Privacy Policy

In compliance with the obligations arising from national legislation (Legislative Decree 30 June 2003 n. 196, Code on the protection of personal data) and EU legislation (European Regulation for the protection of personal data no. 679/2016, GDPR) and subsequent amendments, this site respects and protects the privacy of visitors and users, making every possible and proportionate effort not to infringe the rights of users.
This privacy policy applies exclusively to the online activities of this site and is valid for visitors/users of the site. It does not apply to information that may be collected through channels other than this website.
The purpose of the privacy policy is to provide maximum transparency regarding the information the site collects and how it is used.

Legal basis for processing
This site processes data based on consent. By using or consulting this site, visitors and users explicitly approve this privacy policy and consent to the processing of their personal data in relation to the methods and purposes described below, including any disclosure to third parties if necessary for the provision of a service.
The provision of data and therefore consent to the collection and processing of data is optional; the User may refuse consent and can withdraw consent already provided at any time (via the Contact link or the contact details provided at the bottom of the page). However, refusing consent may result in the impossibility of providing certain services and the browsing experience on the site may be compromised.
From 25 May 2018 (the date the GDPR came into effect), this website will process some data based on the legitimate interests of the data controller.

Data collected and purpose
Like all websites, this one also uses log files in which information collected automatically during user visits is stored. The information collected can be the following:
– internet protocol (IP) address;
– type of browser and device parameters used to connect to the site;
– name of the internet service provider (ISP);
– date and time of visit;
– originating and exit webpage of the visitor (referral);
– country of origin;
– eventually the number of clicks.

The collection of data and information takes place for the following purposes:
– in an exclusively aggregated and anonymous form in order to verify the correct functioning of the site. None of this information is related to the individual User of the site, nor does it allow their identification in any way (from 25 May 2018 this information will be processed based on the legitimate interests of the data controller);
– security purposes (anti-spam filters, firewalls, virus detection), automatically logged data may also include personal data such as the IP address, which could be used, in accordance with current laws, to block attempts to damage the site itself or harm other users, or any harmful or criminal activities. This data is never used for user identification or profiling, nor cross-referenced with other data, nor provided to third parties, but is used only for the protection of the site and its users (from 25 May 2018, this information will be processed based on the legitimate interests of the data controller);
– communicate data to third parties who perform functions necessary or instrumental to the operation of the service.
The data collected from the site during its operation is used exclusively for the purposes indicated above and stored for the time strictly necessary to carry out the specified activities. In any case, personal data collected by the site will never be provided to third parties, for any reason, unless it is a legitimate request from the judicial authority and only in cases provided for by law. However, the data may be provided to third parties if this is necessary for the provision of a specific service requested by the User or for the execution of security checks or site optimisation.
Data used for site security (blocking attempts to damage the site) is retained for 7 days.

Place of treatment
The data collected from the website is processed at the Data Controller's headquarters and at the web hosting data centre. The web hosting provider (Logovia LTD, 1, College Yard, 56 Winchester Ave, London NW67UA) is located within the European Economic Area and acts in compliance with European regulations.

Biscuit
As is customary on all websites, this site also uses cookies, small text files that allow information to be stored about visitor preferences, to improve the site's functionality, to simplify navigation by automating procedures (e.g. login, site language) and for analysing site usage.
Session cookies are essential for distinguishing between logged-in users, and are useful for preventing a requested function from being provided to the wrong user, as well as for security purposes to prevent cyber-attacks on the site. Session cookies do not contain personal data and last for the current session only, i.e. until the browser is closed. Consent is not required for them.
The website uses strictly necessary cookies, for which no consent is required.
By continuing to browse the site, or by clicking OK on the banner displayed upon your first access, you expressly consent to the use of cookies and similar technologies, and in particular to the storage of such cookies on your device for the purposes indicated above, or to access information on your device via cookies.

Disable cookies
Cookies are linked to the browser used and CAN BE DISABLED DIRECTLY FROM THE BROWSER, thus refusing/withdrawing consent to the use of cookies. Please note that disabling cookies may prevent some functions of the site from working correctly.
The instructions for disabling cookies can be found on the following web pages: 
Mozilla Firefox – Microsoft Internet Explorer – Microsoft Edge – Google Chrome – Opera – Apple Safari

