In accordance with the provisions of Articles 13 and 14 of Regulation (EU) 2016/679 on the Protection of Personal Data, the present document describes the methods by which Ufleet S.r.l., as Data Controller, collects, uses and protects the personal information of the Users of this website, the rights granted to them and the procedures by which it is possible to contact them.
Data Controller
Ufleet S.r.l. with registered office in Viale Ferdinando di Savoia 2, 20124 Milan
Purpose of the processing
UFleet informs you that the processing of personal data collected directly from the website is finalized to:
- Satisfy the specific request submitted by the User by filling in the form in the section “Contact Us” of the site (e.g. request for a quotation, request for support, request for information);
- Subscription to the Newsletter service;
- With respect to users who interact with Made in Uvet as “Members”:
- Management of activities related to registration and authenticated access to the reserved area, by accessing the “Member Login” section of the site or all other channels dedicated to user interaction;
- Allow you to plan and customize a trip or a travel package, and to make your own reservation;
- Execution of activities related to the service of travel agency, which means the acquisition of preliminary information or necessary for the management of the service, administrative and accounting management, assistance, organization and management of the trip, including registration with airlines, selected hotels and transfer services and excursions, or the signing of the insurance policy (compulsory and voluntary);
- Customer Service activities and statistical analysis through aggregation or anonymization of data;
- Upon prior consent, transmission of commercial and promotional communications regarding new services, offers, events and other activities, including from other companies in the Uvet Group.
- With respect to users who interact with Made in Uvet as a Member of the “Travel Agency Community”:
- Management of activities related to registration and authenticated access to the reserved area, by accessing the “Travel Agent” section of the site or all other channels dedicated to the Travel Agent interaction;
- Enable the use of the platform to customize trips and travel packages, according to the specific requests of customers and related activities of the Tour Operator service (assistance, organization and planning of the trip, including registration with airlines, selected accommodations and transfer services and excursions, or the signing of the insurance policy (compulsory and voluntary);
- Administrative and accounting operations in relation to fees calculated on sales made through Made in Uvet;
- Customer Service activities and statistical analysis through aggregation or anonymization of data;
- Management of internal control and management activities;
- Mandatory purposes related to legal obligations, such as, for example, any communications to public authorities;
- Upon prior consent, transmission of commercial and promotional communications regarding new services, offers, events and other activities, including from other companies in the Uvet Group.
Legal basis and Lawfulness of processing
The processing of data is based on the principle expressed in art. 6 of the European Regulation on the protection of personal data, according to which the processing of personal data is lawful if necessary to perform the service requested by the data subject. The transfer of data, for these purposes, is necessary to fulfil the request for contact, or to allow registration and access to reserved areas and to conclude the contact between the parties.
The processing of data for marketing purposes will be based, pursuant to art. 6 of the GDPR, on the consent, if any, expressed by the data subject. The transfer of data for the purposes of marketing is optional, the refusal does not have any consequences, except the inability to receive promotional material relating to activities and projects, indicated among the purposes of processing.
Nature and provision of personal data
The User is free to communicate his/her personal data through the online forms in order to send information requests, contact requests, to register as a “Member” or “Travel Agent” and to use the travel booking services through the Made in Uvet platform.
Filling in the Made in Uvet contact form may imply the further acquisition of the sender’s mail address, which is necessary to reply to requests, as well as any other personal data included in the message.
For the purposes indicated in this privacy policy, the Controller processes:
– personal data such as biographical data (name, surname, date and place of birth, social security number, address, telephone number, e-mail and other contact details), as well as data pertaining to the method of payment.
– any data concerning health, if provided by the user (e.g. in the case of disabilities, pathologies or intolerances that imply particular needs in the planning of the trip, as well as for the signing of the travel insurance policy).
In addition to the data provided directly and wilfully by the user, the computer systems and software procedures used to operate this website acquire, during their normal operation, some personal navigation data whose transmission is implicit in the use of Internet communication protocols. This data is not collected for the scope of association with the identity of the data subject, but by their very nature would allow, through processing procedures and associations with data held by third parties, to identify users. This category of data includes IP addresses or domain names of computers used by users who access the site and other parameters relating to the operating system and computer environment of the User. These data are used only to obtain anonymous statistical information on the use of the site and to check its proper functioning. The data could be used to ascertain liability in the event of hypothetical IT crimes against the site.
For further information, please refer to the dedicated Cookie Policy.
Methods of processing
Processing of personal data means their collection, recording, organization, storage, structuring, alteration, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction, or the combination of two or more of these operations, including through automated means aimed at storing, managing and transmitting the same data, using appropriate tools to ensure security and confidentiality.
With regard to security, we inform you that the database is accessible only by the staff specifically appointed by the Controller, as well as the related operations described above and that your data will be processed using methods and tools to guarantee confidentiality and may be carried out by electronic or automated means and through non-automated means (paper files), both provided with adequate security measures, as provided for in Regulation (EU) 2016/679 on the Protection of Personal Data, to prevent loss of data, illicit or incorrect use and unauthorized access.
