Pursuant to Arts. 13 and 14 of Regulation 2016/679/EU (hereinafter "GDPR") Due Mondi Ticket Sas di Paci Isabella & c. in person of the legal representative (hereinafter "Data Controller") based in Spoleto (PG), piazza della Vittoria n.25 - 06049, in his capacity as "Data Controller", informs you that your personal data collected for the purpose of the conclusion of the contract with the Customer and/or as part of the execution and/or conclusion of the same to use the ticket services requested, will be processed in compliance with the aforementioned regulations, in order to guarantee the rights, dignity, and fundamental freedoms of individuals, with particular reference to confidentiality and personal identity. We inform you that if the activities provided to you include the processing of personal data of third parties in your ownership will be your responsibility to ensure that you have complied with the provisions of the law against data subjects in order to make legitimate the their treatment by us.

Origin, purpose, legal basis and nature of the data processed
The processing of your personal data, directly provided by you, is carried out by Due Mondi Ticket Sas di Paci Isabella & c. for the purpose of concluding the contract with the Customer and/or as part of the execution and/or conclusion thereof.
Moreover, it is possible to obtain a processing of personal data of third parties communicated by the Customer to the Company. With regard to this hypothesis, the Customer is the independent data controller and assumes the consequent legal obligations and responsibilities, holding back the Company from any dispute, claim and/or claim for compensation for the damage caused by processing received by the Company from interested third parties.
In compliance with current legislation on the protection of personal data and without the need for specific consent by the Data Subject, the Data will be stored, collected and processed by the Company for the following purposes:
a)   fulfillment of contractual obligations, execution and/or conclusion of the contract with the Customer and/or management of any pre-contractual measures;
b)   compliance with any legal obligations, tax and fiscal provisions arising from the conduct of business and obligations related to administrative and accounting activities;
c)   sending, directly or through third party providers, newsletters and communications with direct marketing purposes through email, sms, mms, push notifications, fax, paper mail, telephone with operator, in relation to products supplied by other companies pursuant to art. 130 c. 1 and 2 of D. lgs. 196/03 (hereinafter "Code");
d)   communication of Data to third parties for sending newsletters and communications with marketing purposes through email, sms, mms, push notifications, fax, paper mail, telephone with operator pursuant to art. 130 c. 1 and 2 of the Code.
The legal bases of the processing for the purposes a) and b) indicated above are Articles 6.1.b. and 6.1.c) of the Regulation.
The provision of Data for the aforementioned purposes is optional, but any failure to provide the Data and the refusal to provide them would make it impossible for the Company to perform and/ or conclude the contract and provide the services required.
The legal basis for the processing of personal data for the purposes c) and d) is art. 6.1.a) of the GDPR as processing is based on consent; please note that the Data Controller may collect a single consent for the marketing purposes described here, pursuant to the General Provision of the Guarantor for the protection of personal data "Guidelines on promotional activities and combating spam" of 4 July 2013. The provision of consent to the use of data for marketing purposes is optional and if, the data subject wishes to object to the processing of data for marketing purposes carried out by the means indicated here, as well as revoke the consent given; may at any time do so without any consequence (except for the fact that it will not receive more marketing communications) by following the indications in the section of the "Rights of the Data Subject" of this Policy.
Finally, please note that for the processing carried out for the purpose of sending direct advertising material or its direct sale or for the performance of its own market research or commercial communications in relation to products or services similar to those used by the Customer, The Company may use e-mail addresses or personal data in accordance with and to the extent permitted by art. 130, paragraph 4 of the Code and the provision of the Data Protection Authority of 19 June 2008 even in the absence of explicit consent. The legal basis of data processing for this purpose is art. 6, paragraph 1, lett. f) of the GDPR, without prejudice to the possibility of opposing such processing at any time, following the indications in the section of the "Rights of the Data Subject" of this Policy.

