Cinqueterreriviera, powered by Durlindana Travel Agency and Incoming Tour Operator, is particularly careful of protecting customers' on line privacy. We are aware of the importance generally attributed to one's own privacy and the protection of one's personal information.
This is why we think it essential to inform our customers that:
- When booking a holiday on our website, the customer is required to give some personal information, such as name, e-mail address, address, telephone number. This information allows us to process your booking and the sale of our services, and to keep the customers updated on the state of their bookings or to contact them in case of problems.
- The phone number might be necessary, if a courier is employed to hand-deliver the travel documents.
- Name and e-mail address are forwarded to the Durlindana snc Incoming Tour Operator, which manages credit card payments or bank transfer.

Management of credit card data.
Your credit card data, which are necessary in order to pay for our services, are never memorised by Cinqueterreriviera's information system, they are managed directly and exclusively by the information systems of Durlindana snc Incoming Tour Operator spa, the company managing credit card payments on behalf of Banca Sella spa (to be activated).



Management of personal data.
When registering it is possible to add further personal information to the required personal data, such as date of birth, members of the family, etc., in order to provide the perfect product for each of Cinqueterreriviera's customers
As you are an Interested Party, we inform you that you can write you personal data in the form provided herein. Such data shall be processed manually and electronically with the sole purpose of carrying out sales and booking services. Your data might be disclosed to Durlindana snc employees pursuant to Legislative Decree 196/2003, as well as to the suppliers of the services booked and purchased through our website. Pursuant to Legislative Decree 196/2003 (Art. 13).
The Interested Parties have the right to view the registers of the Authority for the Protection of Privacy (Garante), ask for information pertaining to their own personal data, request their cancellation, block, update, amendment and integration and oppose their management, by addressing such requests to the Appointed Data Management Company: Durlindana snc, via Picedi 18, 19125 La Spezia.
To this aim, we show below:
Notice pursuant to Legislative Decree 196/2003 on the protection of personal data.



Dear Customer,
we are pleased to inform you that pursuant to art. 13 of Legislative Decree, June 30, 2003 "Code in matter related to personal data protection", detailing the instructions for the protection of people and other subjects with reference to the treatment of their personal data, that all personal data you notified or that we otherwise acquired within the context of our activities, may be subject to data management under the protection of the abovementioned law and the secrecy obligations that inspire Cinqueterreriviera S.r.l.'s activities. Management of personal data means their collection, filing, organisation, maintenance, selection, extraction, comparison, use, correlation, block, notification, spreading, cancellation and distribution, as well as a combination of two or more of such activities. The Appointed Data Manager for www.cinqueterreriviera.com is Durlindana snc, via Picedi 18, 19125 La Spezia, in the person of its legal representative Paola Rossi. A prospect is available at Durlindana snc, via Picedi 18, 19125 La Spezia's offices, with details of the names of the company officials responsible for data processing, according to their respective sectors.

Data shall be processed for institutional activities connected with, or instrumental for, the activities of our Company, that is:
- to supply a Service or to carry out one or more contractually agreed transactions, including those mentioned in Art. 8 “Protection of Privacy” of the General Conditions of Sale, as well as the proposal for the extension of services to the additional services activated after the subscription of the Proposal of Agreement, if any, and to any Customer loyalty initiative;
- to fulfil any law obligations in general;
- for www.cinqueterreriviera.com internal operating and management requirements as regards its services, including, without limitation, www.cinqueterreriviera.com balance sheet audits .

As well as, after obtaining your assent,:
- to collect information on customers' tastes and preferences with regard to travels, and social and demographic information such as birth year, gender, nationality, mother tongue, marital status, family composition etc., in order to supply personalised services with the highest level of quality
- to supply information on those of our and our partners' services which we deem might be of interest to you
- to create aggregated statistics on sales, customers, traffic patterns and other information, and to distribute such statistics to third parties. The statistics shall not include any information that might lead to the identification of the single customers.

The law recognises a series of rights that you might want to consider carefully.
Among these are, synthetically:
- the right to access the registers of the Authority for the Protection of Privacy;
- the right to obtain information on your data;
- the right to obtain their cancellation, block, update, amendment and integration to receive a confirmation that such operations have been notified to the subjects that had received such data;
- the right to oppose, for legitimate reasons, any management of personal Data;
- the right to oppose the management of personal data for commercial or advertising or market research purposes.

Hereunder is the text of art. 7 of Legislative Decree 196/2003 on the rights of subjects interested in data management
Art. 7 of Legislative Decree 196/2003
Access rights to personal data and other rights
1. The interested party has the right to know whether or not personal information and data is present, even if not yet registered, as well as their communication in an understandable manner.
2. The interested party has the right to know the:
a.) Origin of personal information and data;
b.) Purpose and formality of its processing;
c.) Methods applied to this information if the data is processed with computers or other electronic tools;
d.) Personal details of the owner, its members, and its representatives, as according to article 5, comma 2;
e.) People or type of people to whom personal information and data can be communicated or informed of such, in a representative manner in the members' and employees' State territory.
3. The interested party has the right to know the:
a.) Updating, or rectification, of personal information and data if of interest;
b.) Cancellation or changing in an anonymous manner, or the blockage of processed data, in violation of the law, including when not necessary the keeping of data relating to aims for which the data was collected and then processed;
c.) Declaration that actions as seen in parts a.) and b.) were brought to the interested party's knowledge, and regarding their subject matter, to whom this data was communicated or spread, noting the case in which such fulfillment is found to be impossible and implies the use of disproportionate means with respect to given rights.
4. The interested party has the right to object to, partially or fully:
a.) The processing of personal data and information, for legitimate reasons, even if pertinent to data collection;
b.) The processing of personal data and information that has aims related to advertising or direct sales, or for the carrying out of market research or commercial announcements.