Privacy

Privacy Notice under Articles 13 and 14 of the GDPR (EU) 2016/679
Last updated: 21 September 2025

Dear User,
pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), and with regard to the personal data processed by Kiwynet srls, we provide the following information.

1. Purposes of Processing

• to enable access to and use of the application/service;
• to record and manage activities carried out (e.g., visits, scores, participation diplomas);
• to perform statistical processing in anonymous/aggregated form;
• to comply with legal obligations or orders from public authorities.

2. Legal Basis

• performance of a contract or pre-contractual measures at the user’s request (Art. 6(1)(b) GDPR);
• the user’s consent, where required (Art. 6(1)(a) GDPR).

3. Processing Methods
Data are processed using paper, electronic and telematic tools, in compliance with GDPR security measures. Data are stored in a company database and may be processed in aggregated and anonymous form for statistical purposes.

4. Data Provision
Providing the data for the purposes set out in section 1 is mandatory; refusal prevents access to the application and the related benefits.

5. Data Communication and Disclosure
Data may be communicated to:

• public bodies or private entities operating in tourism promotion and development for the Aeolian Islands, solely for the purposes indicated above;
• IT service providers strictly connected to system management.

Data may be disclosed only in anonymous/aggregated form (e.g., statistics, reports).

6. Retention Period
Personal data will be retained for the time strictly necessary to provide the service and, in any case, no longer than 24 months from the user’s last activity, unless longer retention is required by law or for the establishment, exercise or defense of legal claims.

7. Data Transfers outside the EU/EEA
Data will not be transferred outside the European Union. Should it become necessary, for technical reasons, to use service providers located outside the EU/EEA, any transfer will be carried out in accordance with Articles 44 et seq. GDPR, with appropriate safeguards in place.

8. Data Controller
Kiwynet srls – Via Bartolomeo Boschetti, 2 – 36100 Vicenza (VI), Italy – Tel. +39 0444 362161 – Email: informa@kiwynet.com.

9. Data Subject Rights
At any time, you may exercise the rights provided by Articles 15–22 GDPR, including:

• to obtain confirmation as to whether or not personal data concerning you are being processed;
• to access your data and information on purposes, categories, recipients and retention period;
• to request rectification, erasure or restriction of processing;
• to obtain data portability;
• to object to processing, including profiling;
• to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
• to lodge a complaint with the competent Supervisory Authority.

Requests may be sent in writing to the Controller at the postal address indicated above or by email: informa@kiwynet.com.