and contact details of the Data Controller.
The data controller is Ursus Adventures srl with registered and operational headquarters in Via di Sotto Pila, 6, Ossana (TN). It will be possible to contact the Data Controller using the following contact details: Tel. 334.8468540 e-mail:
b) Purpose of processing
Your data will be processed to execute the existing contract between you and our Structure and to fulfill the obligations deriving from the law, from the task given to us and from the contract itself.
c) Personal data belonging to particular categories.
Your personal data belonging to particular categories (data relating to health) will be processed by our Structure for the purpose set out in point b). Such data can only be processed with your specific consent expressed in written form. The provision of the particular data requested and the consent to their processing are mandatory; any refusal to provide or process will result in the failure or partial execution of the contract or the failure to carry out the assignment.
d) Use of images
The service offered also includes the use of the participants' images, which will then be sent to them via the communication channels provided to us. The images generally represent the entire group participating in the activity, which is why failure to provide the data relating to your images will make it impossible to provide the service.
E) Subjects to whom the data may be communicated
Your data may be communicated, in order to fulfill the agreed service, by way of example but not limited to, to accounting or tax consultants, banking, credit or insurance institutions and/or to companies connected to us (for administrative purposes). The data communicated will only be those strictly indispensable for the execution of the requested service and, where possible, anonymous processing methods will be preferred. The communication of such data is mandatory in order to carry out the stipulated contract and any refusal to communicate will make it impossible for the undersigned to fulfill the agreed services. Your data will not be disclosed to third parties in any way without your prior and specific consent.
F) Transfer of data to a third country or international organizations
Your data will in no way be transferred to third countries outside the EU. A copy of your data is available at the owner's headquarters, which can be contacted using the contact details in point a) of this information.
G) Duration of retention of personal data
Your personal data will be kept for the time strictly necessary for the execution of the agreed contractual service, in compliance with other civil and fiscal regulations which could determine further retention times.
H) Rights of the interested party and revocation of the consent given.
At any time you have the right to request the Data Controller to access your data, as well as to rectify or delete it. You will be provided with written feedback within 30 days (unless you specifically request oral feedback), including by electronic means. You also have the right to request the limitation of processing or to oppose it. Finally, you may request the portability of your data to another owner. You may also revoke the consent given through this information at any time. To revoke one or more of the consents given, simply contact one of the contact details indicated in point a) of this information.
I) Right to lodge a complaint with the Supervisory Authority
Where you believe that your data has been processed illegitimately, you have the right to contact the Supervisory Authority to lodge a complaint.
J) Mandatory or optional nature of providing the Data and consequences of failure to provide it.
The provision of your data to the Data Controller is mandatory only for the data necessary to fulfill the purposes indicated in point b) and failure to provide the use of the data will make it impossible to correctly execute the stipulated contract, which therefore does not may be executed.
K) Automated decision-making processes.
The Data Controller does not use automated decision-making processes regarding your personal data in any way. L) Marketing purposes. Your data may be used, subject to your specific and optional consent, also for the purposes of sending informative and/or advertising material or for commercial communications regarding new products or updates and news on existing products. The Structure may also use your data to send greeting messages (Christmas and other holidays, birthdays, etc.). We also inform you that, for marketing purposes, the images of the activities in which you are portrayed could be used by us to advertise the services offered on our channels (website, social networks and brochures). Consent to the processing of data collected for promotional purposes is optional and any refusal to such use will not have consequences on the performance of the service. M) Transfer of data to third parties for marketing purposes. Your data may be transferred, subject to your specific and optional consent, to third-party companies with respect to the undersigned for marketing purposes of the third-party company. This means that the third-party company, unrelated to the relationship between you and the undersigned, will be able to send you commercial offers and advertising and promotional messages regarding the products and/or services offered by it. Consent to the transfer of your data to third-party companies for marketing purposes is optional and your refusal to such use will not have consequences on the performance of the service. The companies to which your data may be communicated are: hoteliers, traders, event organizers in the tourism field, etc.
L) Cookies
The Internet pages of Ursus Adventures Srl use cookies. Cookies are text files that are stored in a computer system via an Internet browser.
The site only uses technical and analytical cookies in anonymous form, not useful for profiling.