Communicating
The data may be disclosed to third parties appointed as data processors pursuant to Article 28 of the GDPR, which in turn may use sub-processors and in particular banks, insurance companies, suppliers of services strictly necessary for the performance of the business activity, or consultants of the company, where this proves necessary for tax, administrative, contractual or regulatory requirements; cloud computing companies and servers. Your personal data, or the personal data of third parties in its ownership, may also be disclosed to external companies, identified from time to time, whose Due Mondi Ticket Sas di Paci Isabella & c. entrust the execution of obligations deriving from the received assignment to which will be transmitted only the necessary data to the activities requested them. All employees, consultants, temporary workers and/or any other individual who carry out their activities on the basis of instructions received by Due Mondi Ticket Sas of Paci Isabella & c., pursuant to art. 29 of the GDPR, are appointed "Data Processors" (hereinafter also "Data Processors"). Due Mondi Ticket Sas di Paci Isabella & c. gives appropriate operational instructions to the Data Processors, with particular reference to the adoption and compliance with security measures, in order to ensure the confidentiality and security of the data. The Customer is invited, in accordance with art. 33 of the GDPR to report to Due Mondi Ticket Sas di Paci Isabella & c. any circumstances or events from which a potential "personal data breach" in order to allow an immediate evaluation and the adoption of any actions aimed at countering this event by sending a communication to Due Mondi Ticket Sas di Paci Isabella & c. at the addresses indicated below. 
The Data will not be disseminated.
The obligation of Due Mondi Ticket Sas di Paci Isabella & c. to communicate the data to Public Authorities on specific request remains unchanged.

Transfer abroad
The transfer of your personal data abroad may take place if it proves necessary for the management of the task received. It will be applied the same level of pretection used for the employees’s processing of personal data.
In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided for in Chapter V of the GDPR will be applied. 
Methods, treatment logics and storage times
Your data are collected and recorded lawfully and correctly for the purposes indicated above in compliance with the principles and requirements of art. 5 c 1 of the GDPR.
The processing of personal data takes place through manual, computer and telematic tools with logics strictly related to the purposes themselves and, in any case, in order to ensure their security and confidentiality.
Personal Data will be processed by Due Mondi Ticket Sas di Paci Isabella & c. for the duration of the assignment and also subsequently to assert or protect their rights or for administrative purposes and/ or to perform obligations arising from the framework regulatory applicable and in compliance with the specific legal obligations on data retention.

Rights of the Data Subject
In accordance, within the limits and under the conditions provided for by the legislation on the protection of personal data concerning the exercise of the rights of the Data Subjects [1] with regard to the processing operations covered by this Policy, As a data subject, you have the right to request confirmation of whether or not your personal data is being processed, to access the personal data concerning you and in relation to them you have the right to request rectification, the cancellation, the notification of corrections and cancellations to those who may have been transmitted by our organization, the restriction of processing in the cases provided for by the rule, the portability of personal data - provided by you - in the cases indicated by the norm,  to oppose the processing of your data and, specifically, you have the right to oppose decisions that concern you if based solely on automated processing of your data, including profiling. If you believe that the processing of data concerning you infringes the rules of the GDPR, you have the right to lodge a complaint with the Guarantor pursuant to art. 77 of the GDPR.
If you wish to request further information on the processing of your personal data or for the possible exercise of your rights, you may contact Mr. Moris Meriggioli, to the email addresses and pec indicated in the epigraph.

Data Controller and Data Processor
Data controller, pursuant to art. 4 of the GDPR, is Due Mondi Ticket Sas by Paci Isabella & c. in person of the legal representative, based in Piazza della Vittoria n.25 - 06049
Spoleto (PG) P:IVA: 02981420546 - CF: 02981420546

Information on the processing of personal data of website users
Art. 13 and 14 of Regulation 2016/679/EU (hereinafter also "GDPR")

Reasons of the alert
Due Mondi Ticket Sas di Paci Isabella & c. (hereinafter also "Data Controller") is committed to respecting and protecting your privacy and wants you to feel secure during the simple navigation of the site and in case you decide to register by providing us with your personal data to use the services for the Users and/ or Customers. On this page the Data Controller intends to provide some information on the processing of personal data relating to users who visit or consult the website www.ticketitalia.it (the "Site"). The information is provided only for the website of Due Mondi Ticket Sas di Paci Isabella & c. and not for other websites that may be consulted by the user through links (for which please refer to their privacy policies). Reproduction or use of pages, materials and information contained within the Site, by any means and on any medium, is not permitted without the prior written consent of the Data Controller. Copying and/or printing is permitted for personal and non-commercial use only (for requests and clarifications contact the Company at the addresses indicated below). Other uses of the content, services and information on this site are not allowed.
With regard to the contents offered and the information provided, Due Mondi Ticket Sas di Paci Isabella & c.  will ensure that the contents of the Site are reasonably updated and revised, without offering any guarantee of adequacy, accuracy or completeness of the information provided and disclaiming any responsibility for errors of omission in the information provided on the Site.
The Data Controller collects, stores and processes your personal data for the purpose of providing the products and services offered on the Site, or for legal obligations. Regarding some specific Services, Products, Promotions, etc. Due Mondi Ticket Sas di Paci Isabella & c.  may also process your data for commercial purposes. In such cases, a specific, separate, optional and always revocable consent will be required with the methods and contact details indicated below.
The optional, explicit and voluntary sending of e-mail to the addresses indicated in the appropriate section of the Website, as well as the compilation of questionnaires, communication via chat, push notification via APP, social networks, call centers, etc., involves the subsequent acquisition of some of your personal data, including those collected through the use of Apps and related services, necessary to respond to requests. We also point out that when you use the mobile connection to access content and digital services offered directly by Due Mondi Ticket Sas Paci Isabella & c. or by our partners may need to transfer your personal data to such third parties. We highlight that you may access the Site or connect to areas where you may be able to post information using blogs or message boards, communicate with social networks, review products and offers, and post comments or content. Before interacting with these areas, please read the General Conditions of Use carefully, and note that, in certain circumstances, any information you include in your publications can be read, collected and used by third parties.

