Privacy Policy of www.ticino.ch

Owner and Data Controller

Agenzia turistica ticinese SA
Via Ghiringhelli 7
6500 Bellinzona
Switzerland

Owner contact email: web@ticino.ch

Types of Data collected

Among the types of Personal Data that this Website collects, by itself or through third parties, there are: Trackers; Usage Data; Universally unique identifier (UUID); email address; first name; last name; device information; Data communicated while using the service; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example); country; number of Users; city; session statistics; browser information.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection.
Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using this Website.
Unless specified otherwise, all Data requested by this Website is mandatory and failure to provide this Data may make it impossible for this Website to provide its services. In cases where this Website specifically states that some Data is not mandatory, Users are free not to communicate this Data without consequences to the availability or the functioning of the Service.
Users who are uncertain about which Personal Data is mandatory are welcome to contact the Owner.
Any use of Cookies – or of other tracking tools — by this Website or by the owners of third-party services used by this Website serves the purpose of providing the Service required by the User, in addition to any other purposes described in the present document and in the Cookie Policy.

Users are responsible for any third-party Personal Data obtained, published or shared through this Website.

Mode and place of processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.
The Data processing is carried out using computers and/or IT enabled tools, following organizational procedures and modes strictly related to the purposes indicated. In addition to the Owner, in some cases, the Data may be accessible to certain types of persons in charge, involved with the operation of this Website (administration, sales, marketing, legal, system administration) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communications agencies) appointed, if necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Place

The Data is processed at the Owner's operating offices and in any other places where the parties involved in the processing are located.

Depending on the User's location, data transfers may involve transferring the User's Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details about the processing of Personal Data.

Retention time

Unless specified otherwise in this document, Personal Data shall be processed and stored for as long as required by the purpose they have been collected for and may be retained for longer due to applicable legal obligation or based on the Users’ consent.

The purposes of processing

The Data concerning the User is collected to allow the Owner to provide its Service, comply with its legal obligations, respond to enforcement requests, protect its rights and interests (or those of its Users or third parties), detect any malicious or fraudulent activity, as well as the following: Access to third party accounts, Advertising, Traffic optimization and distribution, Registration and authentication, Tag Management, Contacting the User, Infrastructure monitoring, Displaying content from external platforms, Interaction with external social networks and platforms, Managing support and contact requests, User database management, Remarketing and behavioral targeting, Analytics and Managing data collection and online surveys.

For specific information about the Personal Data used for each purpose, the User may refer to the section “Detailed information on the processing of Personal Data”.

Facebook permissions asked by this Website

This Website may ask for some Facebook permissions allowing it to perform actions with the User's Facebook account and to retrieve information, including Personal Data, from it. This service allows this Website to connect with the User's account on the Facebook social network, provided by Facebook Inc.

For more information about the following permissions, refer to the Facebook permissions documentation and to the Facebook privacy policy.

The permissions asked are the following:

Basic information

By default, this includes certain User’s Data such as id, name, picture, gender, and their locale. Certain connections of the User, such as the Friends, are also available. If the User has made more of their Data public, more information will be available.

Email

Provides access to the User's primary email address.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

• Access to third party accounts

  This type of service allows this Website to access Data from your account on a third party service and perform actions with it.
  These services are not activated automatically, but require explicit authorization by the User.

  Facebook account access (this Website)

  This service allows this Website to connect with the User's account on the Facebook social network, provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing.

  Permissions asked: Email.

  Place of processing: US – Privacy Policy.

• Advertising

  This type of service allows User Data to be utilized for advertising communication purposes. These communications are displayed in the form of banners and other advertisements on this Website, possibly based on User interests.
  This does not mean that all Personal Data are used for this purpose. Information and conditions of use are shown below.
  Some of the services listed below may use Trackers to identify Users or they may use the behavioral retargeting technique, i.e. displaying ads tailored to the User’s interests and behavior, including those detected outside this Website. For more information, please check the privacy policies of the relevant services.
  Services of this kind usually offer the possibility to opt out of such tracking. In addition to any opt-out feature offered by any of the services below, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section "How to opt-out of interest-based advertising" in this document.

  AddThis (Addthis Inc.)