Disclosure of data to third parties
Without prejudice to any communications to comply with legal obligations, the Controller will communicate the personal data transferred by users with duly caution only to chosen third parties, to the extent strictly necessary to comply with the purposes set out above, as well as for the fulfillment of certain functions relating to corporate management, or to persons authorized to process personal data by Ufleet S.r.l. and in particular:
– Tour Operator;
– Airlines, accommodation facilities, transfer and excursions services;
– Agency/intermediary travel agents
– Insurance companies;
– Other companies of the UVET Group
– Leonardo Travel Service as a partner, with regard to the technical / IT management of the Made in Uvet platform, or in relation to the activity of Tour Operator;
– Subjects that supply services for the management of the information system and data bases and telecommunications networks, or for the transmission of marketing communications.
The subjects belonging to the above categories operate, in some cases, in total independence as distinct Data Controllers, and in other cases, as Data Processors specifically appointed by Ufleet in accordance with Article 28 GDPR.
A list of the external Processors appointed may be consulted at the Data Controller’s registered office.
Extra-EU Data Transfer
In the case of travel abroad and in compliance with the provisions of art. 49, paragraph 1, letters. b), c) and f), it may be essential for the Data Controller to transfer and / or communicate, even to non-EU countries, the personal data strictly necessary for the execution of the contract and the fulfillment of obligations, duties and formalities provided for by contract and / or by law and arising from them.
For travel to extra-EU countries and outside of those indicated above for which there is no decision of adequacy by the European Commission pursuant to art. 45 and / or art. 46 of Reg. EU 2016/679, please note that travelers may not exercise their rights under the Regulation either to the Data Controller or Data Controllers, or directly to third parties (such as, for example: hoteliers, local carriers, local insurance companies, public or private health care institutions, etc..) because this obligation to process and store data in accordance with European Union standards is not provided for by the laws of the host country.
We also inform you that in relation to the activity carried out by Leonardo Travel Service, a partner company Made in Uvet, the data may be processed at the Republic of San Marino.
The Republic of San Marino, with the approval by the Great and General Council of Law no. 171, published on 21 December 2018, has issued its own privacy legislation in line with EU Regulation no. 679/2016, and is therefore among the countries considered adequate by the EU Commission.
Links to third party websites
We invite you to consider that this website may contain links to other sites that are not governed by this privacy policy. Visitors to our site may be directed to third party sites to obtain more information, such as events, content promotions, services from suppliers and partners; Ufleet makes no representation as to how users’ data is stored or used by third party servers.
We invite you to read the privacy policy of each third party site reached through the website in order to understand their use of your personal information.
Social media usage
The site may also provide links to other social media platforms that lead to servers installed by individuals or organizations over which it lacks control. The Data Controller does not provide any representation or take any responsibility for the accuracy or any other aspect of the information available at such sites.
A link to a third-party site cannot be construed as a validation, neither by Ufleet nor by such third party, of the products and services of others or such third party. The Data Controller makes no representations or warranties regarding the use or storage of the user’s data on third party sites. We invite you to carefully examine the privacy policy that governs the third-party sites linked to our website for a complete overview of the possible use of your personal data.
Data Retention
Your personal data transferred through this website will be kept by Made in Uvet for the duration necessary to fulfill your request.
As regards the specific marketing purposes, it should be noted that the data provided will be kept for a period consistent with the purpose and without prejudice to the right of the data subject to revoke consent at any time and to unsubscribe from the Newsletter.
Rights of Data Subject
In accordance with EU Regulation 679/2016, the data subject is entitled to ask the Data Controller for access to personal data (art. 15), rectification (art. 16), erasure or forgetting of such data (art. 17), restriction of the processing of personal data concerning him (art. 18), the right to data portability (art. 20) or to object to their processing (art. 21), as well as the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects that affect you or that affects you in the same way significantly (art. 22).
If the processing of personal data is based on the express consent given by the data subject, pursuant to art. 7 paragraph 3 of the Regulation, the right to revoke the consent given for the transmission of communications and updates for promotional and commercial purposes is recognised.
It is also recognized the right to file a complaint before the competent control authority (art. 77 of the Regulation) if users believe that the processing carried out by the Data Controller does not comply with the provisions of the law on the protection of personal data. In Italy, the complaint can be submitted to the Garante per la Protezione dei Dati Personali. More information on how to submit a complaint is available on the website of the Data Protection Authority, at www.garanteprivacy.it
Requests may be made to the Data Controller in the following ways:
– Sending of registered letter to the address: Viale Ferdinando di Savoia 2, 20124 Milan;
– E-mail address: privacy@uvet.com or
– by contacting the Data Protection Officer:
Data Protection Officer
Title: Get Solution by Paola Generali
Phone: 0239661701
E-mail: privacy@uvet.com
Changes to this policy
This privacy policy is updated on 01 August 2019
Ufleet reserves the right to modify this privacy policy as it deems necessary. We invite visitors to check this page periodically to keep an eye on any changes.