Third-party cookies
This website also acts as an intermediary for third-party cookies, used to provide additional services and functionalities to visitors and to improve the use of the site itself, such as social media buttons. This privacy policy does not apply to services provided by third parties, and this site has no control over their cookies, which are entirely managed by the third parties, and has no access to the information collected through said cookies. The data transfer agreement takes place directly between the user/visitor and the third parties, while this site does not participate in such transfer in any way. Consequently, information on the use of said cookies and their purposes, as well as methods for their possible disabling, are provided directly by the third parties on the pages indicated below.
In particular, this website uses cookies from the following third parties:
– Google (Google Analytics cookie): Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. It uses cookies (performance cookies) to collect anonymous browsing data (truncated to the last octet) for the purpose of examining how users interact with the site, compiling reports on website activity, and providing other information, including the number of visitors and pages visited. Google may also transfer this information to third parties where required by law or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. Data transmitted to Google is deposited on Google's servers in the United States.
In accordance with a specific agreement with Google, which is designated as the user data processor, Google undertakes to process data based on the Data Controller's requests, given directly through the software settings. Based on these settings, advertising and data sharing options are deactivated.
Further information on Google Analytics cookies can be found on the page Google Analytics Cookie Usage on Websites. 
The user can selectively disable data collection from Google Analytics by installing the’Component supplied by Google (Opt out). 

– YouTube: a platform owned by Google, for video sharing, which uses cookies to collect information about users and browsing devices. The videos on the site do not deliver cookies when the page is accessed, as the option “Advanced privacy (no cookies)”in accordance with which YouTube does not store visitor information unless they voluntarily play the video. 
For further information on Google's use of data and its processing, please refer to the relevant information. Page prepared by Google, and to the page on How Google uses data when you use partner sites or apps. 

Plugin Social Network
This website also incorporates plugins and/or buttons for social networks, in order to allow for easy sharing of content on your favourite social networks. These plugins are programmed so as not to set any cookies when the page is accessed, in order to safeguard user privacy. Cookies are only set, if this is provided for by the social networks, when the user actually and voluntarily uses the plugin. Please note that if the user is browsing whilst logged into the social network, then they have already consented to the use of cookies conveyed through this website at the time of their registration with the social network.
The collection and use of information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer.
– Facebook – (Cookie information link)
– Google+ – (Cookie information link). 
– Instagram – (Informative cookie link)
– Twitter – (Cookie information link)
– LinkedIn – (Cookie information link)

Transfer of data to non-EU countries
 This website may share some of the data collected with services located outside the European Union. In particular with Google, Facebook and Microsoft (LinkedIn) via social plugins and the Google Analytics service. The transfer is authorised based on specific decisions of the European Union and the Personal Data Protection Authority, in particular decision 1250/2016 (Privacy Shield – here Informative page of the Italian Guarantortherefore, no further consent is required. The companies mentioned above guarantee their adherence to the Privacy Shield. 

Safety measures
This website processes user data lawfully and correctly, adopting appropriate security measures to prevent unauthorised access, disclosure, alteration, or destruction of data. Processing is carried out using computer and/or telematic tools, with organisational methods and logic strictly related to the stated purposes. In particular, the website management software is constantly updated and regularly scanned to check for viruses and dangerous code.
In addition to the owner, in some cases, categories of authorised personnel involved in the organisation of the site (administrative, commercial, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.

User rights
In accordance with European Regulation 679/2016 (GDPR) and Article 7 of Legislative Decree of 30 June 2003, no. 196 http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1311248, the User may, in accordance with the methods and within the limits provided by current legislation, exercise the following rights:
– to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him/her for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication;
- Request confirmation of the existence of personal data concerning them (right of access);
– to know its origin;
– receive intelligible communication from it;
– to have information about the logic, methods and purposes of the processing;
– request their updating, rectification, integration, cancellation, anonymisation, blocking of data processed in violation of the law, including data no longer necessary for the purposes for which they were collected;
– in cases of consent-based processing, to receive, at the sole cost of potential support, their data provided to the data controller, in a structured, machine-readable, and commonly used electronic format;
– the right to lodge a complaint with the supervisory authority (Data Protection Authority – Link to the Guarantor's page);
– as well as, more generally, exercise all rights recognised by current legal provisions.
In cases where data is processed based on legitimate interests, individuals' rights to processing are still guaranteed (except for the right to data portability, which is not provided for by the regulations), in particular the right to object to processing, which can be exercised by sending a request to the data controller.
Requests should be addressed to the Data Controller.

Data controller
The data controller, in accordance with current laws, is the administrator of 

ECORENT SRL
Registered Office: Strada vicinale Sciorsci snc | 70014 Conversano (BA)
Head Office: Via san Benedetto, 8 | 70014 Conversano (BA)
VAT Number: 08873760725 | Certified Email: ecorentpuglia@pec.it
Tour Operator Licence No:

You can contact us via the CONTACT section or the contacts listed at the bottom of the website pages.