Statement on the processing of personal data

What are cookies?
Cookies are small text strings that the sites you visit send to your computer (normally your browser), where they are stored and then re-transmitted back to the sites when you visit them again.
 

a. Technical and analytical cookies with limited potential to identify you.

Technical cookies are those used for the sole purpose of transmitting a communication on an electronic communications network or to the extent strictly necessary for a supplier to provide the explicitly requested service to the user or the subscriber.
Analytical cookies, on the other hand, are used to analyse and measure the use of the website by users. Analytical cookies are similar to technical cookies when used directly by the site manager to collect information, in aggregate form, on the number of users to the site and on how they visit it. 
The legal basis that legitimises the processing of personal data for this purpose is set out in Article 6, par. 1, letter b) of EU Regulation No. 679/2016 – i.e. processing is necessary for the performance of a contract to which the Data Subject is party or in order to take steps at the request of the Data Subject prior to entering into a contract.

The technical cookies used by the site are:

• Cookie name: ckp
  Technical cookie: this cookie records the user's acceptance of cookies

  Type of data processed: tech, stat, profile
  Cookie expiration: 12 months

   

• Cookie name: request
  Technical cookie: this cookie is used to store the user's subscription to the newsletter and allows the pop-up to no longer be shown.  
  Type of data processed: unique alphanumeric code. 
  Cookie expiration: no one

   

• Cookie name: __RequestVerificationToken
  Technical cookie: this cookie is used to ensure normal navigation and use of the site and to prevent form data from being sent to another site.
  Type of data processed: session data.
  Cookie expiration: session.

   

• Cookie name: nwslt
  Technical cookie: this cookie saves the confirmation of the user's subscription to the newsletter.
  Type of data processed: user’s data.
  Cookie expiration: 12 months

   

• Cookie name: mgznntr
  Technical cookie: this cookie saves the confirmation that the magazine has been downloaded by the user.
  Type of data processed: user’s data.
  Cookie expiration: 12 months

   

• Cookie name: FCCDCF
  Technical cookie: this cookie stores the user's consent preferences.
  Type of data processed: user's consent preferences.
  Cookie expiration: 12 months 

   

• Cookie name: FCNEC
  Technical cookie: this cookie stores the user's consent preferences
  Type of data processed: user's consent preferences.
  Cookie expiration: 12 months

   

• Cookie name: am_user_session

  Technical cookie: this cookie is used to manage the session of the user who has authenticated on the site. 
  Type of data processed: user authentication data.
  Cookie expiration: 1 day.

   

• Cookie name: session_id

  Technical cookie: this cookie allows the user's session to be kept active while browsing.
  Type of data processed: user data.
  Cookie expiration: session.

   

• Cookie name: Secure-BUCKET
  Google technical cookie: this cookie is used to improve the user experience by providing personalized features and content, with the guarantee of data encryption.
  Type of data processed: user data.
  Cookie expiration: 1 year. 
  Privacy policy

   

• Cookie name: __Secure-STRP

  Cookie tecnico di Google: this cookie is used to ensure the security of the site.
  Type of data processed: user data
  Cookie expiration: 1 year. 
  Privacy policy
   

• Cookie name: AEC

  Google technical cookie: this cookie allows us to check whether requests to the site come from real users or bots.
  Type of data processed: data relating to the browsing language and the device used by the user for browsing.
  Cookie expiration: 6 months. 
  Privacy policy

   

• Cookie name: SIDCC

  Google technical cookie: this cookie protects users from unauthorized access
  Type of data processed: user data.
  Cookie expiration: 12 months. 
  Privacy policy

   

• Cookie name: SEARCH_SAMESITE

  Google technical cookie: this cookie allows you to manage search cookies on your browser.
  Type of data processed: user data.
  Cookie expiration: 12 months.
  Privacy policy

   

• Cookie name: SSID

  Google technical cookie: this cookie identifies the session of the user logged in to Google.
  Type of data processed: user data.
  Cookie expiration: 24 months 
  Privacy policy

   

• Cookie name: _GRECAPTCHA

  Google reCAPTCHA technical cookie: this cookie allows us to distinguish real users from bots when filling out forms and operating on the site
  Type of data processed: user data.
  Cookie expiration: 6 months 
  Privacy policy

   

• Cookie name: ar_debug
  Google DoubleClick technical cookie: this cookie allows you to check the functioning of Google ADS campaigns.
  Type of data processed: data relating to the user's actions and the device used for browsing.
  Cookie expiration: session.