  AddThis is an advertising and behavioral targeting service provided by Oracle Corporation that displays a widget that allows interaction with social networks and external platforms as well as sharing the contents of this Website and connects the activity of this Website with the Oracle advertising network. Users can opt out of Oracle's use of Trackers for ads personalization by visiting this opt-out page.

  Personal Data processed: Trackers; Universally unique identifier (UUID); Usage Data.

  Place of processing: US – Privacy Policy.

  Google Ad Manager (Google Inc.)

  Google Ad Manager is an advertising service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows the Owner to run advertising campaigns in conjunction with external advertising networks that the Owner, unless otherwise specified in this document, has no direct relationship with.
  In order to understand Google's use of Data, consult Google's partner policy.
  This service uses the “DoubleClick” Cookie, which tracks use of this Website and User behavior concerning ads, products and services offered.  

  Users may decide to disable all the DoubleClick Cookies by going to: Google Ad Settings.

  Personal Data processed: Cookies; Usage Data.

  Place of processing: US – Privacy Policy.

  Google Ads conversion tracking (Google Inc.)

  Google Ads conversion tracking is an analytics service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that connects data from the Google Ads advertising network with actions performed on this Website.

  Personal Data processed: Trackers; Usage Data.

  Place of processing: US – Privacy Policy.

  Pinterest Conversion Tag (Pinterest, Inc.)

  Pinterest Conversion Tag is an analytics service provided by Pinterest, Inc. that connects data from the Pinterest advertising network with actions performed on this Website.

  Users may opt out of behavioral advertising features through their device settings, their Pinterest personalization settings or by visiting the AdChoices opt-out page.

  Personal Data processed: device information; Trackers; Usage Data.

  Place of processing: United States – Privacy Policy – Opt out.

  Meta ads conversion tracking (Meta pixel) (Meta Platforms Ireland Limited)

  Meta ads conversion tracking (Meta pixel) is an analytics service provided by Meta Platforms Ireland Limited that connects data from the Meta Audience Network with actions performed on this Website. The Meta pixel tracks conversions that can be attributed to ads on Facebook, Instagram and Meta Audience Network.

  Personal Data processed: Trackers; Usage Data.

  Place of processing: Ireland – Privacy Policy – Opt out.

• Analytics

  The services contained in this section enable the Owner to monitor and analyze web traffic and can be used to keep track of User behavior.

  Google Analytics Demographics and Interests reports (Google Ireland Limited)

  Google Analytics Demographics and Interests reports is a Google Advertising Reporting feature that makes available demographic and interests Data inside Google Analytics for this Website (demographics means age and gender Data).

  Users can opt out of Google's use of cookies by visiting Google's Ads Settings.

  Personal Data processed: Tracker; unique device identifiers for advertising (Google Advertiser ID or IDFA, for example).

  Place of processing: Ireland – Privacy Policy – Opt Out.

  YouTube Analytics and Reporting API (Google Ireland Limited)

  YouTube Analytics and Reporting API is a video content analytics service provided by Google Ireland Limited.

  Through this Service, this Website may collect Data directly or indirectly on or from Users’ devices, including by making use of trackers. Users may restrict such access to their Data via the security settings page provided by Google. Users may ask the Owner for further information about these privacy settings at any time through the contact details provided in this document.

  Data collected through the Service may also be used to help third parties deliver interest-based advertising. Users can opt out of third-party interest-based advertising through their device settings or by visiting the Network Advertising Initiative opt-out page.

  Personal Data processed: Data communicated while using the service.

  Place of processing: Ireland – Privacy Policy – Opt out.

  Google Analytics 4 (Google Ireland Limited)

  Google Analytics 4 is a web analysis service provided by Google Ireland Limited (“Google”). Google utilizes the Data collected to track and examine the use of this Website, to prepare reports on its activities and share them with other Google services.
  Google may use the Data collected to contextualize and personalize the ads of its own advertising network.
  In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google’s official documentation.

  In order to understand Google's use of Data, consult Google's partner policy.

  Personal Data processed: browser information; city; device information; number of Users; session statistics; Trackers; Usage Data.

  Place of processing: Ireland – Privacy Policy – Opt Out.

• Contacting the User

  Mailing list or newsletter (this Website)

  By registering on the mailing list or for the newsletter, the User’s email address will be added to the contact list of those who may receive email messages containing information of commercial or promotional nature concerning this Website. Your email address might also be added to this list as a result of signing up to this Website or after making a purchase.

