Privacy Policy
Privacy notice on the processing of personal data pursuant to articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
Privacy
Privacy notice on the processing of personal data
This notice describes how the personal data of users who visit this website or use the airfield's services are processed.
Data Controller
Garda Lake Airfield S.S.D. a R.L. — Registered office: Località Altura 1, 37017 Lazise (VR) — Codice fiscale (Italian tax code)/P.IVA (VAT no.) 05137570239 — REA VR-473289 — PEC pec@pec.gardaairfield.it. For any request relating to personal data: info@gardalakeairfield.it.
Contact form
Name, email, telephone and the content of the message are processed in order to respond to the request. Legal basis: pre-contractual measures taken at the data subject's request (art. 6.1.b GDPR). Retention: for the time necessary to handle the request, after which the data are deleted.
PPR request
The pilot's data (name, email, telephone) and the aircraft's data (type and registration marks), together with the dates and times of arrival and departure and the number of persons on board, are processed for the management of the PPR authorisation and for the resulting operational and accounting obligations. Legal bases: performance of the contract (art. 6.1.b) and legal obligations (art. 6.1.c). The number of persons on board is a mere count: no personal details of passengers are collected.
Codice fiscale and invoicing
For pilots who are Italian citizens, the Italian tax code (codice fiscale) is required, as it is necessary for tax and accounting obligations and for the possible issuance of the invoice relating to the service. Legal basis: legal obligation (art. 6.1.c GDPR). The codice fiscale is not required of pilots who are not Italian citizens.
Payments
Payments are handled by Stripe Payments Europe Ltd, which acts as an independent data controller in accordance with its own privacy notice. The website does NOT store card data. Any transfers to the USA by Stripe take place on the basis of the EU-US Data Privacy Framework and standard contractual clauses (Chapter V GDPR).
Cookies and statistics
The site uses only technical cookies and does NOT use profiling cookies or third-party analytics tools that track users. The Google Maps map is loaded only after your consent, given through the cookie banner; the typefaces are hosted on our own domain (no connection to Google's servers). For statistics on visits coming from Google Search we use Google Search Console, which does not set cookies on your device and does not track your browsing on the site. Details in the Cookie Policy.
Video surveillance
The areas of the airfield are subject to video surveillance for the safety of persons and property, with signage on site. The footage is retained for the strictly necessary time. Legal basis: legitimate interest (art. 6.1.f).
Methods and place of processing
The data are processed using electronic tools and adequate security measures. The website's operational data (PPR orders and email sending) are stored on AWS infrastructure in the EU region of Milan (eu-south-1). Any transfers outside the EU (e.g. Stripe) take place on the basis of adequate safeguards pursuant to Chapter V of the GDPR (Data Privacy Framework and/or standard contractual clauses).
Retention
Contact forms: for the time necessary to respond to the request. Paid PPR requests and the related payments: 10 years, for accounting and tax obligations (art. 2220 c.c.). Requests not completed (failed payment, declined): retained for a limited period (as a rule 2 years) for the handling of disputes, then automatically deleted. Video surveillance footage: for the strictly necessary time.
Absence of profiling
The processing does NOT involve automated decision-making or profiling activities within the meaning of art. 22 of the GDPR.
Nature of the provision of data
The provision of the data marked as mandatory in the forms is necessary in order to process the request (to reply to a message or to manage the PPR and the related payment): failure to provide such data makes it impossible to deliver the service. The provision of the Codice fiscale (Italian tax code) is optional and necessary only for the issue of the invoice.
Rights of the data subject
Pursuant to arts. 15-22 of the GDPR, you may exercise at any time your rights of access, rectification, erasure, restriction, portability and objection by writing to info@gardalakeairfield.it. The controller responds without undue delay and in any case within one month. You may also lodge a complaint with the Garante, the Italian data protection authority (Garante per la protezione dei dati personali) (www.garanteprivacy.it).