Information note on the protection of personal data / request for consent to treatment

In accordance with the art. 13 of Legislative Decree No. 196/2003 (hereinafter the Code), Smag Srls (hereinafter Smag) will collect and process, as Data Controller, some personal information relating to users of the website, and subdomains of the same (the Site), Personal Data – as defined below – are processed by Smag for purposes related to the provision of services available on and on other websites that address the site, and in particular depending on your requests:

  1. provide the search engine service which provides information on tickets and offers, museums, cultural institutions, theaters and tour operators (the Supplier), and
  2. sell tickets, or vouchers to redeem tickets, issued by the Supplier or by third parties to access their premises and exhibitions and / or to use leisure / travel services offered by the Supplier (the Supplier Services);
  3. sell tickets with leisure / travel services offered directly by Smag and additional services to Supplier Products:
  4. publish and allow access to reviews written by you or third parties on attractions and leisure opportunities;
  5. Contact providers of third-party information and services about leisure opportunities (hereinafter “Suppliers”)

(hereinafter the Services).

Your Personal Data (as defined below) may also be used by Smag to send you newsletters and other promotional material related to Services similar to those previously purchased on the website, unless you withdraw consent to receive this kind of information / newsletter through your personal page on the website. You can also withdraw your consent to receive these communications at any time by sending an e-mail to

Moreover, at the time of registration or when buying a Service, you may give your express consent to receive commercial communications from the Supplier (third with respect to Smag), or allow Smag to perform market analysis through your Data Personal, in order to send you personalized promotional information.

Personal Data and method and place of treatment.

Personal Data may be provided directly by users of the Services when registering as users on the Website or when using the Services through the Website (ie personal data such as name, surname, e-mail address, credit card number, and – if required from the applicable tax law – home address, country, telephone number, date of birth, social security number) or can be provided when accessing the Site through the login credentials to Facebook (for example personal data such as name, surname, country, date of birth, friendships on Facebook) and may include data collected during the provision of the Service to the user (ie type and quantity of product purchased and information provided by the Cookies – see below) (hereinafter the Personal Data).

Personal Data will be stored on Smag’s servers and will be processed (electronically or otherwise) for the purpose of management of the Services, for the purpose of conducting market statistics (through anonymous data) and to comply with any obligation under applicable law.

Communication of Personal Data to Suppliers (who will act as data controllers).

In order to provide the Service, Smag can notify the Supplier – identified in the related “product information” and in the purchase order – the Personal Data strictly necessary to ensure the supply of Supplier Services in Italy and abroad (ie the username, your email address if necessary to complete the Supplier’s Service, and any other relevant booking information). The Supplier will act as independent Owner in relation to the Personal Data provided.

The Supplier may have and can send you his privacy policy, which we invite you to read carefully. The Supplier will be able to contact you to obtain more information about you, so as to facilitate your use of the Service of the Supplier, make available the Service of the Supplier or respond to a request sent by you.

Communication of Personal Data to affiliated companies of Smag or to other suppliers (who will act as controllers). In order to provide the Service, Smag will be able to communicate the Personal Data to third parties that perform consultancy activities for it, its affiliated companies and its suppliers, both in Italy and abroad, within the EU, to perform its name functions related to the Services (such as executing orders, delivering tickets, sending mail and e-mails, providing commercial assistance, processing credit card payments and providing services to customers). These subjects will have access to the Personal Data necessary to perform these functions (and can not use them for different purposes), will be required to process the data in accordance with the applicable law, will be responsible for
treatment commissioned by Smag. Personal Data will not be disclosed to other third parties or otherwise disseminated, except as provided in the following paragraph.

Duration of the Treatment.

Personal Data will be kept for the time necessary to provide the Services requested by the User, or for the time required by the purposes described in this document. The user can always request the Data Controller to interrupt the processing and / or delete data in the cases provided for by law.

Security measures

Smag has adopted security measures in order to minimize the risks related to the loss or damage – even accidental – of the Personal Data, either to unauthorized access to the Data or to its unlawful processing.

Exercise of the right granted by the Data Protection Act.

At any time you can exercise the rights granted by law, ie the right to be informed about the existence, content, source, purposes and methods of processing Personal Data, and the right to request updates, corrections, additions and (when permitted by law) the cancellation of Personal Data. These rights may be exercised by contacting the Data Controller at the e-mail address Please note that failure to provide your Personal Information may prevent Smag from providing the Services.