Privacy Policy EN - Luneur Park

WHICH COMPANIES CONTROL THE PROCESSING OF MY PERSONAL DATA?

The companies responsible for processing your personal data is Luneur Park Spa with registered office at Via Giovanni Battista De Rossi 13,00161 Roma (the "Controller").

If you have any questions about the processing of your personal data or if you would like to ask for relevant parts of the joint controller’s agreement, please contact as at info@luneurpark.com

FOR WHAT PURPOSE AND ON WHAT BASIS DO WE PROCESS YOUR PERSONAL DATA?

The Controller will process your personal data for the purposes set out below, and consistently with the purpose of the channel through which you may have provided your personal data:

Management of the product and / or service purchase

If you purchase tickets via our online form, we will process your personal data (first name and surname, email address, telephone number, ZIP code, date of birth, method of payment and transactional details of your purchase) to process your purchase and payment of your products and/or services and send you and e-mail with the purchase confirmation, the receipt and the ticket. Additionally, during the purchase process we will ask for your date of birth to ensure that you are at least fourteen (14) years of age. This is required because pursuant to European data protection legislation, if you are not over fourteen years of age then we would need to obtain the consent of your parents/guardians to process your personal data. If you have purchased any product or service by using promotions that are subjected to specific conditions, please note that, at the park ticket offices, we may ask you to provide us the corresponding documentation to verify the compliance with these conditions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by the Controller. In addition, we will process your personal data to address (by telephone or e-mail) your requests for information sent to the Controllers and any incidents or claims related to your purchased product and/or service, as well as, to reach you by email, SMS or phone for informing you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.).

Lawfulness basis: the basis for these processing operations is the execution of the agreement entered with you as a result of your purchase of the relevant product and/or service (purchase terms and conditions). If you do not provide the required personal data, you will not be able to complete your purchase.

Management of bookings, contracting and events celebration (birthday parties, weddings, first communions, corporate events etc.)

If you book and purchase one of our events via our online booking form, we will process your personal data (name, email address, telephone number, whether you or your host are Annual Pass holders, method of payment, personal details included in the payment receipt and transactional details of your booking) to manage your booking and process the payment of your event you wish to arrange and send you by email your booking confirmation, the booking receipt and the relevant documentation for the celebration of your event. Additionally, during the booking process we will ask for your date of birth to ensure that you are at least fourteen (14) years of age. This is required because pursuant to European data protection legislation, if you are not over fourteen years of age then we would need to obtain the consent of your parents/guardians to process your personal data. If you have booked your event by using promotions that are subjected to specific conditions, please note that, at the park ticket offices, we may ask you to provide us the corresponding documentation to verify the compliance with these conditions (e.g., large family card, ID card, etc.). In these circumstances, this additional information will be not stored by the Controllers. In addition, we will process your personal data to address (by telephone or e-mail) your requests for information sent to the Controllers and any incidents or claims related to the booking of your event, as well as, to reach you by email, SMS or phone for informing you about any circumstances that may affect your visit (e.g., weather conditions, security, public health issues, etc.). If for the purpose of customizing your event (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as the Controller will not process such information on a personalized basis. If for the purpose of customizing your event (e.g. creating the menus that may be served during your event), you provide information about any food allergies and/or intolerances, please ensure that you do not provide this information together with personal data that may identify the relevant person/s affected by such intolerances or allergies, as the Controller will not process such information on a personalized basis.

Lawfulness basis: these processing operations will be carried out as part of the execution of our contract with you for the booked event (terms and conditions of purchase). If you do not provide your personal data, we will not be able to process your booking. If, in order to customize your event (e.g., for decorating the event venue) you voluntarily provide personal data of a child under fourteen (14) years of age (first name and first surname), you declare that you are his/her father, mother or guardian and give your express and informed consent to process his/her personal for the above purpose.

III. Customer support

If you send us through any of the methods available for this purpose on this web site (by phone, online form or email) a query or request specific information about any of our products, services or events (first communions, birthday parties, corporate events, weddings, etc.), a suggestion or an information request about any claim or incidents that may have arisen from the products, services or event purchased or booked by you, we will process your personal data and the information contained in your query to deal with and respond to it by any means, including electronic methods Additionally, during the booking process, we will ask for your date of birth to ensure that you are at least fourteen (14) years of age. This is required because pursuant to European data protection legislation, if you are not over fourteen years of age then we would need to obtain the consent of your parents/guardians to process your personal data. If your query relates to any product, service or event purchased by you, we might also ask you (as part of the customer support process) specific details about your purchase (transactional information, your ticket locator, date of purchase, type of product purchased, etc.) to ensure that your query is addressed properly.