  Personal Data processed: email address; first name; last name.

  Contact form (this Website)

  By filling in the contact form with their Data, the User authorizes this Website to use these details to reply to requests for information, quotes or any other kind of request as indicated by the form’s header.

  Personal Data processed: email address; first name; last name.

• Displaying content from external platforms

  This type of service allows you to view content hosted on external platforms directly from the pages of this Website and interact with them.
  This type of service might still collect web traffic data for the pages where the service is installed, even when Users do not use it.

  Vimeo video (Vimeo, LLC)

  Vimeo is a video content visualization service provided by Vimeo, LLC that allows this Website to incorporate content of this kind on its pages.

  Personal Data processed: Cookies; Usage Data.

  Place of processing: US – Privacy Policy.

  Google Maps widget (Google Inc.)

  Google Maps is a maps visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this Website to incorporate content of this kind on its pages.

  Personal Data processed: Cookies; Usage Data.

  Place of processing: US – Privacy Policy.

  Instagram widget (Instagram, Inc.)

  Instagram is an image visualization service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, that allows this Website to incorporate content of this kind on its pages.

  Personal Data processed: Cookies; Usage Data.

  Place of processing: US – Privacy Policy.

  YouTube video widget (Google Inc.)

  YouTube is a video content visualization service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, that allows this Website to incorporate content of this kind on its pages.

  Personal Data processed: Cookies; Usage Data.

  Place of processing: US – Privacy Policy.

  Google Fonts (Google Ireland Limited)

  Google Fonts is a typeface visualization service provided by Google Ireland Limited that allows this Website to incorporate content of this kind on its pages.

  Personal Data processed: Trackers; Usage Data.

  Place of processing: Ireland – Privacy Policy.

  Mapbox widget (Mapbox Inc.)

  Mapbox is a maps visualization service provided by Mapbox Inc. that allows this Website to incorporate content of this kind on its pages.

  Personal Data processed: Tracker; Usage Data.

  Place of processing: United States – Privacy Policy.

• Infrastructure monitoring

  This type of service allows this Website to monitor the use and behavior of its components so its performance, operation, maintenance and troubleshooting can be improved.
  Which Personal Data are processed depends on the characteristics and mode of implementation of these services, whose function is to filter the activities of this Website.

  New Relic (New Relic)

  New Relic is a monitoring service provided by New Relic Inc.
  The way New Relic is integrated means that it filters all traffic of this Website, i.e., communication between the Application and the User's browser or device, while also allowing analytical data on this Website to be collected.

  Personal Data processed: Cookies; Usage Data; various types of Data as specified in the privacy policy of the service.

  Place of processing: US – Privacy Policy.

  Uptime Robot (Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.)

  Uptime Robot is a monitoring service provided by Buzpark Bilisim Tarim Urunleri Sanayi Tic. Ltd. Sti.

  Personal Data processed: various types of Data as specified in the privacy policy of the service.

  Place of processing: Turkey – Privacy Policy.

• Interaction with external social networks and platforms

  This type of service allows interaction with social networks or other external platforms directly from the pages of this Website.
  The interaction and information obtained through this Website are always subject to the User’s privacy settings for each social network.
  This type of service might still collect traffic data for the pages where the service is installed, even when Users do not use it.
  It is recommended to log out from the respective services in order to make sure that the processed data on this Website isn’t being connected back to the User’s profile.

  Facebook Like button and social widgets (Facebook, Inc.)

  The Facebook Like button and social widgets are services allowing interaction with the Facebook social network provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing,

  Personal Data processed: Cookies; Usage Data.

  Place of processing: US – Privacy Policy.

  Twitter Tweet button and social widgets (X Corp.)

  The Twitter Tweet button and social widgets are services allowing interaction with the Twitter social network provided by Twitter, Inc.

  Personal Data processed: Cookies; Usage Data.

  Place of processing: United States – Privacy Policy.

  Pinterest “Pin it” button and social widgets (Pinterest)

  The Pinterest “Pin it” button and social widgets are services allowing interaction with the Pinterest platform provided by Pinterest Inc.

  Personal Data processed: Cookies; Usage Data.

  Place of processing: US – Privacy Policy.

• Managing data collection and online surveys

  This type of service allows this Website to manage the creation, deployment, administration, distribution and analysis of online forms and surveys in order to collect, save and reuse Data from any responding Users.
  The Personal Data collected depend on the information asked and provided by the Users in the corresponding online form.