Purpose of processing and legal basis
The data are processed for the purposes:
1. Purposes strictly related and necessary to the registration on the website www.ticketitalia.it, the services and/or the Apps developed or made available by Due Mondi Ticket Sas di Paci Isabella & c. to the use of the related information services, the management of contact requests or information, for the purchase of products and services offered through the company website;
2. activities related to the management of User/Customer requests and the sending of feedback that may include the transmission of promotional material; for the completion of the purchase order of the products and services offered, including aspects related to credit card payment, shipment management, the possible exercise of the right of second thought provided for distance purchases, the update on the availability of temporarily unavailable products and services;
3. activities related to the fulfilment of obligations under Community and national law, the protection of public order, the detection and repression of crimes;
4. direct marketing, sending advertising material, direct sales, carrying out market research or commercial communication of products and/ or services offered by Due Mondi Ticket Sas di Paci Isabella & c.; this activity may also concern products and services of commercial partners of Due Mondi Ticket Sas di Paci Isabella & c. and be performed by sending advertising/information/promotional material and/or invitations to participate in initiatives, events and offers aimed at rewarding users/customers, carried out with "traditional" methods (for example, paper mail and/or operator calls), or through "automated" contact systems (for example SMS and/or MMS, telephone calls without operator intervention, e-mail, fax, interactive applications), pursuant to art. 130 c. 1 and 2 of D. lgs. 196/03 and s.m.i.;
The provision of data for the purposes referred to in points 1), 2) and 3), connected to a pre-contractual and/or contractual phase or functional to a user request or provided for by a specific regulatory provision, is mandatory and, in default, it will not be possible to receive the information and access the services requested; in relation to point 4) of this Policy, consent to the processing of data by the user/ customer is instead free and optional and always revocable without consequences on the usability of products and services except the impossibility for Due Mondi Ticket Sas Paci Isabella & c. to keep up to date on new initiatives or on particular promotions or benefits possibly available users/ customers.

Methods, treatment logics, storage times and safety measures
The processing is also carried out with the help of electronic or automated means and is offered by Due Mondi Ticket Sas di Paci Isabella & c. and/or by third parties of which Due Mondi Ticket Sas di Paci Isabella & c. can use to store, manage and transmit the data themselves. The processing of data will be carried out with the logic of organization and processing of your personal data, including related to the logs originating from the access and use of services made available via web, products and services used related to the purposes indicated above and, however, in order to ensure the security and confidentiality of the data. The personal data processed will be kept for the time required by the current standards.
Still regarding data security, in the sections of the website prepared for particular services, where personal data are requested from the browser user, the data is encrypted using a security technology called Secure Sockets Layer, abbreviated to SSL. SSL technology encrypts information before it is exchanged via Internet between the user’s computer and the Company’s central systems, making it incomprehensible to unauthorized users and guaranteeing the confidentiality of the information transmitted; in addition, transactions made using electronic payment instruments are carried out directly using the payment service provider’s platform (PSP) and Due Mondi Ticket Sas by Paci Isabella & c. keeps only the minimum set of information necessary to handle any disputes. With regard to the protection of personal data, the user/customer is invited, pursuant to art. 33 of the GDPR to report to Due Mondi Ticket Sas di Paci Isabella & c. any circumstances or events from which a potential personal data breach in order to allow an immediate evaluation and the adoption of any actions to counter this event by sending a communication to pec duemonditicketitalia@pec.it or by contacting Customer Service. The measures taken by Due Mondi Ticket Sas di Paci Isabella & c. on exempt the Customer from paying the necessary attention to the use, where required, of password/ PIN of adequate complexity, which must be updated periodically, especially if the subject has been violated/ known by third parties, as well as carefully guard and make inaccessible to third parties, in order to avoid unauthorized uses.
Cookies

