PRIVACY POLICY

This website and its booking program collect some personal data of its users, which can also be requested in different ways (via email, whatsapp, by phone or by direct contact at our information points)

Data collected shall be processed in accordance with Legislative Decree 196/2003. Specifically, in accordance with art. 13, we state that:

personal data shall be used for the purpose of performing the requested services and shall also be intended for management of the newsletter. Data shall be processed by automated means or otherwise, and may be subject to statistical analysis in an anonymous manner;
provision of data is compulsory;
refusal (if any) to provide such data shall make it impossible to provide the requested service and the newsletter;
data that is provided shall be transmitted to associated companies in order to perform the requested services;the controller of data processing in accordance with the above instructions is Canyon Adventures di Depretto Diego with head office Via Gazol 7, 38062 Arco /TN) , e-mail info@canyonadv.com, from now on referred to as CA.

TYPES OF DATA COLLECTED
Among the personal data collected by this website, independently or through third parties, we count:  -name and surname -telephone number and/or email address -various types of data; home and or holiday address -personal information such as age, weight and height -tracking tools, usage data, data communicated during the use of the service   Full details on each type of personal data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data are collected. Personal data may be freely provided by the user or, in the case of usage data, collected automatically during the use of this website. Unless otherwise specified, all data requested by this website are mandatory. If the user refuses to communicate them, it may be impossible for this website and for CA to provide the service. In cases where this website indicates some data as optional, users are free to refrain from communicating such data, without this having any consequence on the availability of the service or on its operation.  Users who have doubts about which data are mandatory are encouraged to contact the owner.
Any use of cookies – or other tracking tools – by this website or by the owners of third-party services used by this website has the purpose of providing the service requested by the user, in addition to the other purposes described in this document and in the cookie policy.
The user assumes responsibility for the personal data of third parties obtained, published or shared through this Website.

METHOD AND PLACE OF PROCESSING OF COLLECTED DATA
Processing Method
The data controller commits to adopt appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of personal data. Processing is carried out using computer and/or telematic tools as well as paper-based, with organizational methods and logic strictly related to the purposes indicated. In addition to the controller, in some cases, other parties involved in the organization of this website and in general of the organization of the CA (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communications agencies) may have access to the data, also appointed, if necessary, as data processors by the controller himself. The updated list of processors may always be requested from the data controller.

Storage
The data is processed at the operating offices of the controller and in any other place where the parties involved in the processing are located. For further information, contact the controller. The user’s personal data may be transferred to a country other than the one in which the user is located. To find out more about the place of processing, the user can refer to the section containing details on the processing of personal data.

Retention period
Unless otherwise stated in this document, personal data is processed and stored for the time required by the purpose for which it was collected and may be stored for a longer period due to any legal obligations or on the basis of the consent of users.

PURPOSE OF THE PROCESSING OF COLLECTED DATA
The user’s data is collected to allow the controller and owner to provide the service, comply with legal obligations, respond to requests or enforcement actions, protect their rights and interests (or those of users or third parties), identify any malicious or fraudulent activity, as well as for the following purposes: contacting the user, preparing the equipment needed to carry out the activities offered, agreeing on pick-ups or meeting places, advertising, heat mapping and session recording, displaying content from external platforms, statistics, tag management and interaction with live chat platforms. To obtain detailed information on the purposes of the processing and on the personal data processed for each purpose, the user can refer to the section “Details on the processing of personal data”.

DETAILS ON THE PROCESSING OF PERSONAL DATA   Personal data is collected for the following purposes and using the following services. To the extent that CA provides you with access to offers, services or performances of third parties through the services and the user makes use of them, their respective data protection rules apply. CA is not aware of the data protection rules of third parties and does not control them. It assumes no responsibility for the data protection of these companies and recommends consulting their data protection policies.

Contacting the user
Contact form (this website)
By filling in the contact form with their data, the user consents to their use to respond to requests for information, quotes or any other nature indicated by the form header.
Personal data processed: name; surname; email; residential address; accommodation address; telephone number; various types of data such as age, weight and height
Mailing list or newsletter (this Website)
By registering on the mailing list or for the newsletter, the User’s email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Website may be transmitted. The user’s email address may also be added to this list as a result of registering on this Website or after making a purchase.
Personal data processed: last name; first name; email;

Tag Management  T
his type of service is functional to the centralized management of tags or scripts used on this website. The use of such services involves the flow of user data through them and, if necessary, their retention.  Google Tag Manager (Google Ireland Limited)
Google Tag Manager is a tag management service provided by Google Ireland Limited.
Personal data processed: usage data.
Place of processing: Ireland -– Privacy Policy.