  These services may be integrated with a wide range of third-party services to enable the Owner to take subsequent steps with the Data processed - e.g. managing contacts, sending messages, analytics, advertising and payment processing.

  JotForm (JotForm Inc.)

  JotForm is a form builder and data collection platform provided by JotForm Inc.

  Personal Data processed: country; email address; first name; last name; Usage Data.

  Place of processing: Germany – Privacy Policy.

• Managing support and contact requests

  This type of service allows this Website to manage support and contact requests received via email or by other means, such as the contact form.
  The Personal Data processed depend on the information provided by the User in the messages and the means used for communication (e.g. email address).

  Salesforce Service Cloud (Salesforce.com, Inc.)

  Salesforce Service Cloud is a support and contact request management service provided by salesforce.com, inc.

  Personal Data processed: Data communicated while using the service; Trackers; various types of Data as specified in the privacy policy of the service.

  Place of processing: United States – Privacy Policy.

• Registration and authentication

  By registering or authenticating, Users allow this Website to identify them and give them access to dedicated services.
  Depending on what is described below, third parties may provide registration and authentication services. In this case, this Website will be able to access some Data, stored by these third-party services, for registration or identification purposes.
  Some of the services listed below may also collect Personal Data for targeting and profiling purposes; to find out more, please refer to the description of each service.

  Facebook Authentication (Facebook, Inc.)

  Facebook Authentication is a registration and authentication service provided by Meta Platforms, Inc. or by Meta Platforms Ireland Limited, depending on how the Owner manages the Data processing, and is connected to the Facebook social network.

  Personal Data processed: Trackers; various types of Data as specified in the privacy policy of the service.

  Place of processing: US – Privacy Policy.

  Google OAuth (Google Inc.)

  Google OAuth is a registration and authentication service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing, and is connected to the Google network.

  Personal Data processed: various types of Data as specified in the privacy policy of the service.

  Place of processing: US – Privacy Policy.

• Remarketing and behavioral targeting

  This type of service allows this Website and its partners to inform, optimize and serve advertising based on past use of this Website by the User.
  This activity is facilitated by tracking Usage Data and by using Trackers to collect information which is then transferred to the partners that manage the remarketing and behavioral targeting activity.
  Some services offer a remarketing option based on email address lists.
  In addition to any opt-out feature provided by any of the services below, Users may opt out by visiting the Network Advertising Initiative opt-out page.

  Users may also opt-out of certain advertising features through applicable device settings, such as the device advertising settings for mobile phones or ads settings in general.

  Google Signals (Google Ireland Limited)

  This Website uses Google Signals, a feature of Google Analytics, which will associate the visitation information that it collects from this Website with Google information from accounts of signed-in Google-account users who have consented to this association for the purpose of ads personalization. This Google information may include User location, search history, YouTube history and Data from sites that partner with Google – and is used to provide aggregated and anonymized insights into Users' cross device behaviors.

  If a User falls under the described association, they may access and/or delete such Data via My Activity provided by Google.

  Personal Data processed: Tracker; Usage Data.

  Place of processing: Ireland – Privacy Policy – Opt Out.

• Tag Management

  This type of service helps the Owner to manage the tags or scripts needed on this Website in a centralized fashion.
  This results in the Users' Data flowing through these services, potentially resulting in the retention of this Data.

  Google Tag Manager (Google Inc.)

  Google Tag Manager is a tag management service provided by Google LLC or by Google Ireland Limited, depending on how the Owner manages the Data processing.

  Personal Data processed: Usage Data.

  Place of processing: US – Privacy Policy.

• Traffic optimization and distribution

  This type of service allows this Website to distribute their content using servers located across different countries and to optimize their performance.
  Which Personal Data are processed depends on the characteristics and the way these services are implemented. Their function is to filter communications between this Website and the User's browser.
  Considering the widespread distribution of this system, it is difficult to determine the locations to which the contents that may contain Personal Information of the User are transferred.

  Cloudflare (Cloudflare)

  Cloudflare is a traffic optimization and distribution service provided by Cloudflare Inc.
  The way Cloudflare is integrated means that it filters all the traffic through this Website, i.e., communication between this Website and the User's browser, while also allowing analytical data from this Website to be collected.

