Information Notice pursuant to Art. 13 of Regulation (EU) 2016/679 –
WEB https://askostours.com/
version no. 1 of 15-04-2026
With this document (“Information Notice”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of the processing of your personal data and the rights granted to you by Regulation (EU) 2016/679 concerning the protection of natural persons with regard to the processing of personal data as well as the free movement of such data (“GDPR”). This Information Notice may be supplemented by the Data Controller where any additional services requested by you should involve further processing.
Askos srl Email: [email protected]; VAT / Tax Code: IT08407411217;
The processing activities carried out are aimed at acquiring the following personal data:
- Behavioral data: Browsing logs;
- Common data: Personal details;
- Economic data: Banking data.
The processing activities carried out are directed at the following categories of data subjects: Web users
1. CLIENTS – Performance of the Contract
The processing of personal data is necessary for the acquisition of information necessary for the conclusion and execution of the contract entered into with the Data Controller.
Lawfulness Condition of Processing: Performance of Contract – Art. 6, para. 1, lett. b. GDPR
Purpose of processing: 1) Execution and management of the contract entered into with the Data Controller.; 2) Acquisition of preliminary information for the conclusion of contracts.; 3) Communications sent and/or received to/from clients connected with the execution and/or conclusion of the contract, carried out by means of different communication tools such as telephone, email (electronic mail), instant messaging, paper mail..
Nature of provision: Mandatory – Failure to provide the data will make it impossible for the Data Controller to execute the contract.
Personal data retention period: Personal data used for the performance of the contract will be processed for the time necessary for the management of the relationship existing with the Data Controller. The information collected for the assessment of the conclusion of the contract, in case of failure to finalize it, will be deleted within 6 months.
Method of Processing: Processing is carried out, mainly, with IT tools.
2. CLIENTS – Legal Obligations
The processing of personal data is necessary for compliance with obligations provided for by laws, regulations and/or EU rules, by supervisory/control bodies or by other authorities entitled thereto.
Lawfulness Condition of Processing: Legal Obligation – Art. 6, para. 1, lett. c. GDPR
Purpose of processing: 1) Retention of accounting and administrative documents in paper form.; 2) Retention of accounting and administrative documents in digital form.; 3) Digital retention of issued/received invoices (electronic invoicing)..
Nature of provision: Mandatory – Failure to provide the data will make it impossible for the Data Controller to execute the contract.
Personal data retention period: Personal data will be processed for this purpose for the time necessary to comply with the legal obligations provided for by current legislation. In this regard, personal data will be retained for 10 years starting from the termination of the contract or, if later, from a binding decision issued by a competent authority, without prejudice to any retention obligations relating to particular categories of data, for longer periods of time, prescribed by the legal system.
Method of Processing: Processing is carried out, mainly, with IT tools.
3. WEBSITE – Browsing Data
To obtain anonymous statistical information on use, check the correct functioning of the site, ascertain liability in case of hypothetical cyber crimes to the detriment of the Data Controller.
Lawfulness Condition of Processing: Legitimate Interest – Art. 6, para. 1, lett. f. GDPR
Purpose of processing: 1) Data analysis to carry out the development and maintenance of the website.; 2) Ascertainment of liability in case of potential cyber crimes to the detriment of the site and/or the Data Subjects concerned by the processing.; 3) Anonymous statistical analyses on the use of the site..
Nature of provision: Mandatory – Failure to provide the data will make it impossible for the company to provide the web service supplied.
Personal data retention period: Data are retained for 30 days.
Method of Processing: Processing is carried out with IT tools.
4. WEBSITE – Requests from the Website
Requests made by data subjects through the website of the Data Controller.
Lawfulness Condition of Processing: Performance of Contract – Art. 6, para. 1, lett. b. GDPR
Purpose of processing: 1) Sending requests through the tools of the web platform..
Nature of provision: Optional – Failure to provide the data will make it impossible for the Data Controller to respond to the data subject’s requests.
Personal data retention period: Fulfilment of the request.
Method of Processing: Processing is carried out with IT tools.
5. IT systems management
Personal data are used, for the legitimate interest of the Data Controller and of the Data Subjects, for the management and security of technological infrastructures (IT).
Lawfulness Condition of Processing: Legitimate Interest – Art. 6, para. 1, lett. f. GDPR
Purpose of processing: 1) Management of IT systems, including infrastructure management, business continuity and IT security..
Nature of provision: Mandatory – Objection to the processing may make it impossible for the Data Controller to execute the contract with the Data Subject/Client.
Personal data retention period: Your personal information is retained for the duration of the contractual relationship and after the end of the contractual relationship for the period of time necessary to guarantee the exercise or defence of rights.
Method of Processing: Processing is carried out with IT tools.
Transfer of data outside the EU
Personal data are processed exclusively within the European Union.
Rights of the data subject – complaint to the supervisory authority
In relation to the processing described in this Information Notice, as a data subject you may, under the conditions provided for by the GDPR, exercise the rights set out in Articles 15 to 22 of the GDPR and, in particular, the following rights:
- right of access: the right to obtain confirmation as to whether or not personal data concerning You are being processed and, if so, obtain access to Your personal data;
- right to rectification: the right to obtain, without undue delay, the rectification of inaccurate personal data concerning You and/or the completion of incomplete personal data;
- right to erasure (right to be forgotten): the right to obtain, without undue delay, the erasure of personal data concerning You. The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defence of a legal claim;
- right to restriction of processing – Article 18 GDPR: the right to obtain restriction of processing when: a) the data subject contests the accuracy of the personal data; b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be restricted; c) the personal data are necessary for the data subject for the establishment, exercise or defence of a legal claim; d) the data subject has objected to the processing pending verification as to whether the legitimate grounds of the Data Controller override those of the data subject.
- right to restriction of processing: the right to obtain restriction of processing;
- right to data portability: the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning You and to provide them to another Controller;
- right to object: the right to object to the processing of personal data concerning You for reasons related to Your particular situation and in any case to the use of Your data for marketing purposes.
Where processing is based on consent, You may revoke it (withdrawal of consent). You may also revoke the consent given on any occasion and with the same ease with which it was provided, without affecting the lawfulness of the processing based on the consent given before the withdrawal.
You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces a legal effect or significantly affects you. However, we may adopt an automated decision if it is necessary for the signing or execution of a contract with us, if it is authorised by an Italian or European Union law, or if you have given your consent.
In any case, you have the possibility to contest the decision, express your opinions in this regard and request the intervention of a person who can review it.
You may, at any time, lodge a complaint with the Data Protection Authority: http://www.garanteprivacy.it.
The above rights may be exercised against the Data Controller by contacting the details described above.