Heat mapping and session recording  Heat mapping services are used to identify which areas of a page are subject to mouse movements or clicks in order to detect which of them attract the most interest. These services allow us to monitor and analyze traffic data and are used to keep track of User behavior. Some of these services may record sessions and make them available for later viewing.
Hotjar Heat Maps & Recordings (Hotjar Ltd.)
Hotjar is a heat mapping and session recording service provided by Hotjar Ltd. Hotjar honors generic “Do Not Track” headers. This means that the browser can tell the script not to collect any User data. This is a setting that is available in all major browsers. More information about opting out from Hotjar is available here.
Personal data processed: cookies; usage data; various types of data as specified in the privacy policy of the service.
Place of processing: Malta – Privacy Policy – Opt Out.

Interaction with live chat platforms  This type of service allows you to interact with live chat platforms managed by third parties, directly from the pages of this website, in order to contact and be contacted by the support service of this website. If an interaction service with live chat platforms is installed, it is possible that, even if the users do not use the service, it collects usage data relating to the pages in which it is installed. Furthermore, live chat conversations may be recorded.
Drift Widget (Drift.com, Inc.)
The Drift Widget is an interaction service with the Drift live chat platform, provided by Drift.com, Inc.  Personal data processed: data communicated while using the service; usage data; tracker; various types of data as specified in the privacy policy of the service.
Place of processing: United States – Privacy Policy.

Advertising
Some of the services listed below may use tracking tools to identify the user, or use the behavioral retargeting technique, i.e. displaying advertisements tailored to the user’s interests and behavior, or measure the performance of the advertisements. For more information on this, we suggest you check the privacy policies of the respective services. Generally, services of this type offer the ability to opt out of such tracking. In addition to any opt-out function provided by any of the services listed in this document, the User can read more about how to opt out of interest-based advertising in the “How to opt out of interest-based advertising” section of this document.
Hotjar Form Analysis & Conversion Funnels (Hotjar Ltd.)
Hotjar is an analytics service provided by Hotjar Ltd. Hotjar honors generic “Do Not Track” headers. This means that the browser can tell the script not to collect any of the user’s data. This is a setting that is available in all major browsers.
Personal data processed: usage data; tracking tools.
Place of processing: Malta – Privacy Policy – Opt Out.

Statistics
The services contained in this section allow the data controller to monitor and analyze traffic data and are used to keep track of User behavior.
Google Analytics (Universal Analytics) with anonymized IP (Google Ireland Limited)
Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited (“Google”). Google uses the personal data collected for the purpose of tracking and examining the use of this website, compiling reports and sharing them with other services developed by Google. Google may use the personal data to contextualize and personalize the ads of its own advertising network. This integration of Google Analytics anonymizes your IP address. Anonymization works by shortening the IP address of users within the borders of the member states of the European Union or in other countries adhering to the Agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to Google servers and shortened within the United States. To understand Google’s use of data, please consult Google’s partner policy.
Personal data processed: cookies; usage data.
Place of processing: Ireland – Privacy Policy – Opt Out.
Google Analytics 4 (Google Ireland Limited)
Google Analytics is a statistics service provided by Google Ireland Limited (“Google”). Google uses the personal data collected to track and examine the use of this Website, to compile reports on its activities and share them with other Google services. Google may use the personal data to contextualize and personalize the ads of its own advertising network. In Google Analytics 4, IP addresses are used at the time of collection and then deleted before the data is stored in any data center or server. To learn more, you can consult the official documentation of Google. To understand Google’s use of data, please consult Google’s partner policy.
Personal data processed: usage data; tracking tools.
Place of processing: Ireland – Privacy Policy – Opt Out.

Displaying content from external platforms
This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them. This type of service may still collect web traffic data for the pages where the service is installed, even when Users do not use it.
Google Maps widget (Google Ireland Limited)
Google Maps is a map visualization service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages.
Personal data processed: cookies; usage data.
Place of processing: Ireland – Privacy Policy.
YouTube Video widget without cookies (Google Ireland Limited) YouTube is a video content visualization service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages. This widget is set up so that YouTube does not save information and cookies about Users on this Website unless they play the video.
Personal data processed: usage data.
Place of processing: Ireland – Privacy Policy.
TripAdvisor widget (TripAdvisor LLC)
TripAdvisor widget is a content visualization service provided by TripAdvisor LLC that allows this Website to integrate content from this external platform within its pages.
Personal data processed: cookies; usage data.  Place of processing: United States – Privacy Policy.  Font Awesome (Fonticons, Inc. ) Font Awesome is a typeface visualization service provided by Fonticons, Inc. that allows this Website to integrate content of this kind on its pages.  Personal data processed: usage data.
Place of processing: United States – Privacy Policy.
Google Fonts (Google Ireland Limited)
Google Fonts is a typeface visualization service provided by Google Ireland Limited that allows this Website to integrate content of this kind on its pages.
Personal data processed: usage data; various types of data as specified in the privacy policy of the service.
Place of processing: Ireland – Privacy Policy.
YouTube Video Widget (Google Ireland Limited) YouTube is a video content visualization service provided by Google Ireland Limited that allows this Website to integrate such content within its pages.  Personal data processed: usage data; tracker.
Place of processing: Ireland – Privacy Policy.