Lawfulness basis: by contacting the Controller via any of the above methods, you expressly agree that your personal data may be processed for this purpose. You may withdraw your consent at any time following the procedure described below in the section “What are my personal data rights?” of this Privacy Policy.

Surveys submission

If you purchase any of our products or services (including any of our events) the Controller will send you surveys by any method, including electronic means (email, SMS, phone calls) intended to gain insights into the degree of customer satisfaction with our products and/or services, their experience, to allow customers to make suggestions, and to enable us to conduct market research and analysis (quantitative and qualitative) to find out our positioning in the industry and the likelihood for our customers to purchase our products and/or services again. The Controllers will process, strictly, the required data to fulfil this process: e-mail address or telephone number, and any non-personal information gathered in the surveys to which you have responded. To this end, the Controller will process personal data that are strictly necessary for this purpose, in particular your e-mail address or phone number supplied by you at the time of your purchase and the non-personal information included in any surveys to which you have responded.

Lawfulness basis: this processing is based on the Controllers' legitimate interest in obtaining customer feedback related to the products and services purchased by them, their needs, and suggestions, to determine their likelihood of our customers purchasing our products and/or services or other similar products and/or services that we offer related to the leisure and hospitality industries, our Annual Passes, events and activities and our position in the industry to identify areas of improvement of our products and/or services and our customers' experience, and to make internal decisions to plan our business operations and our activities. We believe that the interests and fundamental rights and freedoms of our customers are not undermined since, we carry out this processing as part of our contractual relationship with them resulting from their purchase of our products and/or services. We use personal data and basic, non-sensitive information to the extent strictly necessary. We do not send surveys to individuals under 14, and we only target customers who have recently purchased our products and/or services. As a result, we understand that by purchasing our products and/or services and having been specifically informed about the processing of their personal data, our customers may have a reasonable expectation regarding the processing of their personal data for this purpose. Customers may object, at any time, to the processing of their personal data or exercise any other rights under applicable data protection regulations in accordance with the procedure described below in “What are my personal data rights?” of this Privacy Policy.

Sending you marketing information, discounts and promotions

Only if you expressly authorize us to do so via any of the forms available on this web site (e.g. online purchase form, contact or request for information form, event booking form, schools and groups visit booking form, newsletter subscription form etc.) will we process your personal data to send you commercial information and information on discounts and promotions by any means, including electronic methods (e-mail, SMS, phone) about products and services, related to the leisure or hospitality industries, Annual Passes or events run by any of these companies, also subject to prior profiling and analysis of your preferences via automated decisions so that we can suggest products and services that we think may be of interest to you. To send you this information, the Controller will process your name, surname, your e-mail address or your phone number provided by you.

To ensure the quality of your data, the Controller use a two-step verification process. If you agree to the processing of your personal data for this purpose, you will receive an e-mail asking you to confirm your email and that your data can be processed for this purpose.

Profiling will be based on automated decisions to ensure that any commercial information, discounts and promotions you receive are of interest to you. We will perform this profiling according to our own sources based on our stored information provided directly by you (date of birth/age, country and postal code), from your purchase history and details of the products and/or services purchased by you and, only if you expressly authorize us to do so by ticking the appropriate box on the data collection forms on this website (e.g. purchase form, booking form, information request form, contact form or newsletter subscription form, among others), in information provided by you in the surveys in which you have participated.

Based on the above information automated decisions will be made based on your transaction history (type of products and services purchased, whether you are an Annual Pass holder or whether you purchase food and drinks in the park or via our website), social and financial criteria (customer age and purchase history, from which will also be able to determine whether you have children and, if so, the number of children based on the number of children's tickets - junior tickets - that you have purchased), demographic criteria based on data provided directly by you (zip code provided at the time of purchase), analysis of your reactions to our marketing communications (i.e. your decision or not to purchase the product or service offered) and, only with your express permission, the information you provide in the surveys you respond to (surveys designed to find out about your level of satisfaction, your experience and to allow you to make suggestions regarding purchased products and/or services, and to enable us to get insights into our position in the market and whether you are likely to purchase our products and/or services again).