A cookie is a short string of text that is sent to your browser and possibly saved on your computer (alternatively on your smartphone/tablet or any other tool used to access the Internet); such sending generally occurs whenever you visit a website. Due Mondi Ticket Sas by Paci Isabella & c. uses cookies for different purposes, in order to offer you a fast and secure digital experience, for example, allowing you to keep active the connection to the protected area while browsing through the site pages.
Cookies stored on your terminal cannot be used to retrieve any data from your hard drive, transmit computer viruses or identify and use your email address. Each cookie is unique in relation to the browser and device you use to access the Website or use the Two Worlds Ticket Sas App by Paci Isabella & c. Generally, the purpose of cookies is to improve the functioning of the website and the user’s experience in using it, even if cookies can be used to send advertising messages (as specified below). For more information on what cookies are and how they work, you can consult the website "All about cookies" http://www.allaboutcookies.org .
For detailed information on Cookies, please read the specific cookies policy.

Areas of communication and data transfer
For the purposes indicated above, Due Mondi Ticket Sas di Paci Isabella & c. may communicate and have processed, in Italy and abroad, the personal data of users/ customers to third parties with whom we have relations, where these third parties provide services at our request. We will only provide these third parties with the information necessary to perform the requested services by taking all measures to protect your personal data. The data may be transferred outside the European Economic Area if this is necessary for the management of your contractual relationship. In this case, the recipients of the data will be imposed protection and security obligations equivalent to those guaranteed by the Data Controller. In the case of use of services offered directly by Partners, we will provide only the data strictly necessary for their execution. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the guarantees applicable to transfers of data to third countries will be applied, if required.We may also disclose personal data to our commercial service providers, for marketing reasons, who are appointed external data controllers for this purpose. In addition, personal data may be disclosed to competent public entities and authorities for the purposes of compliance with regulatory obligations or for the assessment of liability in the event of computer crimes against the site and communicated to, or allocated to third parties (as managers or, in the case of providers of electronic communications services, independent owners), who provide IT and telematic services (eg hosting services, management and development of websites) and of which Due Mondi Ticket Sas di Paci Isabella & c. uses for the performance of tasks and activities of a technical and organizational nature instrumental to the operation of the website. The subjects belonging to the above categories operate as separate Data Controllers or as Data Processors appointed for this purpose by the Data Controller.
Personal data may also be known by the employees/consultants of Due Mondi Ticket Sas di Paci Isabella & c. who are specially trained and appointed Data Processors.
The categories of recipients to whom the data may be communicated are available by contacting Due Mondi Ticket Sas di Paci Isabella & c.  at the addresses indicated below.

Rights of data subjects
You may exercise your statutory rights at any time, including:a)   access your personal data, obtaining evidence of the purposes pursued by the Data Controller, the categories of data involved, the recipients to whom they may be communicated, the applicable retention period, the existence of automated decision-making processes;
b)   to obtain without delay the rectification of inaccurate personal data concerning you;
c)   obtain, where applicable, the deletion of your data;
d)   obtain the restriction of processing or to oppose it, whenever possible;
e)   request the portability of the data you have provided to the Company, that is to say to receive them in a structured format, also to transmit such data to another holder, within the limits and under the constraints provided by art. 20 of the GDPR;In addition, you may lodge a complaint with the Data Protection Authority pursuant to art. 77 of the GDPR.
For the processing referred to in point 4) of the purposes, the Customer may always revoke consent and exercise the right of opposition to direct marketing (in "traditional" and "automated"). The opposition, in the absence of any indication to the contrary, will refer to both traditional and automated communications.

Data Controller

Data controller, pursuant to art. 4 of the GDPR, is Due Mondi Ticket Sas di Paci Isabella & c. in person of the legal representative, based in Piazza della Vittoria n.25 - 06049 Spoleto (PG) VAT: 02981420546 - CF: 02981420546
The above rights can be exercised at the request of the interested party in the manner made known by the Customer Service or on the Company’s WEB site or using the following references: Moris Meriggioli, email: info@ticketitalia.com;
Use of the Website, including for use on tablets and/or smartphones, by the Customer and/ or the User implies full knowledge and acceptance of the content and any information included in this version of information published by the time the site is accessed. Due Mondi Ticket Sas di Paci Isabella & c. form that this information can be changed without any notice and therefore recommends a periodic reading.
 
The Data Controller
Due Mondi Ticket Sas by Paci Isabella & c. in person of the legal representative.
 
This privacy policy was updated on 30/05/2021
 
 
________________________________________
[1] ex Art.12 and Art. 15-22 of Regulation 2016/679/EU