Privacy policy

The personal data that the user (hereinafter referred to as the "Data Subject") will provide while browsing this website (hereinafter referred to as the "Website") will be processed fairly and transparently, for lawful purposes, while safeguarding their privacy and rights in compliance with European data protection regulations (EU Regulation 2016/679).

This document does not include the processing activities carried out on other websites that the Data Subject may potentially access through links on the Website.

The processing will be carried out for the following purposes and in the following manner:

1. Data Controller.
   In accordance with the aforementioned regulations, the Data Controller for the processing is the company More Than Web S.R.L, located at Viale San Marco 70/B - 30173 Mestre Venezia, email: info@concertsinvenice.it
   
   
2. Purpose of the Processing.
   The Data Controller will process the personal data communicated by the Data Subject by filling out the forms located in various thematic areas of the Website (name, surname, address, tax code, email, phone and/or mobile, payment data) solely for the purposes indicated in this notice.
   
   
3. Purpose and Legal Basis of the Processing.
   The general purposes of the processing pursued by the Data Controller can be summarized as follows:
   1. To allow the Data Controller to respond to a message sent by the Data Subject (section "Contact"); legal basis: Data Subject's consent;
   2. To allow the Data Controller to fulfill a purchase request sent by the Data Subject (sections "Buy tickets online", "Shopping cart"); legal basis: performance of the contract to which the Data Subject is a party;
   3. Subject to their specific and separate consent, to allow the Data Controller to send informational newsletters to the Data Subject; legal basis: Data Subject's consent.
      
      
4. Categories of Personal Data Processed.
   The data processed will be those described in point 2, strictly necessary for the requested and/or authorized purposes.
   
   
5. Recipients or Categories of Recipients of Personal Data.
   The data provided by the Data Subject will be made accessible to:
   - employees and collaborators of the Data Controller;
   - companies tasked with providing assistance to the Data Controller's information systems (computer network, website, etc.);
   - professional firms with which the Data Controller maintains relationships related to administrative, accounting, tax, legal, etc. obligations.
   - companies handling electronic payment;
   - companies responsible for the delivery of the products sold.
   
   The data will not be disclosed and will be processed with organizational and logical methods related to the aforementioned purposes.
   
   
6. Methods of Data Processing.
   The processing of data by competent company structures will be carried out using suitable tools to guarantee security and confidentiality and may also be carried out, in addition to analog instruments, through automated tools (both computer and telematic) designed to store, manage, and transmit the data.
   The management and storage of personal data will take place on servers located within the EU of the Data Controller and/or third-party companies entrusted, and there will be no transfer of the data outside the territory of the European Union.
   
   
7. Retention Period.
   The Data Controller will retain the personal data provided for the time necessary to fulfill the purposes described above, in particular:
   - The email address entered in the form in the "Contact Us" area will be used only to follow up on any messages sent by the Data Subject and will be deleted once the correspondence is completed;
   
   - The data communicated when purchasing products (name, surname, date of birth, address, tax code, phone and/or mobile number, payment data) will be retained for the following periods:
   
   
   1. The email address, phone number, and/or mobile number will be retained until the purchased products are delivered, to allow the Data Controller to contact the Data Subject if necessary;
   2. Tax data (name, surname, address, and tax code) will be retained for 10 years as required by law;
   3. Payment data will be retained for the strictly necessary period in light of the purposes mentioned above and applicable legal requirements;
      
      
   - The email communicated by the Data Subject will be retained, in the case of specific consent for the sending of informational newsletters, for those specific purposes, for a period of 36 months, unless the Data Subject revokes consent at any time under section 8i).
   
   
8. Rights of the Data Subject.
   The Data Subject has the following rights:
   1. Right to access the personal data concerning them (once it has been confirmed that their data is being processed by the Data Controller);
   2. Right to obtain the rectification and integration of their data;
   3. Right to obtain the erasure of personal data concerning them;
   4. Right to obtain the restriction of the processing of personal data concerning them;
   5. Right to receive the personal data provided to the Data Controller in a structured, commonly used format and to transmit them to another controller;
   6. Right to object to the processing of personal data, where reasons related to their personal situation exist;
   7. Right not to be subject to automated decision-making, including profiling, which produces legal effects concerning them;
   8. Right to be notified in the event of a serious breach of their data;
   9. Right to withdraw consent to the processing at any time;
   10. Right to lodge a complaint with a supervisory authority.
       
       
   The Data Subject may exercise the aforementioned rights by sending a communication to the Data Controller at the address indicated in the previous section 1).
   
   
9. Nature of Data Provision and Consequences of Refusal to Respond.
   The provision of data (name, surname, date of birth, address, tax code, email, phone and/or mobile phone, payment information) for the purposes mentioned in section 3b) is necessary and mandatory. In their absence, the Data Controller will not be able to provide the services requested by the Data Subject. The consent given for the use of the email for a period of 36 months is optional. The Data Subject may decide not to give such consent or to revoke the consent given, in accordance with section 8i), without affecting the lawfulness of the processing based on the consent given before the revocation.