Information on the Processing of Personal Data
Pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR)
for users visiting the websites cassatatravel.it and cassatatravel.com
(hereinafter referred to as "the Site")
1. Purpose of this Information Notice
This notice describes how the personal data of users visiting the Site are processed, in compliance with Regulation (EU) 2016/679 ("Regulation" or "GDPR").
This information does not apply to other websites, pages, or online services that may be accessed through hyperlinks published on the Site but referring to external resources (e.g., social media or external sharing tools).
2. Data Controller and Data Processor
The Data Controller for the processing of personal data is:
Cassata Travel S.r.l.
VAT Number: IT06058830826
Registered office: Via Umberto I, 20 – 90015 Cefalù (PA), Italy
The Data Protection Officer (DPO), if appointed, can be contacted as ResponsabilePrivacy at the Data Controller's premises.
3. Types of Data Collected
Cassata Travel collects exclusively:
Data voluntarily provided by the user through the contact form:
First name
Last name
City
Country
Phone number
Email address
Browsing data and session cookies (non-persistent), used strictly to ensure safe and efficient navigation of the Site. Cookies are under the user’s control and, upon session termination, related data are retained in service logs for no longer than 7 days.
For more details, please refer to the Site’s Cookie Policy.
4. Purpose of Data Processing
Personal data are processed solely to:
Respond to requests sent via the contact form;
Send commercial offers or quotes related to the specific user inquiry.
5. Data Retention
Collected data will be stored:
Only for the time necessary to provide the requested service;
Not saved in permanent databases but stored in the Data Controller’s email servers (located within EU member states);
If used for quotes or commercial offers, data will be stored along with the commercial documentation on the company’s IT systems or cloud services (all within the EU).
Email and document archives are normally deleted after 10 years, in compliance with tax and accounting laws.
6. Security Measures
All necessary technical and organizational measures have been adopted to ensure data security:
Access protected by passwords;
Communications via encrypted HTTPS connections;
Data stored on secure servers.
7. Data Transfer to Third Parties
Cassata Travel does not transfer personal data to third parties, except in the following cases:
To provide advice requested by the user;
For outsourcing services or subcontracted work to partners or subcontractors;
For accounting or billing purposes if a commercial relationship is established.
In these cases, third parties act as Data Processors in compliance with applicable laws.
Data will not be transferred outside the European Union.
Personal data may be disclosed to authorities only if legally required.
8. Data Subject Rights
Users have the right to obtain from the Data Controller:
Access to their personal data;
Rectification, erasure, or restriction of processing;
Objection to processing, where applicable (Articles 15 et seq. of the GDPR).
Requests can be sent to the Data Controller or DPO using the contacts listed in Section 2.
9. Right to Lodge a Complaint
If users believe their data is processed unlawfully, they have the right to:
File a complaint with the Data Protection Authority (Article 77 GDPR);
Seek judicial remedy (Article 79 GDPR).
Cookie Policy
This Cookie Policy forms an integral part of the Privacy Policy above.
Users may give their consent to the use of cookies by continuing to browse the Sites, by scrolling the page, by clicking on any of the internal links within the pages of the Sites, or by clicking the “x” or any other button that closes the short information banner shown on every first access to the Sites, as provided for by the ruling of the Italian Data Protection Authority (no. 229 of 8 May 2014).
Cookies are portions of code (computer files or partial data) sent by a server to the user’s Internet browser, automatically stored by that browser on the user’s computer and automatically sent back to the server on each subsequent visit to the site. A cookie usually contains the name of the website it comes from, its lifetime (how long it will remain on the user’s device) and a value, which is normally a randomly generated unique number. On each subsequent visit, cookies are sent back to the website that created them (first-party cookies) or to another site that recognises them (third-party cookies). Cookies are useful because they allow a website to recognise the user’s device and serve several purposes, such as allowing efficient navigation between pages, remembering favourite sites and generally improving the browsing experience. They also help ensure that the advertising content displayed online is better targeted to a user and their interests.
If the user decides to disable cookies, this may affect and/or limit their browsing experience within the Sites: for example, they may not be able to visit certain sections of a Site, or may not receive personalised information when visiting the Sites.
The way cookies work, as well as the options for limiting or blocking them, can be adjusted by changing the settings of your Internet browser. Most Internet browsers are initially set to accept cookies automatically; the user can however change these settings to block cookies, or to be warned whenever cookies are sent to their device. There are several ways to manage cookies: please refer to your browser’s help screen to check how to adjust or change its settings. Users are free to change the default configuration and disable cookies (that is, block them permanently) by setting the highest level of protection.