Payment Systems
MultiSafePay
MultiSafePay is a payment service provider for e-commerce as well as a smart platform for the integral management of online stores. It allows you to pay for CA services through different forms of payment  Personal data processed: name, surname, address, telephone number, email; payment method details (card number, IBAN, issuing company)
Place of processing: Netherlands
Paypal
Paypal is an online payment service provider that allows you to make the payment for the reservation of services offered by CA.
Personal data processed: registration and contact data, (name, surname, postal address, email and identification and signature data) Place of processing: Luxembourg

COOKIE POLICY
This website uses tracking tools. Each browser uses the information to communicate with the websites accessed on their devices. As a web portal, we carry out various data processing on our website. In addition to our own processing activities, we rely on the integration of third-party content into our website. We do this on the one hand for content/editorial reasons and on the other hand for economic reasons by using the possibility of making our website available to third parties as advertising space. In order to make the use of CA services as convenient as possible, we use cookies. Cookies are small data files that are stored on your hard drive and thus allow you to be recognized by our website. We use so-called “session cookies”. These are cookies that are automatically deleted from your hard drive when you leave the website. We use these cookies to confirm that you are logged in as a member for the duration of your interaction with our website. Cookies are also used, which are stored on your hard drive even after you log out of CA. We need them to automatically log you in the next time you use CA services and to save the city for which you want to see the local program. These cookies expire automatically after six months. You can set your Internet browser to prevent cookies from being stored if you do not want cookies. However, this may mean that not all CA services or their functions can be used to their full extent. In addition, for economic reasons, we use the option to make our website available to third parties as advertising space (“advertising cookies”). The following types of cookies are used at CA: Functionality cookies, personalization cookies, performance or web analysis cookies, adversary/advertising/targeting cookies, retargeting cookies and third-party cookies.

FURTHER INFORMATION FOR USERS
Legal basis for processing
The controller processes Personal data relating to the user if one of the following conditions applies:
the user has given consent for one or more specific purposes:

processing is necessary for the performance of a contract with the user and/or for the execution of pre-contractual measures;
processing is necessary for compliance with a legal obligation to which the owner is subject;
processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
processing is necessary for the pursuit of the legitimate interest of the owner or third parties.

It is always possible to ask the owner to clarify the specific legal basis of each processing and in particular to specify whether the processing is based on the law, provided for by a contract or necessary to conclude a contract.

Further information on the retention period
Unless otherwise stated in this document, personal data are processed and stored for the time required by the purpose for which they were collected and may be stored for a longer period due to any legal obligations or on the basis of user consent.
Therefore:

personal data collected for purposes related to the performance of a contract between the owner and the user will be retained until such contract has been fully performed.
personal data collected for purposes related to the legitimate interest of the owner will be retained until such interest is fulfilled. Users may obtain further information regarding the legitimate interest pursued by the controller within the relevant sections of this document or by contacting the controller.

When the processing is based on consent of the user, the owner may retain personal data for a longer period until such consent is revoked. Furthermore, the owner may be obliged to retain personal data for a longer period to comply with a legal obligation or upon order of an authority. At the end of the retention period, personal data will be deleted. Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to portability of the data can no longer be exercised.

User rights based on the General Data Protection Regulation (GDPR)

The interested party is entitled to obtain confirmation of the existence or otherwise, of personal data concerning him, even if not yet recorded, and their communication in an intelligible form.
The interested party is entitled to obtain indication:
– of the source of the personal data;
– of processing purposes and procedures;
– of the logic used in case of processing by means of electronic equipment;
– of identification data regarding the data controller, data processors and designated representative in accordance with art. 5, paragraph 2;
– of the persons and categories of persons to whom personal data may be notified and who may become aware of the data in their capacity as designated representative in the national territory, data processors or persons in charge.
The interested party is entitled to obtain:
– updating, correction or, when interested, integration of data;
– -cancellation, transformation into an anonymous form or blocking of data processed unlawfully, including data whose storage is unnecessary for the purposes for which the data was collected or subsequently processed;
– certification that the operations under letters a) and b) have been notified, also as related to their contents, to those to whom data was notified or disclosed, unless this requirement proves to be impossible or involves the use of means manifestly disproportionate to the right being protected.
The interested party is entitled to oppose, as a whole or in part:
– for rightful reasons, processing of personal data concerning him, even if pertinent to the purpose of collection;
– processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communications.

