Privacy Policy

PERSONAL DATA PRIVACY POLICY

This policy governs the processing of personal data carried out by LA PARVA SpA (under the authority of the “Controller”), in compliance with Law No. 19,628 on the Protection of Private Life, and for the purpose of obtaining the voluntary subscription of individuals who wish to receive information, news, and promotions related to the ski resort’s services.

Personal Data Processed

The Controller may collect and process the following personal data:
• First and last name
• Email address
• Telephone number (optional)
• Preferences or interests related to mountain or snow activities (when applicable)

In the event that sensitive data is processed, enhanced security and confidentiality measures will be adopted to protect such information.

Purpose of Processing

Personal data will be processed exclusively for the following purposes:
• Sending commercial information, promotions, discounts, and benefits related to the ski resort’s services
• Communicating events, season openings, weather conditions, and updates
• Creating basic profiles to personalize communications (without legal effects)

The data will not be used for purposes other than those stated above without obtaining new authorization from the data subject.

Principles of Processing

• Principle of Lawfulness, Fairness, and Transparency: Personal data will be processed only when there is a legal basis authorizing such processing, and the data subject will always be informed of the specific purposes of the processing, including purchase management, issuance of tax documents, after-sales service, and coordination of product or service delivery or redemption.

• Principle of Data Minimization and Proportionality: Only personal data that is strictly necessary, relevant, and proportionate to the stated purposes will be requested and processed.

• Principle of Storage Limitation: Personal data will be retained only for as long as necessary to fulfill the purposes of processing and to comply with applicable legal, tax, or contractual obligations. Records will be periodically reviewed to delete or anonymize data that is no longer required.

• Principle of Security and Confidentiality: Appropriate technical and organizational measures will be implemented to protect personal data against unauthorized access, loss, alteration, or improper disclosure, including SSL encryption mechanisms and suitable security controls.

Data Subject Rights

In accordance with applicable regulations, you may exercise the following rights at any time before the Controller:

• Access: To know what personal data is being processed.
• Rectification: To request the correction of inaccurate or incomplete data.
• Erasure (Deletion): To request the deletion of your data when it is no longer necessary.
• Objection: To object to the processing of your data for specific purposes.
• Data Portability: To request a copy of your data in a structured electronic format.
• Restriction (Blocking): To request the temporary suspension of the processing of your data.

The company may request reasonable documentation to verify the identity of the applicant before responding to any request related to personal data.