  Personal Data processed: Cookies; various types of Data as specified in the privacy policy of the service.

  Place of processing: US – Privacy Policy.

• User database management

  This type of service allows the Owner to build user profiles by starting from an email address, a personal name, or other information that the User provides to this Website, as well as to track User activities through analytics features. This Personal Data may also be matched with publicly available information about the User (such as social networks' profiles) and used to build private profiles that the Owner can display and use for improving this Website.
  Some of these services may also enable the sending of timed messages to the User, such as emails based on specific actions performed on this Website.

  Salesforce Marketing Cloud (Salesforce.com, Inc.)

  Salesforce Marketing Cloud is a User database management service provided by salesforce.com, inc.

  Personal Data processed: various types of Data as specified in the privacy policy of the service.

  Place of processing: United States – Privacy Policy.

Information on opting out of interest-based advertising

In addition to any opt-out feature provided by any of the services listed in this document, Users may learn more on how to generally opt out of interest-based advertising within the dedicated section of the Cookie Policy.

Further information about the processing of Personal Data

• Policy on the Processing of Personal Data Collected as Part of the Ticino Ticket Programme

  A. Introduction
  
  In this document, the Data Controller informs the User about the personal data processing performed as part of the “Ticino Ticket” tourism promotion programme.
  
  When the User completes the online form received from the accommodation via email and signs up to the Ticino Ticket programme, the User declares that he/she has obtained all the necessary informed consents from the other people whose details he/she has entered, in compliance with personal data protection legislation.
  
  This document supplements the terms of use of the Ticino Ticket, which can be downloaded here: https://www.ticino.ch/en/ticket/faq-tourist.html.
  
  Use and navigation of the Ticino Turismo website are subject to the policies and provisions on privacy, the processing of personal data and the use of cookies published on the website.
  
  
  B. Data controller
  
  Agenzia turistica ticinese SA, Via Canonico Ghiringhelli 7,
  Casella postale 1441, 6501 Bellinzona.
  Contacts:
  e-mail: ticket@ticino.ch
  phone: +41 91 825 70 56
  
  
  C. The Ticino Ticket Programme
  
  The Ticino Ticket is offered free of charge to visitors staying at hotels, youth hostels or camping sites and entitles them to free travel on all means of public transport within the Arcobaleno fare network (https://arcobaleno.ch/). It also entitles visitors to special offers and discounts on boats and cableways and at key tourist attractions throughout the Canton.
  
  The Ticino Ticket is for use by the named holder only. It is available to visitors spending at least one night in the Canton of Ticino and is valid for the length of their stay. It is issued by the host as a non-transferable paper travelcard and is part of a project to promote tourism. When a Ticino Ticket is issued, personal data is collected from the card holder and processed as detailed in Section E below for the purpose of verifying the card’s validity and the holder's identity during their stay and during the provision of services.
  
  
  D. Management of the Ticino Ticket Programme and Communication
  
  Ticino Turismo is the brand name under which the company Agenzia turistica ticinese SA (7, Via Canonico Ghiringhelli, P.O. Box 1441, 6501 Bellinzona) operates.
  
  The Ticino Ticket programme is managed by Ticino Turismo in terms of administration and IT. Ticino Turismo acts as an intermediary in offering tourists a travelcard entitling them to free use of public transport throughout the canton, in so doing helping to relieve the burden on the environment.
  
  The supply of goods and/or services and/or special offers to Ticino Ticket holders is the sole responsibility of the companies and affiliated third parties (public transport, cableway operators, tourist destinations etc.), in respect of which Ticino Turismo offers no guarantee as to quality, safety, security, punctuality or availability.
  
  For any issues concerning the protection of personal data, feel free to email us at ticket@ticino.ch. For questions or any other matters, you may call Ticino Turismo on +41 91 825 70 56.
  
  
  E. Collection of Personal Data, Purpose and Retention Period
  
  Personal data
  
  The Ticino Ticket is for use by the named holder only. It is available to visitors spending at least one night in the Canton and is issued for the length of the visitor’s stay. The following personal data is required for the issue of a Ticino Ticket (category A data):
  
  - First name
  - Last name
  - Date of birth
  - Town/city of residence
  - Holiday accommodation
  - Check-in date
  - Check-out date
  
  Optionally, the following personal data may also be entered in the system (category B data):
  
  - Email address (may be provided by the user only)
  - Telephone number (may be provided by the user only)
  
  Entry and Storage of Personal Data in the System
  
  Personal data may be entered in the system two ways:
  
  a) by the host, who is authorised to enter the necessary data on the platform using booking data or data provided by the user on acceptance, or
  
  b) by the user, who may enter their own personal data and the personal data of other applicants in a form emailed to them by their host.
  