Many Internet sites and servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This allows visited Internet sites and servers to differentiate the test subjects' individual browser from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.
Through the use of cookies, Ursus Adventures Srl can provide the users of this website with more user-friendly services that would not be possible without the cookie setting.
By means of a cookie, the information and offers on our website can be optimized with the user in mind. Cookies allow us, as mentioned above, to recognize users of our site. The purpose of this recognition is to make it easier for users to use our website. The website user who uses cookies, e.g. it is not necessary to enter access data each time the website is accessed, because this is taken over by the website, and the cookie is thus stored on the user's computer system. Another example is the cookie of a shopping cart in an online store. The online store stores the items that a customer has placed in the virtual cart via a cookie.
The data subject may, at any time, prevent the setting of cookies through our website by means of a corresponding setting of the Internet browser used, and may thus permanently deny the setting of cookies. Furthermore, cookies that have already been set can be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the data subject deactivates the setting of cookies in the Internet browser used, not all functions of our website may be entirely usable.
N) Collection of data and general information
The website of Ursus Adventures Srl collects a series of general data and information when a data subject or automated system calls up the website. This general data and information is stored in server log files. Collected may be (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the accessing system and ( 8) any other similar data and information that can be used in the event of attacks on our IT systems.
When using these general data and information, Ursus Adventures Srl does not draw any conclusions about the data subject. Rather, this information is needed to (1) deliver the content of our website correctly, (2) optimize the content of our website as well as its advertisement, (3) ensure the long-term viability of our information technology systems and technology of the Website and (4) provide law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack. Therefore, Ursus Adventures Srl statistically analyzes anonymously collected data and information, with the aim of increasing the data protection and data security of our company, and to ensure an optimal level of protection for the personal data we process. Anonymous data from server log files are stored separately from any personal data provided by a data subject.
O) Registration on our website
The data subject has the possibility to register on the website of the controller with the indication of personal data. Which personal data is transmitted to the controller is determined by the respective input mask used for registration. The personal data entered by the data subject are collected and stored exclusively for internal use by the controller, and for his own purposes. The controller may request transfer to one or more processors (e.g. a parcel service) that also uses personal data for an internal purpose which is attributable to the controller.
By registering on the website of the controller, the IP address assigned by the Internet service provider (ISP) and used by the data subject – date and time of registration are also stored. The storage of this data takes place in the background, which is the only way to prevent the misuse of our services and, if necessary, to make the investigation of committed crimes possible. Therefore, the storage of this data is necessary to protect the. This data is not passed on to third parties unless there is a legal obligation to pass on the data, or if the transfer serves the aim of criminal prosecution.
The registration of the data subject, with the voluntary indication of personal data, is intended to enable the controller to offer the data subject contents or services that may only be offered to registered users due to the nature of the matter. Registered persons are free to change the personal data specified during registration at any time or to have them completely deleted from the data stock of the controller.
The data controller shall, at any time, provide information upon request to each data subject as to what personal data are stored about the data subject. Furthermore, the data controller will correct or delete personal data at the request or indication of the data subject, insofar as there are no statutory storage obligations. All employees of the controller are available to data subjects in this regard as contact persons.
P) Subscription to our newsletters
On the Ursus Adventures Srl website, users have the opportunity to subscribe to our newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.
Ursus Adventures Srl regularly informs its customers and business partners via a newsletter about commercial offers. The newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for newsletter shipping.
Personal data collected as part of a newsletter registration will only be used to send our newsletter. In addition, subscribers to the newsletter may be informed by e-mail, as long as this is necessary for the operation of the newsletter service or a registration in question, as this could be the case in the event of changes to the newsletter offer, or in the case of a change in technical circumstances. There will be no transfer of personal data collected by the newsletter service to third parties. The subscription to our newsletter may be terminated by the data subject at any time. The consent to the storage of personal data, which the data subject has given for the purpose of sending the newsletter, may be revoked at any time. For the purpose of revoking consent, a corresponding link can be found in each newsletter. It is also possible to subscribe to the newsletter at any time directly on the website of the controller, or to communicate this to the controller in a different way.
Q) Newsletter Tracking
The Ursus Adventures Srl newsletter contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such emails, which are sent in HTML format to enable log file recording and analysis. This allows for a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, Ursus Adventures Srl may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.
Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject. This personal data will not be passed on to third parties. Data subjects have the right at any time to revoke the respective separate declaration of consent issued by means of the double opt-in procedure. After a revocation, these personal data will be deleted by the controller. Ursus Adventures Srl automatically considers a withdrawal from receiving the newsletter as a revocation.
R) Data protection provisions about the application and use of Google Analytics (with anonymization function)
On this website, the data controller has integrated the Google Analytics component (with the anonymizer function). Google Analytics is a web analytics service. Web analytics is the collection, collection and analysis of data about the behavior of visitors to websites. A web analytics service collects, among other things, data about the website from which a person came ( the so-called referrer), which sub-pages were visited, or how often and for what duration a sub-page was viewed. Web analysis is mainly used for the optimization of a website and to carry out a cost-benefit analysis of Internet advertising.
The operator of the Google Analytics component is Google Inc., 1600 Amphitheater Pkwy, Mountain View, CA 94043-1351, United States.
For web analysis via Google Analytics, the data controller uses the "_gat. _anonymizeIp" application. By means of this application the IP address of the Internet connection of the data subject is abridged by Google and anonymised when accessing our websites from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area .
The purpose of the Google Analytics component is to analyze the traffic on our website. Google uses the collected data and information, inter alia, to evaluate the use of our website and to provide online reports, which show the activities on our websites, and to provide other services relating to the use of our Internet site. for us.
Google Analytics places a cookie on the information technology system of the data subject. The definition of cookies is explained above. By setting the cookie, Google is enabled to analyze the use of our website. With each call-up to one of the individual pages of this Internet site, which is operated by the controller and into which a Google Analytics component was integrated, the Internet browser on the information technology system of the data subject will automatically submit data through the Google Analytics component for the purpose of online advertising and the regulation of commissions to Google. During the course of this technical procedure, the enterprise Google gains knowledge of personal information, such as the IP address of the data subject, which serves Google, inter alia, to understand the origin of visitors and clicks, and subsequently create the of commission agreements.
The cookie is used to store personal information, such as the access time, the location from which the access was made, and the frequency of visits of our website by the data subject. With each visit to our Internet site, such personal data, including the IP address of the Internet access used by the data subject, will be transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may transfer this personal data collected through the technical procedure to third parties.
The data subject may, as stated above, prevent the setting of cookies through our website at any time by means of a corresponding adjustment of the web browser used and thus permanently deny the setting of cookies. Such an adjustment to the Internet browser used would prevent Google Analytics from setting a cookie on the information technology system of the data subject. Furthermore, cookies already in use by Google Analytics can be deleted at any time via a web browser or other software programs.
In addition, the data subject has the possibility of objecting to a collection of data that are generated by Google Analytics, which is related to the use of this website, as well as the processing of this data by Google and the possibility of precluding these. For this purpose, the data subject must download a browser add-on under the link https://tools.google.com/dlpage/gaoptout and install it. This browser add-on tells Google Analytics via a JavaScript, that any data and information about the visits of Internet pages may not be transmitted to Google Analytics. The installation of browser add-ons is considered an objection by Google. If the information technology system of the data subject is subsequently deleted, formatted, or newly installed, then the data subject must reinstall the browser add-ons to disable Google Analytics. If the browser add-on was uninstalled by the data subject or any other person who is attributable to their sphere of competence, or is disabled, it is possible to execute the reinstallation or reactivation of the browser add-ons.
Further information and the applicable data protection provisions of Google may be retrieved under https://www.google.com/intl/en/policies/privacy/ and under http://www.google.com/analytics /terms/us. html. Google Analytics is further explained under the following link https://www.google.com/analytics/.
S) Payment method: Data protection provisions about the use of Stripe as a payment processor
Personal data provided during the payment process through our Stripe credit card gateway is processed in accordance with the provisions of the General Data Protection Regulation (GDPR). This data includes sensitive information, such as credit card or payment details, which is processed solely to facilitate the transaction you have requested. Our organization takes rigorous security measures to protect this sensitive information during transmission and maintenance. This data is not stored on our servers; rather, they are managed and processed directly by Stripe, which is committed to complying with the security principles and standards of the GDPR. Please see the Stripe Privacy Policy for more details on data processing during payment transactions carried out through their service.