This profiling will not be used to make automated decisions with legal implications for you or that will otherwise significantly affect you. This profiling will only be used to send you commercial information, discounts and promotions on products, services, events.

Lawfulness basis: we will only process your data if you give us your express consent to do so by ticking the box specifically included for this purpose in the forms available on this website (e.g., online purchase form, information request form, group and school visit booking form, newsletter subscription form, etc.). Please note that you may, at any time, withdraw your consent or exercise your rights as provided below in the section “What are my data protection rights?” of this Privacy Policy. In addition to the above methods, we would like to remind you that you can opt out from these commercial communications following the procedure made available to you for this purpose on each marketing communication you have expressly authorized us to send to you.

If you have expressly authorized us to use the information in the surveys to which you have responded for profiling purposes and send you relevant commercial information, you may also, at any time, exercise your rights and withdraw your consent or exercise your objection rights in accordance with the procedure described below in the section “What are my data protection rights?” of this this Privacy Policy.

We would also like to remind you that you may also object to profiling based on automated decisions, request human intervention, give your point of view, resolve any queries about and object to automated decisions by sending your request to the Data Protection Officer following the procedure indicated below in the section “What are my personal data rights? of this Privacy Policy.

Using information collected on surveys as an additional profiling resource

If you have expressly given us your consent by any of the forms included on this web site (online purchase form or event, group and school visit booking form), we will process your personal data (e-mail address and telephone number) and any non-personal information collected in the surveys to which you have responded (surveys intended to find out the degree of customer satisfaction with the products and/or services purchased, their experience and to allow customers to make suggestions and enable us to conduct market research and analysis (quantitative and qualitative) to find out our positioning in the industry and whether our customers are likely to purchase our products and/or services again) will be processed as an additional parameter for profiling and for analysing your preferences to ensure that we send you relevant commercial, discounts and promotions information by any means, including electronic means (e-mail, SMS, and telephone calls) about the products and services.

Your profile will be developed using the following parameters: your transaction history (type of products and services purchased, whether you are an Annual Pass holder or whether you purchase food and drinks in the park or via our website), social and financial criteria (customer age and purchase history, from which the Controller will also be able to determine whether you have children and, if so, the number of children based on the number of children's tickets - junior tickets - that you have purchased), demographic criteria based on data provided directly by you (zip code provided at the time of purchase), the analysis of your reactions when you receive any commercial communication (i.e. your decision or not to purchase the product or service offered by this commercial communication) and, only with your express permission, the information without personal data that you provide in the surveys you have chosen to respond to.

Please note that based on your profile, automated decisions will be made to suggest commercial information, discounts and promotions of products, services and events to you that we believe may be of interest to you according to the parameters detailed above. In any case, this profiling will not be used to make automated decisions with legal implications for you or that will otherwise significantly affect you.

Lawful basis: we will only process your data if you give us your express permission to do so by ticking the box specifically included for this purpose in the ticket or event online purchase form or in the group and school visit booking form and if you have expressly authorized us to send you commercial information in accordance with the terms specified in this Privacy Policy. Otherwise, this processing will not occur.

If you do not agree that the information provided in surveys may be used as additional criteria for profiling purposes, you may withdraw your consent or exercise your right to object by following the procedure indicated below in the section “What are my personal data rights?” included in this Privacy Policy.

Finally, your data will also automatically ceased to be processed for the purpose described in this section if you ask us to unsubscribe from our commercial communications via any of the methods that will be made available to you on each commercial communication that you receive or through any of the methods described in the section “What are my personal data rights?” in this Privacy Policy.

VII. Use of cookies and related technologies

On this web site the Controller use own and third parties cookies and similar technologies (HTTP Cookies, Pixel Tracker and Premises and Local Shared), which means that Controllers may process and store information and personal data about users when they browse through this web site, in accordance with the purposes and settings that are made available to users at all times.

For complete information on our use of cookies and similar technologies and the processing of your personal data, please visit our Cookies Policy.

VIII. Compliance with legal obligations

When you provide personal data through the means available on this website, such personal data and, where applicable, the information related to the purchase any of our products, services or events will be processed to allow Controller to comply with any legal obligations applicable to them as a result of their contractual relationship with you and the processing of your personal data. Such obligations result from tax, personal data protection, commercial, consumer protection, information society services and e-commerce, civil law, and accounting regulations, among others.