Below are the paths to follow in order to manage cookies in the following browsers:
If the user accesses and views the Sites from different devices (for example computer, smartphone, tablet, etc.), they must make sure that each browser on each device is set to reflect their cookie preferences. To delete cookies from the Internet browser of a smartphone or tablet, please refer to the device’s user manual.
The Sites use different types of cookies, each with a specific function. The site uses cookies to make browsing easier and to better tailor both the pages loaded and its own products to users’ interests and needs. Cookies may also be used to speed up users’ future experiences and activities on the site. Cookies are also used to compile anonymous aggregate statistics that make it possible to understand how users use the site and to improve its structure and content.
An explanatory list follows.
Technical cookies
“Technical” cookies are essential for the correct operation of the site and allow users to browse it and use its features (for example, they make it possible to store previous actions, or to save the user’s session and carry out other activities strictly necessary for the operation of the site).
This category also includes “analytics” cookies, which help to understand how users interact with the site by providing information about the last page visited, the number of sections and pages visited, the time spent on the site and any event occurring during browsing, such as an error message, and which help to understand any difficulty the user encounters in using the site. This information may be associated with user details such as IP address, domain or browser; however, it is analysed together with information from other users so that no individual user is identified with respect to another. These cookies are collected and aggregated anonymously and allow the site operator to improve the usability of the site.
Finally, “functionality” cookies allow the site to remember the user’s choices (for example the user name) in order to provide a more personalised and optimised browsing experience. Functional cookies are not essential to the operation of the Sites, but they improve their quality and the browsing experience. If these cookies are not accepted, the performance and functionality of the site may be reduced and access to the site’s content may be limited.
Profiling cookies
“Targeting” or “profiling” cookies are used to present content better suited to the user and their interests. They may be used to display targeted advertising, to serve personalised advertisements based on the user’s interests, or to limit the number of times a user sees a given advertisement. They also help measure the effectiveness of advertising campaigns on the site; the site operator may use these cookies to remember the sites the user has visited and share this information with third parties, including agencies and advertisers who may use their own cookies to collect information about the activities users carry out on the site.
“Sharing” cookies (or social network cookies) are needed to allow users to interact with the Sites through their own social account and serve, for example, to express appreciation and share it with their social contacts.
The site uses, or may use, possibly in combination with one another, the following cookies:
- “session” cookies, stored on the user’s computer purely for technical and functional purposes, for the transmission of session identifiers needed to allow safe and efficient exploration of the site; they are deleted at the end of the “session” (hence the name) when the browser is closed;
- “persistent” cookies, which remain stored on the computer’s hard disk until they expire or are deleted by users. Through persistent cookies, users who access the sites (or any other users using the same computer) are automatically recognised on each visit. Third-party cookies
When a user uses the site, some cookies not controlled by the site operator may be stored. This happens, for example, if the user visits a page containing content from a third-party website. As a result, the user will receive cookies from these third-party services. The site operator has no control over the information provided by third-party cookies and no access to such data. This information is entirely controlled by the third-party companies as described in their respective privacy policies.
The table below lists the third-party cookies present on the site. These fall under the direct and exclusive responsibility of the third-party operator and are divided into the following macro-categories:
- Analytics: cookies used to collect and analyse statistical information about accesses to and visits of the website. In some cases, when associated with other information such as the credentials entered to access restricted areas (email address and password), they may be used to profile the user (personal habits, sites visited, content downloaded, types of interaction carried out, etc.).
- Widgets: this category includes all those graphical components of a program’s user interface whose purpose is to help the user interact with the program itself (by way of example, cookies from Facebook, Google+, Twitter, LinkedIn, Instagram, etc. are widgets).
- Advertising: this category includes cookies used to deliver advertising services within a site.
Users who do not wish to receive third-party cookies on their device may, through the links below, access the privacy notices and consent forms of those third parties and opt out of receiving them.
These cookies are not directly controlled by the Sites, therefore, in order to withdraw consent, please refer to the third parties’ websites or to http://www.youronlinechoices.com/ for information on how to delete or manage cookies depending on the browser used, and to manage preferences on third-party profiling cookies.
Cookie
Primary use
Profiling
Privacy policy
Google Transfer
Analytics / Advertising / Widgets
Yes
facebook
Analytics / Widgets
Yes
Twitter
Analytics / Widgets
Yes
Linkedin
Analytics / Widgets
Yes
Instagram
Analytics / Widgets
Yes
Tripadvisor
Analytics / Widgets
Yes