  Privacy policy

   

• Cookie name: Secure-1PAPISID
  Cookie tecnico di Google: this cookie is used to protect the data of the Google user's account.
  Type of data processed: user data.
  Cookie expiration: 24 months.

  Privacy policy

   

• Cookie name: Secure-1PSID
  Cookie tecnico di Google: this cookie allows the user to authenticate via Google
  Type of data processed: user data.
  Cookie expiration: 24 months.
  Privacy policy

   

• Cookie name: Secure-1PSIDCC
  Cookie tecnico di Google: this cookie ensures the security of the user authenticated through Google.
  Type of data processed: user data.
  Cookie expiration: 24 months.
  Privacy policy

   

• Cookie name: __Secure-1PSIDRTS
  Cookie tecnico di Google: this cookie ensures the protection of the user's Google account
  Type of data processed: user data
  Cookie expiration: 24 months
  Privacy policy

   

• Cookie name: __Secure-1PSIDTS
  Cookie tecnico di Google: this cookie allows you to track the time of access to the account by the user.
  Type of data processed: user data.
  Cookie expiration: 24 months.
  Privacy policy

   

• Cookie name: __Secure-3PSIDRTS
  Cookie tecnico di Google: this cookie allows us to protect the user's account.
  Type of data processed: user data.
  Cookie expiration: 24 months
  Privacy policy

   

• Cookie name: __Secure-3PSIDTS
  Cookie tecnico di Google: this cookie allows you to track third-party cookies installed by the user during the browsing session
  Type of data processed: user data.
  Cookie expiration: 24 months.
  Privacy policy

   

• Cookie name: SOCS
  Google technical cookie: this cookie allows the user's consent preferences to be stored.
  Type of data processed: user data.
  Cookie expiration: 13 months.

  Privacy policy

   

   

   

Google analytics cookies with limited identification potential. 
 

• Cookie name: _ga
  Cookie Google Analytics: this cookie allows us to distinguish users, as well as collect information and generate statistics on the use of websites.
  Type of personal data processed: anonymous data of use of the service with partially obscured IP addresses.
  Cookie expiration: 14 months
  Privacy Policy

   

• Cookie name: _gat
  Cookie Google Analytics: this cookie allows you to limit the collection of data on sites with high user traffic.
  Type of personal data processed: anonymous data from the use of the service with partially obscured IP addresses.
  Cookie expiration: 14 months
  Privacy Policy

   

• Cookie name: _gid
  Cookie Google Analytics: this cookie allows a unique ID to be recorded that is used to generate statistical data about how the visitor uses the website.
  Type of data processed: anonymous data from the use of the service with partially obscured IP addresses.
  Cookie expiration: 14 months.
  Privacy Policy

   

• Cookie name: _gali
  Cookie Google Analytics: this cookie allows a unique ID to be recorded that is used to generate statistical data about how the visitor uses the website.
  Type of personal data processed: anonymous data from the use of the service with partially obscured IP addresses.
  Cookie expiration: 30 seconds.
  Privacy Policy

   

• Cookie name: _ga_R1SJKYBQPP
  Cookie Google Analytics: this cookie allows us to track sessions and user behaviour.
  Type of personal data processed: user data.
  Cookie expiration: 14 months.
  Privacy policy 

   

   

   

Snowplow analytics cookies
 

• Cookie name: _sp_id.282b
  Snowplow analytics cookie: this cookie allows you to be identified and track your activity during your browsing sessions to analyse your behaviour.
  Type of personal data processed: user data
  Cookie expiration: 12 months
  Privacy policy

   

• Cookie name: nuid
  Snowplow analytics cookie: this cookie allows us to track user behaviour during the browsing session in order to analyse it.
  Type of personal data processed: user data.
  Cookie expiration: session.
  Privacy policy
   

  
   

b. Third-party profiling cookies

Profiling cookies are aimed at creating user profiles and are used in order to send advertising messages in line with the preferences expressed by the user during web browsing. This is a processing activity that will in no case result in discrimination or negative effects for the data subject. This activity also allows the Data Controller to evaluate its services, allowing it to improve them by making them more efficient and usable by third parties. The legal basis that legitimizes the processing of personal data for this purpose is set out in Art. 6 par. 1, letter a) of EU Regulation no. 679/2016, i.e. when the user has given his/her consent to the installation of profiling cookies. 
The third-party profiling cookies used by the site are:
 

Facebook Cookies

• Cookie name: c_user
  Facebook authentication cookie: this cookie allows Facebook, together with the "xs" cookie, to authenticate a user's identity.
  Type of personal data processed: User ID (Facebook ID)
  Cookie expiration: 90 days.
  Privacy Policy

   

• Cookie name: xs
  Facebook authentication cookie: this cookie allows Facebook, together with the "c_user" cookie, to authenticate a user's identity.
  Type of personal data processed: session ID, creation date, authentication value, secure session status, cache group ID.
  Cookie expiration: 90 days.