Your personal data provided by you will be processed only to the extent required by the Controller to comply with applicable legal duties. Such personal information may include: your name, surname, ID, email, telephone number, zip code, country, address, purchase or booking transaction information (location, date, means of payment, proof of payment and reservation details), browsing and device data in accordance with the provisions of the Cookies Policy, criteria, mechanisms and logic used to make automated decisions for profiling purposes, and any other personal data which may have been generated and which the Controller must process to meet their legal duties.

Lawful basis: to comply with legal obligations applicable to the Controllers under European Union law and/or applicable domestic laws. Without your personal data, the Controllers would not be able to adequately comply with their legal duties or discharge any legal liabilities arising from their relationship with you or from the processing of your personal data.

Compliance with legal obligations

Your personal data provided by you will be processed only to the extent required by the Controllers to comply with applicable legal duties. Such personal information may include: your name, surname, ID, email, telephone number, zip code, country, address, purchase or booking transaction information (location, date, means of payment, proof of payment and reservation details), browsing and device data in accordance with the provisions of the Cookies Policy, criteria, mechanisms and logic used to make automated decisions for profiling purposes, and any other personal data which may have been generated and which the Controllers must process to meet their legal duties.

III. HOW THE RETENTION PERIODS OF MY PERSONAL DATA ARE DETERMINED?

If your personal data are processed for purposes related to managing the product and / or service purchase, managing bookings, contracting and events celebration (birthday parties, weddings, first communions, corporate events etc.) or managing bookings and contracting visits from schools and groups, such personal data will be processed for the duration of the contractual relationship maintained with you for the purchased product and/or service or event contracted. If for the customisation of your event (e.g. decoration) you provide the personal data of a child under fourteen (14) years of age (including his/her name, surname and age), please note that the Controller will only retain such personal data for such time as is necessary to customize your event and until this is finished, unless you decide to withdraw your consent or exercise your right to object to the processing as the child's parent or guardian, in which case we will implement your request.

If your personal data are processed for customer support purposes, the Controller will retain your personal data for such time as is strictly necessary to process and fulfill your request. If you submit a claim, your personal data will be processed for such time as is strictly necessary to properly address your claim. Thereafter, your personal data will be blocked in accordance with the procedure described later in this section to address any liabilities that may arise from your claim and only for the applicable statute of limitations period.

Where the Controller process your personal to send you surveys, they will retain your personal data for up to 12 months unless you request that your personal data be deleted or you otherwise object to the processing, in which case your personal will immediately ceased to be processed for this purpose.

If you expressly consent to receiving commercial information and information on discounts and promotions under the terms described in this Privacy Policy, your personal data will be processed strictly to satisfy this purpose and until you withdraw your previously given express and informed consent, you send us an unsubscribe request via any of the means made available for this purpose on each of the commercial communications that you will receive or until you exercise your rights of erasure, objection or your right not to be subject to automated decisions, including profiling. In all such cases, your personal data will cease to be processed for this purpose.

If you expressly consent to use the information collected on surveys as an additional profiling resource under the terms specified in this Privacy Policy, your personal data and non-personal information included in such surveys will be processed only for this purpose until you withdraw your express and informed consent, or until you send us an unsubscribe request via any of the means made available for this purpose on each of the marketing communications that you will receive, or until you exercise your rights of erasure, objection or your right not to be subject to automated decisions, including profiling. In all such cases, your personal data will cease to be processed for this purpose.

When your personal data are no longer relevant for the purposes for which they were collected or if you withdraw your consent or exercise your right of erasure or objection to the processing, the Controller will your personal data duly blocked (identification and reservation of the personal data, adopting technical and organizational measures to prevent their processing, including their viewing) to make them available, if necessary, to the competent Public Administrations and in particular to the competent Data Protection Control Authority, Judges, or the Public Prosecutor's Office during the statute of limitations period for legal actions that may arise from the relationship maintained with you or from the processing of your personal data and/or the legally established retention periods in accordance with European Union Law and/or domestic regulations. Upon the expiry of these periods, we will proceed to the physical and irretrievable deletion of your personal data.

TO WHOM IS MY PERSONAL DATA DISCLOSED?

