Kframe Interactive S.A. swiss company (No. IVA: CHE-114.900.703 IVA-No Reg.CH-501.3.012.952-5 B.V.Via Penate, 16 - CH-6850 Mendrisio Switzerland) acknowledges the importance of protecting the privacy and rights of Users using its Website and Service. Internet is potentially a very powerful tool for the circulation of personal data; Kframe is committed to complying with the regulations of personal data protection and security in order to guarantee the Users' safe, controlled and confidential netsurfing. This Privacy Statement may be amended in the future to ensure ongoing compliance with all applicable regulations in the event of their amendment or update. Users are invited to read carefully the rules applied by the company to collect and process personal data and to continue to provide a satisfactory service.
This Privacy Statement, which is in accordance with personal data protection rules, describes the methods applied by the company to manage and process the personal data of:
(i) Users who consult and use the Website, and
(ii) Users who use the Service. Users are required to supply accurate, correct and updated personal data in order to establish and manage their contractual relationship with the Data Controller and to duly purchase the selected tourist service. Users acknowledge that the supply of inaccurate, incorrect and not updated personal data prevents the Data Controller from supplying its services. Pursuant to the Federal Law of 19 June 1992 on Data Protection (LPD) and to Article 45 of the Federal Insurance Supervision Law (LSA), Users are hereby informed that their personal data is stored and processed by Kframe according to the methods and for the purposes listed below, in accordance with the methods and purposes allowed by LPD and LSA.
The Data Controllers are Kframe SA (hereinafter, "Kframe" or "Data Controller") and the companies that are controlled thereby or affiliated.
Users' personal data will be processed by hand or by using electronic means that are such as to ensure, in relation to the purposes for which such data is communicated and collected, data security and confidentiality, as well as to prevent unauthorized access to such data, for the time strictly necessary to achieve the purposes of its collection.
Data will be processed at the legal and operational headquarters of the Data Controllers, and at the offices of the parties to which such data may be communicated.
Apart from the above specifications on navigation data, Users' personal data will be used for the following purposes:
A) for data collection, storage and processing for the purposes of establishing and managing, in operational and administrative terms, the contractual relationship connected to the supply of the Service
B) to send communications by email, phone or SMS on the contractual relationship, including communications relating to the good progress thereof;
C) to comply with statutory or regulatory obligations;
D) for data collection, storage and processing to carry out anonymous and/or aggregate statistical analyses;
E) to send by email, except where denied by the User, Kframe advertising material on products or services that are similar or related to the services or products offered on the Website;
F) subject to letter E) above and only upon the User's prior express consent, to send by e-mail, telephone, mail, SMS or MMS the best travel/leisure deals and deals for other services supplied by the Data Controllers themselves or their commercial Partners operating in Tourism, Leisure, High Tech, Fashion, Furniture, Consumer products, Food & Beverage, Finance, Banking, Insurance, Energy, Environment, Communications, Media, Entertainment, Real Estate, Pharmaceuticals, Automobiles, Clothing and Textiles, Training, Energy, Publishing, ICT, Retail, Sports, Telecommunications, and Services in general.
Should the User refuse to supply his personal data, he may not obtain the services required in relation to the purposes set out in points A) and B) of Article 7.7; in addition, the Data Controller may be prevented from supplying the Service correctly and from complying with its contractual obligations set out in the terms and conditions. Data processing for the purposes set out in points A), B), C) D) and E) of Article 7.7 does not require the consent of the person concerned. The supply of personal data for the purposes set out in point F) of Article 7.7 is optional. Data processing for the purposes set out in point F) of Article 7.7 requires the consent of the person concerned. The User's refusal to supply his data or to give his consent to these purposes signifies that, subject to letter E), the Data Controllers will be unable to send their deals referred to in letter F) of Article 7.7 to the User.
The Data Controller will make sure that all personal data supplied thereto is not disclosed and is processed in such a way as to guarantee its security and confidentiality, as well as to prevent unauthorized access thereto. All personal data and information provided by Users may be communicated, for the purposes set out above, to the following categories of parties: - the company's employees and/or collaborators who assist and advise the Data Controller on Administration, Products, Legal Affairs, Customer Care, Information Systems, as well as those in charge of maintaining the company's network and hardware/software equipment; - airlines, hotels, car hire firms, insurance companies, Tour Operators and all other parties to whom data communication is necessary for contract performance. Please note that airline companies are required, in accordance with the regulations introduced in the US and in other countries, to allow the customs and border authorities to have access to flight passenger data.
Therefore, information on Users and their travelling collected by Kframe may be communicated thereby to the competent authorities of the countries touched by Users' travel itineraries, if so required by industry standards. - parties whose right to access data is recognized by statutory provisions or by orders issued by the competent authorities; - parties that are delegated and/or appointed by the Data Controllers to carry out activities related to Service supply. The list of the names of the parties to whom Users' personal data may be communicated is available at Kframe, by writing to email@example.com
By sending a written request to the Data Controller, the User may:
(i) obtain from the Data Controller confirmation of the existence of his personal data;
(ii) obtain information about the source of his data, the purposes and methods of data processing and the logics applied where data is processed by electronic means;
(iii) obtain the details of the Data Controller and of the Data Processors, if any;
(iv) obtain information about the parties or categories of parties to whom his personal data may be communicated or who may become aware thereof in their capacity of designated representative in the Country, data processors or people in charge thereof;
(v) obtain the cancellation, transformation into an anonymous form or blocking of data processed against the law, and the updating, correction or, if interested therein, integration of his data and
(vi) obtain a certification that the operations referred to in point (v) above have been brought to the knowledge, even as regards their content, of those to whom such data has been communicated or spread, unless this proves impossible or involves a manifestly disproportionate use of means when compared to the right being protected;
(vii) object to data processing, in whole or in part, for legitimate reasons;
(viii) object to data processing for the sending of advertising or direct sales material or for market surveys or commercial communications. The above requests must be sent to Kframe to address firstname.lastname@example.org. By sending an express written request by e-mail, the User may also obtain the correction of any incorrect or inaccurate personal data or obtain its cancellation to the extent permitted by law. In order not to receive any further commercial or promotional offers from the Data Controllers, the User, in addition to exercising the above rights, may also follow the simple procedure activated by the link "unsubscription" that is available in all commercial communications sent by the Data Controllers.