  The email address to which the host sends the form is not stored in the Ticino Ticket system.
  
  The data entered on the Ticino Ticket platform is stored on a server that is located in Switzerland and owned by Ticino Turismo. Ticino Turismo guarantees that the servers are managed solely by its own dedicated staff.
  
  Purpose, Data Processing and Retention Period
  
  Purpose
  
  Category A data
  The processing of category-A personal data (data required for the issue of the Ticino Ticket) is required for use of the Ticino Ticket. This information is needed by the Arcobaleno fare network for the issue of day travelcards and ensures accurate provision of services, preventing fraud and ambiguity during the guest’s stay in the Ticino.
  
  Category B data
  Upon the User’s consent, Category B data is processed for the purpose of subscribing to the promotional newsletter and participation in the satisfaction survey.
  The newsletter and survey service is provided by MailChimp, a supplier based in the USA that has signed up to the CH – US Privacy Shield personal data protection programme. This is Mailchimp’s privacy policy (https:// mailchimp.com/legal/privacy).
  The User may withdraw his/her consent at any time without prejudice to the legality of processing based on consent prior to withdrawal.
  
  Who can access the data
  
  In addition to the Data Controller, your data can also be accessed by other subjects, including both companies and professionals:
  • employees and administrators working for the Data Controller
  • subjects responsible for managing the platform hardware and software and service providers (including hosting providers)
  The Data Controller will notify interested parties, who request it using the contact details provided, of the identity and contact details of the data processor, as well as the data or data categories that it processes.
  In no circumstances will the data be used for commercial purposes or transferred to third parties, without the express consent of the user.
  Data in an aggregate/anonymous format is used for statistical purposes and for behavioural and Ticino Ticket use analysis and is shared with the project partners (accommodation providers and attractions).
  
  Ticino Turismo Newsletter and Visitor Satisfaction Survey
  
  If the user enters their email address and/or telephone number in the system and, when entering their details, expressly consents to their personal data being used for marketing purposes, this data will be passed on to newsletter and survey service provider MailChimp (Mailchimp’s privacy policy: https://mailchimp.com/legal/privacy/) for the purpose of sending messages relating to the following:
  
  - Subscription to Ticino Turismo’s general newsletter
  - Online survey to assess the visitor’s experience of the Ticino Ticket
  
  MailChimp is a US-based service provider which has joined the Swiss-US Privacy Shield personal data protection programme. Nevertheless, Ticino Turismo cannot and does not assume any responsibility or offer any guarantee in respect thereof.
  
  Commercial Purposes, Profiling and Marketing
  
  If the user enters their email address and/or telephone number in the system and, when entering their details, expressly consents to their personal data being used for marketing, profiling and sharing with third parties and/or for commercial purposes, Ticino Turismo shall be authorised to use the user’s personal data to the extent specifically authorised by the user upon registration.
  
  The personal data of Ticino Ticket holders under 16 years of age shall be excluded from commercial, profiling and marketing programmes and shall not be disclosed to third parties.
  
  Personal Data Retention Period
  
  Unless otherwise instructed by the user or provided by the Law or this policy or by order of any authority, all personal data will be deleted or anonymised within 15 days of expiry of the Ticino Ticket.
  
  In the event of signing up to the newsletter, category B data is kept until the User unsubscribes from the newsletter service, subject to the time it takes to implement this.
  
  Users’ Rights
  
  Personal data shall be deleted from the system when the holder surrenders the Ticino Ticket or explicitly requests deletion of their personal data.
  
  The user is entitled to check their personal data to ensure that it is correct and to request that it be modified, corrected and/or updated as necessary. Upon written request, the user has the right to be informed as to whether and how their personal data is used. In certain specific circumstances, if so prescribed by law, access to the user’s data may be denied.
  