  Privacy Policy

   

• Cookie name: datr
  Facebook authentication cookie: this cookie identifies your browser for security and site integrity purposes, including account recovery and identification of potentially compromised accounts
  Type of personal data processed: browser identifier and timestamp (Browser ID).
  Cookie expiration: 2 years.
  Privacy Policy

   

• Cookie name: fr
  Facebook authentication cookie: this cookie is used for the publication, measurement and improvement of the relevance of advertisements.
  Type of personal data processed: User and browser ID, timestamp, other service usage data (Facebook and Browser Encrypted IDs).
  Cookie expiration: 90 days.
  Privacy Policy

   

• Cookie name: local
  Facebook authentication cookie: this cookie is used to identify the country and language chosen by the last user who logged into the browser or the international domain used to log in to Facebook.
  Type of personal data processed: country and language of the user accessing the browser.
  Cookie expiration: 7 days.
  Privacy Policy

   

• Cookie name: pl
  Facebook authentication cookie: this cookie is used to record the access of a device or browser through the Facebook platform.
  Type of personal data processed: platform access data.
  Cookie expiration: 90 days.
  Privacy Policy
   
• Cookie name: sb
  Facebook authentication cookie: this cookie is used to improve friend suggestions on the Facebook platform.
  Type of personal data processed: browser identifier and timestamp.
  Cookie expiration: 2 years.
  Privacy Policy
   

• Cookie name: wd
  Facebook authentication cookie: this cookie is used to control the "Like" and "Follow us on Facebook" buttons, collect data relating to the language of the page and allow the sharing of the same.
  Type of personal data processed: data relating to the functions of the site.
  Cookie expiration: single session.
  Privacy Policy

   

• Cookie name: act
  Facebook authentication cookie: this cookie is used to control the social and sharing features of the page, as well as for analysis and research tools.
  Type of personal data processed: data relating to the functions of the site.
  Cookie expiration: single session.
  Privacy Policy

YouTube cookies
 

• Cookie name: HSID, SSID, APISID, SAPISID
  YouTube profiling cookies: these cookies allow Google to collect information about users for videos hosted by YouTube.
  Type of personal data processed: unique alphanumeric code.
  Cookie expiration: 2 years.
  Privacy Policy

   

• Cookie name: VISITOR_INFO1_LIVE
  YouTube profiling cookies: these cookies try to estimate the speed of the user's connection on pages with embedded YouTube videos.
  Type of personal data processed: unique alphanumeric code.
  Cookie expiration: 2 years.
  Privacy Policy

   

• Cookie name: YSC
  YouTube profiling cookies: this cookie records a unique ID for statistics related to which YouTube videos have been viewed by the user.
  Type of personal data processed: unique alphanumeric code.
  Cookie expiration: 2 years.
  Privacy Policy

   

• Cookie name: __Secure-3PAPISID, __Secure-3PSID, __Secure-3PSIDCC
  Google AdSense profiling cookies: these cookies create a profile of website visitors' interests to show relevant and personalized ads through retargeting.
  Type of personal data processed: unique alphanumeric code.
  Cookie expiration: 2 years
  Privacy Policy

   

• Cookie name: IDE
  Google AdSense profiling cookies: this cookie is used by Google DoubleClick to record and produce reports on the user's actions on the site after viewing or clicking on one of the advertiser's advertisements in order to measure the effectiveness of an advertisement and present targeted advertising to the user.
  Type of personal data processed: unique alphanumeric code.
  Cookie expiration: 1 year
  Privacy Policy

   

• Cookie name: NID, SID
  Google AdSense profiling cookies: these cookies record a unique ID that identifies the device of the user returning to the site. The ID is used for targeted advertisements.
  Type of personal data processed: unique alphanumeric code.
  Cookie expiration: 1 year.
  Privacy Policy

   

• Cookie name: _eoi
  CGoogle AdSense profiling cookies: this cookie allows us to track user interactions with advertisements in order to carry out profiling activities and show personalized content. 
  Type of personal data processed: user data.
  Cookie expiration: 12 months
  Privacy Policy