By inputting the requested data and upon completion of the submission procedure the undersigned gives his so-called “consent” for the collected data to be processed. The subscriber, however, enjoys the rights envisaged by the above-mentioned Article 7 of Legislative Decree 196/2003, including the right of cancellation as specified above or by request to the data controller.

 Details on the rights of objection  
When personal data is processed in the public interest, in the exercise of public authority vested in the owner or to pursue a legitimate interest of the owner, users have the right to object to the processing for reasons related to their particular situation.
Users are reminded that, if their data is processed for direct marketing purposes, they can object to the processing at any time, free of charge and without providing any justification. If users object to the processing for direct marketing purposes, the personal data will no longer be processed for such purposes. To find out whether the owner processes data for direct marketing purposes, users can refer to the respective sections of this document.
Any requests to exercise the user’s rights can be addressed to the owner through the contact details provided in this document. The request is free of charge and the owner will respond as soon as possible, in any case within one month, providing the user with all the information required by law. Any corrections, deletions or limitations of the processing will be communicated by the owner to each of the recipients, if any, to whom the personal data have been transmitted, unless this proves impossible or involves a disproportionate effort. The owner informs the user of these recipients if he/she requests it.

FURTHER INFORMATION ON DATA TREATMENT
Defense in court
The user’s personal data may be used by the controller in court or in the preparatory stages of its possible establishment for the defense against abuse in the use of this website or related services by the user. The user declares to be aware that the owner may be required to reveal the data by order of the public authorities.
Specific information
Upon request of the user, in addition to the information contained in this privacy policy, this website may provide the user with additional and contextual information regarding specific services, or the collection and processing of personal data.
System logs and maintenance
For needs related to operation and maintenance, this website and any third-party services used by it may collect system logs, which are files that record interactions and may also contain personal data, such as the user’s IP address.
Information not contained in this policy
Further information in relation to the processing of personal data may be requested at any time from the data controller using the contact details.
Changes to this privacy policy
The data controller reserves the right to make changes to this privacy policy at any time by giving notice to users on this page and, if possible, on this website and, if technically and legally feasible, by sending a notification to users through one of the contact details in its possession. Please therefore consult this page frequently, referring to the date of the last modification indicated at the bottom. If the changes affect processing whose legal basis is consent, the data controller will collect the user’s consent again, if necessary.

Definitions and legal references
personal data (or data)  Personal data is any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable.
u  This information is collected automatically through this website (including third-party applications integrated into this website), including: the IP addresses or domain names of the computers utilized by the User who connects to this website, the URI (Uniform Resource Identifier) addresses, the time of the request, the method utilized to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.), the country of origin, the characteristics of the browser and operating system utilized by the visitor, the various temporal connotations of the visit (e.g., the time spent on each page) and the details of the itinerary followed within the application, with particular reference to the sequence of pages visited, the parameters relating to the operating system and the user’s IT environment.
user  The individual who uses this website who, unless otherwise specified, coincides with the data subject.
data subject  The natural person to whom the personal data refers.  data controller (or controller)  The natural person, legal person, public administration or any other body which processes personal data as set out in this privacy policy and which, alone or jointly with others, determines the purposes and means of the processing of personal data and the tools used, including the security measures concerning the operation and use of this website. The data controller, unless otherwise specified, is the owner of this website.
this website (or this application) The hardware or software tool by which the personal data of users is collected and processed.
service  The service provided by this website as defined in the relevant terms (if any) on this site/application.
European Union (or EU) Unless otherwise specified, any reference to the European Union contained in this document shall be deemed to extend to all current member states of the European Union and the European Economic Area.
cookies  Cookies are tracking tools that consist of small pieces of data stored within the user’s browser. tracking tool  A tracking tool is any technology – e.g. cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting – that allows users to be tracked, for example by collecting or saving information on the user’s device.

Legal references
This privacy policy concerns this website, as well as the data provided via email or by telephone/orally to our operators.

last modified: December 2024

CATEGORIES