  Security
  
  The Ticino Ticket platform takes all reasonable security measures, according to and proportional with the circumstances, to prevent unauthorised access, use, transmission, modification, loss and destruction of personal data. These include technical measures (in particular, encryption), physical measures and organisational measures. Nevertheless, given the nature of the Internet as an “open network”, Ticino Turismo cannot and does not offer any guarantee regarding the interception or purchase of data by unauthorised third parties.
  
  
  F. Governing Law and Jurisdiction
  
  The legal relationship between the user and Agenzia turistica ticinese SA, Bellinzona, shall be governed exclusively by Swiss substantive law, excluding the provisions of international private law, without prejudice to the provisions of mandatory law.
  
  The Parties agree that the magistrates’ court of Bellinzona (TI) shall have exclusive jurisdiction in any dispute, without prejudice to the provisions of mandatory law.

• Terms of participation in Facebook/Instagram contests

  Contest promoter
  The competition is promoted by Ticino Turismo, Via Canonico Ghiringhelli 7, CH-6500 Bellinzona (hereinafter the "promoter").
  The competition is not endorsed, sponsored, or administered by Facebook. Ticino Turismo exempts Facebook from all claims regarding the competition. All agreements are concluded between the participants and Ticino Turismo. The recipient of the information provided by the participants is Ticino Turismo.
  
  Conditions of participation
  All natural persons over the age of 18 and resident in Switzerland at the time of participation are authorised to participate in the contest. Employees of Ticino Turismo and their families are excluded from participation. The modalities of participation are indicated in the post.
  Participation in the competition is given when a user complies with the conditions of the competition indicated in the post.
  Only one participation per Facebook/Instagram user is possible.
  
  Prizes and notification of winners
  The prize is indicated in the post. Winners are not entitled to a cash refund, exchange, modification, or adjustment of their prize. The winners will be drawn by lot, unless otherwise specified in the post.
  The winners will be informed by private message on Facebook or Instagram within one working day after the end of the competition. From the moment of notification of the prize, a period of 72 hours will begin, during which the winner must provide Ticino Turismo with his or her postal address to send the prize. If a winner does not notify Ticino Turismo within this period, Ticino Turismo may award the prize to another competitor selected in accordance with the provisions of these regulations.
  
  Exclusion from the competition
  Ticino Turismo is authorised to exclude participants in the competition in the presence of justified reasons, such as violation of the following conditions of participation, attempt to influence the course of the competition, manipulation, etc.
  Comments that do not respect the Facebook or Instagram community standards/guidelines or the netiquette of the Facebook page of Ticino Turismo will be deleted without further notification at the time of discovery. The participant will be excluded from the competition.
  
  Right to interruption / modification of the contest
  The promoter reserves the right to adapt, modify or terminate the contest if necessary. It also reserves the right to modify the rules, conditions of admission or the determination of the winner at any time. Such an interruption may occur if it is no longer possible to guarantee the normal running of the competition for technical or legal reasons.
  
  Data protection
  The data are used, recorded, and processed exclusively within the context of the competition and transmitted only to the parties directly involved in the running of the contest, conditions that the participant expressly declares to accept.
  All comments, questions or complaints regarding the competition should not be addressed to Facebook, but to social@ticino.ch with the object "Facebook Competition". Legal avenues are excluded.
  
  The place of jurisdiction is the district court of Bellinzona. The applicable law is Swiss law.

Cookie Policy

This Website uses Trackers. To learn more, Users may consult the Cookie Policy.

Additional information about Data collection and processing

Legal action

The User's Personal Data may be used for legal purposes by the Owner in Court or in the stages leading to possible legal action arising from improper use of this Website or the related Services.
The User declares to be aware that the Owner may be required to reveal personal data upon request of public authorities.

Additional information about User's Personal Data

In addition to the information contained in this privacy policy, this Website may provide the User with additional and contextual information concerning particular Services or the collection and processing of Personal Data upon request.

System logs and maintenance

For operation and maintenance purposes, this Website and any third-party services may collect files that record interaction with this Website (System logs) or use other Personal Data (such as the IP Address) for this purpose.

Information not contained in this policy

More details concerning the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by notifying its Users on this page and possibly within this Website and/or - as far as technically and legally feasible - sending a notice to Users via any contact information available to the Owner. It is strongly recommended to check this page often, referring to the date of the last modification listed at the bottom.

Should the changes affect processing activities performed on the basis of the User’s consent, the Owner shall collect new consent from the User, where required.