Only if required to meet possible legal liabilities or to comply with statutory retention periods, your personal data may be disclosed to competent Public Authorities and in particular to the relevant Data Protection Control Authority, Judges, Courts or the Public Prosecutor's Office in accordance with European Union Law and/or domestic regulations.

The Controller rely on third party suppliers who may also process your personal data to provide services related to the purposes for which you are being informed including, but not limited to, information security, customer relationship management (CRM), technology, legal consulting, marketing, customer service, professional services, and IT companies. These providers will only access your personal data to perform their services on behalf of the Controllers, following at all times the Controllers' instructions and without ever being authorized to use such data for their own purposes and/or unauthorized purposes. One of these providers is Salesforce, a global company which provides cloud marketing platform services. If you provide your personal data via any of the forms available on this website (other than the online ticket purchase form), or you agree to receive commercial information or that the information you provide in any surveys may be used as additional resource to create your profile to send you this commercial information, Salesforce will process your personal data on our behalf within the European Economic Area (EEA) and in compliance with applicable European data protection regulations. Exceptionally, for example, in the event of a disaster recovery situation (i.e. the process to recover data and functionalities lost in the event of an accidental or a man-made disaster), Salesforce may also provide its services through companies outside the EEA, for which your personal data may need to be processed in countries that do not offer a standard of protection commensurate with the level of protection offered by European data protection legislation. In these cases, the Controller have entered into binding contractual commitments with Salesforce which guarantee the implementation of appropriate security measures to ensure that your personal data are at all times processed with an adequate level of protection comparable to that required in the EEA (standard contractual clauses approved by the European Commission on data protection in accordance with the European Data Protection Regulation (GDPR), additional security measures in accordance with decision C-311/18 of the Court of Justice of the European Union and subject to certification mechanisms). For further information, please do not hesitate to contact the Data Protection Officer at any of the addresses (postal or e-mail) indicated in the section “What are my personal data rights?” in this Privacy Policy. Please remember that you may withdraw your consent and/or exercise your rights at any time in accordance with the provisions of the relevant section of this Privacy Policy or request to unsubscribe from our commercial communications via any of the methods that will be made available to you for this purpose in each commercial communications that you will receive if you have given us your express consent to do so.

WHAT ARE MY PERSONAL DATA RIGHTS?

You may exercise your right of access, rectification, objection, limited processing, portability and, where appropriate, your right not to be subject to automated individual decisions, including profiling, by sending your request by post to the attention of the Data Protection Officer: info@luneurpark.com

In either case, please attach a copy of your Identity Card or equivalent document so that we can verify that you are the owner of the personal data on which your request is based. For consent-based processing operations, please note that you can withdraw your consent or object at any time to the processing of your data following the procedure described in the previous paragraph.

If you have expressly authorized us to send to you commercial information or information about discounts and promotions, including subject to prior profiling and analysis of your preferences via automated decisions for relevance, you may also unsubscribe from this type of communications by using the methods that will be made available to you for this purpose in each commercial communication that you will receive.

Finally, please note that you can also tell us that you do not want to be subject to decisions based exclusively on the automated processing described above, or ask us for human intervention, express your point of view, raise any queries about or object to automated decisions by sending your request to the Data Protection Officer at any of the addresses indicated in this section.

HOW DID YOU GATHER MY PERSONAL DATA?

The personal data processed by the Controllers are provided directly by you as the data subject through this website and/or during the relationship with you.

If you provide personal data of third parties, you agree to obtain their express and informed approval to provide their personal data to the Controllers in accordance with the provisions described in this Privacy Policy.

VII. MINORS

Children under fourteen (14) years of age are not authorized to purchase or book our products, services or events on this website.

However, if as a result of purchasing any of our products, services or events available on this web site and, particularly following an event, you voluntarily decide to provide personal data of a child under fourteen (14) years of age , you will be deemed to have given your express and informed consent as father, mother or guardian to process the personal data as part of the contractual relationship arising from your purchase pursuant to the provisions of this Privacy Policy.

VIII. HOW DO I LODGE AN OFFICIAL CLAIM FOR PERSONAL DATA PROTECTION?

You may lodge a claim with the Data Protection Control Authority https://www.garanteprivacy.it/ to protect your rights at any time you deem appropriate. However, we advise you to approach first our Data Protection Officer

This Privacy Policy was last updated in March 2021.