Privacy notice

“Vallée en Saveurs” shuttle booking service – Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

Data controller

Municipality of Pré-Saint-Didier, Piazza Vittorio Emanuele II no. 14, 11010 Pré-Saint-Didier (AO), Italy, tax code 00102900073 – email info@valleeensaveurs.it – certified e-mail of the Municipality (to be completed).

Data Protection Officer (DPO): contact details of the Municipality DPO (to be completed).

Data processor

The platform is run on behalf of the Municipality by Candifix di Alex Candiota (VAT no. 01229300072), appointed data processor under Article 28 GDPR. Servers and the email delivery service are located in the European Union.

What data we process

• for the booking: chosen day and departure, number of people, country of origin, preferred language, one contact (email or mobile number), request for an evening entry to the thermal baths;
• on the event day: the boarding record (date, time, shuttle, number of people);
• for people boarding without a booking or answering the questionnaire: only country, number of people, language and answers, anonymously;
• technical data: IP address in server logs, kept for no more than 14 days for security purposes.

We do not ask for your name, address or ID. We use no profiling cookies or third-party trackers: only technical cookies (chosen language and staff access).

Purposes and legal basis

• managing the booking, the pass, shuttle capacity and service messages (confirmation, reminder the day before, any changes): performance of a task carried out in the public interest by the Municipality for tourism promotion (Article 6(1)(e) GDPR);
• producing anonymous statistics on attendance and visitor origin, required for reporting to the Italian Ministry of Tourism on this initiative funded by FUNT 2026 (Article 6(1)(c) and (e) GDPR);
• sending, after the event, a thank-you email with a short, optional and anonymous questionnaire.

A contact is required to book.

Who can see the data

Authorised staff of the Municipality; Candifix, as data processor; drivers, who only see the pass code and the number of people. Server and email providers act as sub-processors in the European Union. Data are neither published nor transferred outside the European Union.

How long we keep it

Contact details (email and mobile number) are deleted by 31/01/2027, after the final report is closed. Attendance information is kept only in anonymous, aggregated form.

Your rights

You can request access to, correction or deletion of your data, restriction of processing, or object to it, by writing to the Municipality (Articles 15–22 GDPR). You can cancel your booking at any time from your pass page. You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

Last updated: October 2026. In case of doubt, the Italian version prevails.