Privacy Notice updated to GDPR
(European Privacy Policy, 679/2016)
Pursuant to art. 13 of the Regulation (EU) n. 2016/679, also called General Data Protection Regulation (hereinafter the “GDPR”), Citta e Aeroporto informs you that your personal data (hereinafter the “Data”) will be treated in compliance with the provisions of the GDPR and any applicable legislation with reference to the processing of personal data in accordance with the following information.
This privacy policy applies only to the online activities of this site and is valid for visitors / users of the site. It does not apply to information collected through channels other than this website. The purpose of the privacy statement is to provide maximum transparency regarding the information that the site collects and how it is used.
- Type of data processed
The visit and consultation of the site do not generally involve the collection and processing of personal data of the user except for navigation data and cookies as specified below. In addition to the so-called “navigation data” (see below), personal data voluntarily provided by the user may be processed when the latter interacts with the site’s features or requests to use the services offered on the site. In compliance with the Privacy Code, Citta e Aeroporto may also collect your personal data from third parties in the performance of your business. The Data processed include: (i) personal data (name, surname, age, sex), residential or home address and contact details (telephone, e-mail address). - Purpose and legal basis of the processing. Legitimate interest
The Data concerning the User is collected to allow the Owner to provide its Services, as well as for the following purposes: Statistics, Contacting the User, Registration and authentication, managing contacts and sending messages.
To obtain further detailed information on the purposes of the processing and on the Personal Data concretely relevant to each purpose, the User can refer to the relevant sections of this document. - Method of treatment
Personal Data is collected for the following purposes and using the following services:
a) Contact the User: Contact form of cittaeaeroporto.com.
By filling out the contact form with their Data, the User consents to their use to respond to requests for information, quotes, or any other kind indicated by the form header.
Personal Data collected include: city, fiscal code, last name, email address, country, name, telephone number, VAT number, province and company name.
b) Registration and authentication
By registering or authenticating the User allows the Application to identify it and give it access to dedicated services.
Depending on the following, the registration and authentication services may be provided with the help of third parties. If this happens, this application will be able to access some data stored by the third party service used for registration or identification. - Recipients or recipient categories
Your personal data may be disclosed:
to all the subjects to whom the right of access to such data is recognized by virtue of regulatory provisions;
to our collaborators, employees, as part of their duties;
to all those natural and / or legal persons, public and / or private when the communication is necessary or functional to the performance of our activity and in the manner and for the purposes described above;
In any case, the Data will not be disclosed. - Security and quality of personal data
Citta e Aeroporto undertakes to protect the security of the user’s personal data and complies with the security provisions of the applicable legislation in order to avoid data loss, illegitimate or illegal use of data and unauthorized access to the same, with particular reference to the Technical Disciplinary regarding minimum security measures. Furthermore, the information systems and computer programs used by Citta e Aeroporto are configured in such a way as to minimize the use of personal and identifying data; these data are processed only for the achievement of the specific purposes pursued from time to time. Citta e Aeroporto uses multiple advanced security technologies and procedures to promote the protection of users’ personal data; for example, personal data is stored on secure servers located in places with secure and controlled access. The user can help Citta e Aeroporto to update and maintain their personal data by communicating any changes to the contacts on the site. - Transfer of data abroad
In consideration of the existence of links made with telematic, informatic or correspondence means, the data can be made available abroad both within the territory of the countries belonging to the EU and in non-EU countries. In this case, the transfer will take place by adopting the contractual clauses prescribed by the decision of the European Commission of 5 February 2010, as well as in order to provide appropriate and appropriate guarantees pursuant to art. 46 or 47 or 49 of the GDPR. - Retention period
Personal data is stored and processed through IT systems owned by Citta e Aeroporto and managed by Citta e Aeroporto or by third party technical service providers; for more details please refer to the specific section. The data is processed exclusively by specifically authorized personnel, including personnel assigned to carry out extraordinary maintenance operations.
The Data will be kept for a period of time not exceeding 3 (three) months for administrative purposes and, in any case, for the time strictly necessary for the pursuit of the legitimate interest. - Access rights, deletion, limitation and portability.
The owner informs you that you are entitled to the rights set forth in articles from 15 to 20 of the GDPR. By way of example, by sending a specific request to the e-mail address hello@cittaeaeroporto, you can:
– obtain confirmation that personal data concerning you are being processed;
– if a processing is in progress, obtain access to the data and information related to the treatment, and request a copy of the data;
– obtain the correction of inaccurate data and the integration of incomplete personal data;
– obtain, if one of the conditions foreseen by the art. 17 of the GDPR, the cancellation of data concerning you;
– obtain, in the cases provided for by art. 18 of the GDPR, the limitation of the processing of data concerning you;
– receive the data that concerns you in a structured format, commonly used and readable by automatic device and request their transmission to another holder, if technically feasible. - User rights
10.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679
The interested party has the right to obtain that it is or is not undergoing the processing of personal data concerning him and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
d) the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to request to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.
10.2 Right pursuant to art. 17 of EU Reg. 2016/679 – right to cancellation (“right to be forgotten”)
The data subject has the right to obtain the deletion of personal data concerning them without undue delay and will is oblige to cancel the personal data without undue delay if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
(b) the data subject revokes the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and whether there is no other legal basis for the processing ;
(c) the data subject opposes the processing pursuant to Article 21 (1) and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21 (2);
d) personal data have been processed unlawfully;
e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject;
f) personal data have been collected in relation to the information society service offer referred to in Article 8, paragraph 1 of EU Reg. 2016/679
10.3 Right referred to in art. 18 Right of limitation of treatment
The interested party has the right to obtain the limitation of processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data for the period necessary to verify the accuracy of such personal data;
b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
c) although it’s no longer needed for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;
d) the interested party has opposed the treatment pursuant to article 21, paragraph 1, Reg EU 2016/679 pending verification of the possible prevalence of the legitimate reasons er with respect to those of the interested party.
10.4 Right referred to in Article 20 Right to data portability
The data subject has the right to receive, in a structured, commonly used and automatically readable form, the personal data concerning him / her and has the right to transmit such data to another without impediments.
All the above requests must be sent to the following email hello@cittaeaeroporto.com with the subject “Right User Website Citta e Aeroporto”. The requests are filed for free and processed as soon as possible.