Privacy Notice

This document describes the purposes and methods by which we manage your personal data. Our Company (XLbit srl, based in Trieste, Italy, VAT number 01147590325) through the Website (internet portal bearing the YesAlps trademark and reachable through the address yesalps.com, as well as through other addresses directly connected to it and with the YesAlps trademark), presents tourist information on Alpine locations inserted by different Businesses (accommodation facilities, tourist organizations and other commercial activities). On the Website you will find information that helps you plan your holidays and choose among the accommodations presented based on data such as holiday period, location, type of preferred facility, and other criteria. Through the Website, you can contact accommodation facilities and other commercial activities to receive information and offers, therefore transferring some of your data to the Businesses you choose to contact.
This Privacy Notice is valid for any type of information collected by our Company through the Website, by telephone, computer, in writing, or through the emails sent to us or, again, through online platforms such as our social media.
Occasionally we may need to change this Privacy Notice; in the event of significant changes, we will highlight them on the Website and / or let you know by other means, such as via email, so that you can review them.
We also invite you to read the Cookies Information which clarifies how the Website use cookies.

What kind of data do we collect?

In order to allow you to plan your holiday better and to organize your stay at the accommodation best in line with your needs, and to respond to your enquiries for information, we need to manage some data such as, for example: your name and surname, contact details to contact you (for example email and telephone number), the envisaged dates for your stay, the location where you want to go on vacation, type of accommodation desired and your price range.
This information is collected when filling in forms on the Website, based on the content chosen during navigation, and if you contact our customer service.
We may also receive information about you through third parties such as, for example, the Businesses contacted for your stay.
In relation to the purposes shown in this Notice, your data may be subject to processing both electronically and on paper.
The sending of the requested information and the booking of your holiday will be overseen directly by the Businesses you contacted. This information may be sent to you by the Businesses through our platform and therefore be part of the data we manage.
Finally, we would like to point out that, if the data you entered also concerns other people, you will need to have them read this information beforehand.
The processing of data of minors under the age of sixteen can only take place with the consent of their parents or legal guardian. In the absence of such consent, if we receive data relating to a minor, we reserve the right to remove it. Therefore, when using our services, we encourage you not to enter data relating to children under the age of sixteen; in any case, their data can only be used in limited cases such as, for example, for communications to be made to the public authorities.

Why do we collect and process your data?

We collect your data to offer you a personalised navigation, to show you the Businesses most in line with your preferences, to get in touch with the Businesses that you decide to contact from time to time, to allow you to publish opinions on the Businesses, to offer you the best possible service, and to inform you about promotions, offers and tourist initiatives.

Purposes of collecting and processing your data:

Navigation and use of the Website: while browsing we use information such as holiday dates, locations, types of preferred facilities, etc. to present to you the accommodation facilities closest to your needs and the availability and prices of holiday accommodation in a targeted manner.

Sending enquiries for information / reservations: when you contact a Business, we collect the data necessary to process your enquiries.

Customer care and service communications: the use of some functions of the Website (for example contacting accommodation facilities, the publishing of a review) requires the sending of communications that are used to complete these actions to obtain the best possible results (for example confirming registration, sending access data, etc.). It may also be necessary to contact you for service needs or technical issues.

Marketing and newsletters: if you have provided authorisation, we will use your information to send you newsletters, perhaps also personalised, relating to accommodation facilities, holiday packages, tourist information, etc.
At any time, you can unsubscribe from the newsletter quickly and easily: just click on the appropriate link in each newsletter, through your personal area or by contacting us and asking us to do so. The updates of your data and preferences may take a few days, therefore, in this brief period, you may continue to receive our communications.

Reviews on Businesses: on the Website you can leave a comment and / or an opinion by filling out a specific form; by entering this review you agree to make it visible on the Website, together with the data you decide to enter (for example "signature" of the review, nationality, holiday period).

Profiling: your data can be used to analyse your choices, your browsing experiences, and your interest in communications, in order to provide you a more personalised service in line with your preferences, exclusively in relation to the Website. Please note that on your visits to the Website, we may collect information relating to the devices in use and the networks through which you connect when you use our services. Thus, by way of example, we may collect the following information: IP address, login information, type and version of your browser, types and versions of browser plug-ins, operating system and platform, information about the visit including the clickstream URL, the structures viewed or searched and the duration of visits to certain pages. We collect this information by using various technologies, including cookies. For more information on this, please read our Cookies Information.

Legal purposes: we may need to use your information to provide the communications required by law to the public authorities, to manage and resolve any legal disputes that may arise between us, investigations by public authorities, compliance checks, and to enforce the terms of use of our services.
We specify that the data thus described, following art. 6 of EU regulation 2016/679 may be collected, processed, and stored by us based on the following principles:

1. in order to follow up on our services and to fulfil the legal obligations to which we are subject to;
2. where you have given your consent, in relation to marketing and / or profiling purposes, unless you, at any time by contacting us at the addresses shown in this Privacy Notice, decide to withdraw your consent;
3. in order to pursue our legitimate interests.