   

• Cookie name: _gads
  CGoogle AdSense profiling cookies: this cookie records user interactions with advertisements to measure conversions and campaign effectiveness.
  Type of personal data processed: user data. 
  Cookie expiration: 12 months
  Privacy Policy

   

• Cookie name: _gpi
  Google AdSense profiling cookies: this cookie supports conversion tracking and measurement of Google advertising campaigns.
  Type of personal data processed: user data.  
  Cookie expiration: 12 months 

  Privacy Policy

   

• Cookie name: __mggpc__
  Google AdSense profiling cookies: this cookie stores the user's advertising preferences for displaying relevant ads.
  Type of personal data processed: user data 
  Cookie expiration: 12 months

  Privacy Policy

   

• Cookie name: APC
  Cookie Google DoubleClick di profilazione: questo cookie memorizza le preferenze pubblicitarie dell'utente per la visualizzazione di annunci pertinenti.
  Cookie expiration: 6 mesi.
  Privacy Policy

   

• Cookie name: DSID
  Cookie Google DoubleClick di profilazione: questo cookie identifica l'utente loggato per collegare l'attività pubblicitaria all'account Google.
  Type of personal data processed: dati dell’utente. 
  Cookie expiration: 6 mesi.
  Privacy Policy

   

   

Google profiling cookies
 

• Cookie name: DV
  Google profiling cookies: this cookie collects aggregate information about the user's browser to carry out profiling activities and show relevant ads. 
  Type of personal data processed: user data. 
  Cookie expiration: 7 minutes.
  Privacy policy

• Cookie name: __mggpc__
  Google profiling cookies: this cookie supports the display of Google AdSense advertisements.
  Type of personal data processed: user data 
  Cookie expiration: 12 months
  Privacy policy
  
   

Cookie Booking.com
 

• Cookie name: _pxde, _pxvid, _px3, BJS, cors_js, _pxhd, bkngv
  Profiling Booking.com cookies: these cookies collect information about the user to analyses their habits and behaviours on the site.
  Type of personal data processed: IP address, device ID, pages viewed, browser type, browsing information, operating system, internet service provider, date and time, if the user came from an advertisement, the URL from which the user came, features used or activities that the user has performed on the site or apps.
  Cookie expiration: 1 year
  Privacy Policy
   

• Cookie name: lastSeen
  Profiling Booking.com cookies: these cookies track the last session on the site made by the user with a numerical code.
  Type of personal data processed: information about the last session.
  Cookie expiration: session
  Privacy Policy

   

• Cookie name: OptanonConsent, OptanonAlertBoxClosed
  Profiling Booking.com cookies: these cookies store information about the categories of cookies used by the site and whether visitors have given or withdrawn consent for the use of each category of cookies.
  Type of personal data processed: information on the categories of cookies used user consent.
  Cookie expiration: 6 months.
  Privacy Policy

GetYourGuide profiling cookies

• Cookie name: visitorId
  GetYourGuide profiling cookie: this cookie records an alphanumeric ID of the user who has clicked on a banner on the site.
  Type of personal data processed: alphanumeric identification code.
  Cookie expiration: 1 year.
  Privacy Policy

   

Disabling cookies.
 

All modern browsers make it possible for you to decide whether to block the installation of cookies on your computer or to cancel any that may already have been installed. This also applies to cookies installed following browsing on this site. In this case, failure/refusal to install cookies may render browsing the site difficult or even impossible.
Internet Explorer 
Google Chrome
Mozilla Firefox
Safari
 

Without prejudice to the above, the Data Controller hereby informs you that you can make use of Your Online Choices. Through this service, you can manage the tracking preferences of most advertising tools. The Data Controller recommends you use this resource in addition to the information provided in this document.
 

02. Data retention period
 

Your personal data collected and processed by browsing this site will be stored for the entire period of service delivery and thereafter immediately deleted. Cookies installed via the site are temporary and are deleted automatically at the expiration times shown in this statement. Data collected through services related to Google Analytics will be stored for a period of 14 months. I data collected through Facebook cookies will be stored in accordance with the provisions of its privacy policy. The data collected through Booking's cookies will be stored in accordance with the provisions of its privacy policy. The data collected through GetyourGuide's cookies will be stored in accordance with its privacy policy. The data collected through Snowplow's cookies will be stored in accordance with its privacy policy.

