PRIVACY POLICY PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 FOR THE PROCESSING OF PERSONAL DATA BY VOX S.P.A.
Last updated: June 2025
This Privacy Policy governs the processing of personal data and information collected by Vox S.p.A., with registered office at Via Pievaiola 21, Perugia, VAT No. 02549200547 (“Vox” or the “Controller”), as the sole data controller, for the purposes and in the manner set out below, in accordance with Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (“GDPR”) and its implementing legislation.
1. Personal Data Collected
Your personal data is provided directly by you when you access or register on the website www.pass.visitrimini.com (the “Website”) and/or on the “Rimini Pass” application developed and made available by Vox (the “App”; collectively with the Website, the “Platform”), and subsequently during your use of the Platform.
The App and Website offer a personal digital card (“Rimini Pass”) created and managed by Vox. The Vox App also allows you to purchase electronic admission tickets (“Tickets”) to museums, villas, churches, gardens, and other attractions (“Attractions”), as well as ancillary products and services including public transportation services (“Ancillary Services”) and other products and/or services provided by Vox through the App.
The personal data collected and processed by Vox includes:
Identification data provided during registration or while using the Platform, such as name, surname, address, phone number, email address, travel dates, and IP address;
Data provided when contacting customer service;
Technical data automatically received from your mobile device, such as the unique device ID and software/hardware characteristics;
Usage data from the Platform, including viewed content, usage frequency, and purchases of Tickets, Products, and Ancillary Services.
2. Purposes and Legal Basis for Processing
Your personal data is processed by Vox, as sole controller, for the following purposes:
(a) Management of registration, provision, and use of the Rimini Pass, Tickets, Products, and Ancillary Services, and handling customer support requests;
(b) Management of payments and invoicing related to the Rimini City Pass;
(c) Sending periodic updates, commercial and promotional communications about discounts, offers, services, or events related to the Rimini Pass via email, SMS and/or WhatsApp;
(d) Sending newsletters on products and services similar to those previously purchased;
(e) Statistical purposes using anonymized data.
The legal bases for the processing are:
Contract performance for purposes (a) and (b), pursuant to Article 6.1(b) of the GDPR;
Explicit consent for purpose (d), which may be withdrawn at any time;
Vox’s legitimate interest for purpose (c), with the possibility of opting out at any time.
Providing data is optional; however, failure to provide the data necessary for registration, billing, customer support, and payments as referred to in (a) and (b) will make it impossible to use the services. Any subsequent objection or withdrawal of consent to process such data will result in the immediate suspension of the related services.
Refusing consent for the additional purposes of receiving periodic updates and promotional messages as per (c), or for promotional communications from Vox’s partner companies, will have no consequence other than the inability to receive such marketing and promotional information or other content of interest.
If you consent to the profiling activity outlined in (d), this will involve automated processing in order to categorize you into groups with similar characteristics based on your use of the Platform and the Tickets, Products and/or Ancillary Services you purchase.
3. Methods of Personal Data Processing
Data is processed using paper-based, automated, and electronic methods, in compliance with the necessary security measures to ensure confidentiality and integrity, as required by the GDPR.
4. Disclosure of Personal Data
Your data may be shared within Vox only with employees and collaborators who need access to such data and are authorized to process it. Vox may also share data with its group companies, partners, suppliers, mailing companies, and consultants appointed as data processors, for the purposes for which consent has been given.
Data may also be shared with judicial and public authorities in cases required by law. Otherwise, data will not be disclosed or shared with third parties.
5. Data Retention
Data is stored on Vox’s servers located within the European Union and will not be transferred outside the EU.
Data processed for contractual purposes will be retained until the end of the contractual relationship and the expiration of any legal claims. Data processed for marketing purposes will be retained until consent is withdrawn or for a maximum of two (2) years from collection, unless otherwise required by law.
6. Your Rights
You may exercise your rights under Articles 15–21 of the GDPR, including the right to access, rectify, delete, restrict processing, withdraw consent, data portability, and object to processing.
You may contact the Italian Data Protection Authority (https://www.garanteprivacy.it/home/footer/contatti) to protect your rights.
To exercise your rights, you can send a request via email to privacy@riminipass.com or by registered mail to Vox’s registered office.
7. Data Controller
The data controller is:
Vox S.p.A.
Via Pievaiola 21, Perugia
VAT No. 02549200547
Email: privacy@riminipass.com