Communication of your data to third parties

The data you provide to us may be processed by subjects or categories of subjects acting as Data Processors following art. 28 of the Regulation or who are authorised to process data following art. 29 of the Regulation.
In any case, your data will be used to provide the requested service.

We do not sell and / or lease, and we will not sell or lease your data to third parties.
To manage your requests for information and to be able to provide the service offered by the Website, we will need to communicate some of your data to the third parties involved. For example, we must forward your enquiries, with the data entered, to the Businesses you want to contact so that they can send you the desired information. In any case, you are always informed about which Businesses you are about to contact, and you can choose in advance whether to do so or not.
The Website, as defined above, use different domains (for example yesalps.com) connected to each other and bearing the same YesAlps trademark. Registration on the Website, consent to data processing, any preferences expressed, etc. they are always to be understood as referring to our Company, regardless of the starting domain.
We may have to share personal data where required by law or if absolutely necessary for the detection, prevention or conduct of legal proceedings relating to fraud or crime.
We may also need to share personal data with competent authorities to protect and defend our rights or assets.

Without prejudice to the above, we cannot be responsible for the processing of your data by third parties contacted by you through the Website; for this reason, we encourage you to refer to their privacy notice.
We point out that your data may be accessible to external professional service providers such as, for example, IT consultants in the event of maintenance / updating of our IT systems; in this case, we will make sure that the aforementioned consultants maintain to keep the data confidential and to treat it appropriately.
Finally, we point out that we can provide third parties with aggregated and anonymous information and analytical data of our customers, provided that, before doing so, we will make sure that such data cannot be traced back to any specific customer.

Your information collected and non-European countries

Our company is based in Italy. For the processing of your data, we may use computer systems (for example mail providers, data storage systems) whose server may be located outside the European Union. In this case, our Company undertakes to ensure compliance with the provisions of EU Regulation 2016/679 regarding the protection of personal data. In particular, in the event of data transfer to a non-European country, we will ensure that the transfer takes place following this information and that it is governed by standard contractual clauses that guarantee adequate protection for the interested parties.

How do we manage data security?

It is in our interests to ensure the security of the data collected is following the current data protection regulations. To this end, we have implemented a series of internal procedures and use specific technical and IT security systems.
In addition to this, we have provided and implemented security procedures and physical-technical limitations in order to prevent the access and use of personal data contained in our servers by unauthorized parties.
Furthermore, we have implemented a system that allows only authorized personnel to access the data necessary from time to time for the performance of their duties. We make sure that any third party to whom we should communicate your data to is committed to maintain the utmost confidentiality in this regard, and to use it exclusively for the purposes shown in this Privacy notice.

How long will we keep your data?

Your data will be kept for a maximum of 2 years from the last use of the Website; this is to allow you to find in a reserved area your enquiries, reviews, and any preferences on the use of our services in order to facilitate you each time with the use of your data. Your account will be available as long as your data is kept. At any time, you can choose to close your account and your data will consequently be removed.
Furthermore, if reasonably necessary or if required to comply with legal or regulatory requirements, manage disputes, prevent fraudulent behaviour and abuse, we may retain some of your personal information even after the closure of the account for the duration required by applicable laws. We also specify that, once the terms shown above have elapsed, the contents generated by users (for example comments and evaluations), will be made anonymous, but will remain available on the Website and / or on our social networks.

The rights of the interested party in relation to the data

There are many rights you have in relation to the personal data provided from time to time. First of all, you always have the right to request confirmation of the existence or otherwise of personal data that our Company has collected with indications of the purposes and methods of processing.
It is possible to request its correction or cancellation, limit the processing and, where applicable, revoke the consent given.
Without prejudice to the above, we must nevertheless specify that, where the communication of data and its processing complies with a legal obligation, or is necessary for the conclusion of a contract (for example negotiations, payment, prior acceptance), the request for cancellation of data, the opposition to the related processing and / or the revocation of the consent given, could prevent us from concluding or to give regular execution to the contract or to other services; the request for cancellation of the same and / or your opposition to the related processing, could prevent us from completing the requested service.
Finally, it is possible to lodge a complaint following art. 13 of EU Regulation 679/2016 to the supervisory authorities.
If you intend to exercise any of the rights described above, if you have complaints or questions, you can contact us at info@yesalps.com.

Who is the owner of the personal data?

The Data Controller is XLbit srl, a company incorporated under Italian law and is based in Trieste, Italy.
For any information or request regarding this information, you can contact us at the following address info@yesalps.com.