03. Methods of processing

Any personal data collected will be processed, retained and analysed using electronic tools and will be stored both in electronic format and in hard copy, organised into databases, and on any other appropriate type of support.
Specific security measures are implemented to prevent the loss, illegal or unfair use of the data, or unauthorised access to them.
The processing of your personal data carried out by Sisterscom does not involve any automated decision-making.

04. Disclosure of the personal data
The disclosure of the browsing data through technical cookies is a contractual obligation, needed to provide the requested service (browsing of the site): the user’s failure or refusal to disclose such data will result in the impossibility for Sisterscom to allow you to browse this site. 
The disclosure of data processed through analytical and profiling cookies is not compulsory: therefore, failure or refusal to disclose such data will not have any consequences for the user.
The installation of technical and analytical cookies may be blocked via the browser settings, but it could make the site, or some of its services, unusable.

05. Parties to which your personal data may be disclosed
None of your personal data collected by the Company will be disclosed indiscriminately, but may be communicated to those parties that have the right to access to your personal data as set for by the applicable law (which includes EU regulations), and to the Data Controller’s own personnel. Your data may also be communicated to companies, associations or professional firms that provide services and operations on behalf of the Data Controller, operating as Data processors, in particular, to provide ICT services (such as web hosting, cloud provider, etc.), to ensure compliance with legal obligations, and for every other organisational and/or administrative requirement that is necessary to provide the requested services.
The names of the parties operating as Data processors, to which your personal data may be disclosed, are shown in an up-to-date list that can be requested from Sisterscom (through the contact information indicated at Point 9).

06. Transfer of data outside the European Economic Area or to international organisations
Sisterscom will not transfer your personal data to countries situated outside the European Economic Area or to international organisations. In relation to third-party cookies, the data subject is invited to consult their respective privacy policies.  

07. Links to sites or services of third parties
This statement is provided solely for the processing operations carried out on your personal data through this site or the tools available on it and does not apply to other sites that you may browse through links, the managers of which operate as independent data controllers. Before accessing third-party services, please read their privacy statements carefully. 

08. Your rights as the Data Subject

In relation to the aforementioned processing operations carried out on your personal data, you are entitled to exercise at all times those rights set out by EU Regulation No. 679/2016 (GDPR), including, for example, the right to be informed, within 30 days from your request, as to:

• the origin of any personal data held that concern you;
• the purposes and methods of the processing operations;
• the logic applied in the case of processing operations carried out using electronic instruments; 
• the identification of the Data Controller, the Data Processors and the designated representative.
   

As the Data Subject, you have the right to obtain

• access to the data its updating, rectification or (where in your interest) completion; 
• the erasure, transformation into anonymous form or blocking of access to any data processed in breach of the law; 
• the limitation of the processing of those data that concern you, or to request the reduction of the purposes and/or methods for/with which your data are being processed to the Data Controller or the Data Processor.
   

You can also request a copy of your data in a standard format (the so-called “Right to data portability”).

As the Data Subject, you also have the right to object, at any time and at no cost, wholly or partially:
 

• for legitimate reasons, to processing of your personal data, even if the processing operations are still relevant to the purpose for which the data were collected in the first place; 
• to processing of your personal data carried out pursuant to Article 6, Paragraph 1 of the GDPR, Letters e. (“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”) or f. (“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”) including profiling on the basis of these provisions;
• to processing of your personal data for the purposes of sending advertising or direct sales material or for the completion of market research or commercial communications (direct marketing), including any relevant profiling operations.
   

You have the right to withdraw your consent for the processing operations when that consent is based on Article 6, Paragraph 1, Letter a. (when “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”), or by Article 9, Paragraph 2, Letter a. (when “the data subject has given explicit consent to the processing of those personal data for one or more specified purposes”) of EU Regulation No. 679/2016, at any time, without affecting the lawfulness of processing based on the consent before its withdrawal.
Should you consider the processing operations to have been carried out in breach of current legislation, you have the right to lodge a complaint with a Supervisory Authority, specifically in the Member State in which you habitually reside or work, or the Member State where the alleged breach has taken place. The Italian supervisory authority can be contacted using the contact data on its own website.
 

09. Data Controller – Contact data
The Data Controller is Sisterscom.com s.n.c, Via Piave, 102 - Verderio Inferior 23879 (LC) VAT no. 03248170163.
The Company can also be contacted at the email address info@sisterscom.com and to the PEC address: amministrazione@pec.sisterscom.com.
To exercise the Data Subject rights listed above, you may submit a request by writing to the following email address: privacy@aviontourism.com.