Personal Data Processing Information

Dear user, pursuant to article 13 of Regulation (EU) 2016/679 concerning protection of natural persons regarding personal data processing and the free circulation of these data, Iscotrans, as controller of data deriving from interaction with the web services accessible via an device starting at the address www.iscotrans.it, would like to inform you about how it processes your personal data and asks you to authorise processing of your data for the purposes described, voluntarily and freely giving your consent to processing of your data. This informative note only applies to the data controller’s website and does not apply to any websites that link to or from said website.

1 – Data Controller

Iscotrans S.P.A.

Via alla Porta degli Archi, 3, 16121 Genova GE

010 5729911

info@ge.iscotrans.it

2 – Processing methods

Your data will be processed in the Data Controller’s offices either verbally and/or in writing, using electronic instruments and/or on paper, using methods and within the limits necessary for the purposes given, while respecting the principles laid down by article 5(1) of Regulation (EU) 2016/679, specifically:

  • Lawfulness, fairness and transparency
  • Limitation of purposes
  • Collected data minimisation
  • Data accuracy
  • Storage limitation
  • Integrity and confidentiality
  • Data Controller accountability.

The processing shall regard the following data and purposes:

  • Personal data provided voluntarily by the user (e.g. name, surname, email address) for the purpose of meeting a specific request made by the user of the services provided by the website. Providing personal data is not obligatory but voluntary, it is however necessary if the user is to receive a response to requests and services.

Users are free to provide their personal data in the forms for requesting subscription to the newsletter, information or other communications regarding technical and/or commercial questions. Failure to provide said data may however make it impossible to fulfil the request.

The personal data are processed with automated tools for the period of time strictly necessary for fulfilling the purposes for which they have been collected and however only for the duration of the consent. Data will be processed exclusively by staff or external parties authorised as part of their roles and in compliance with instructions received from the Data Controller and only for the purposes detailed above, to guarantee the security of the data and confidentiality and protection of your rights. These data will not be communicated to third parties in the EU or international organisations.

The data processing does not involve any automated decisional process including profiling.

  • Personal data for the purpose of drawing up and terminating sales contracts, the execution of the same, including technical-operational and administrative-accounting activities linked and for the purposes of business activities, in compliance with the contract and legal tax obligations.

Communication of the data is obligatory for fulfilling contractual and legal obligations, and failure to do so will mean the service required may not be provided and non-compliance with tax/administrative regulations in force.

Data will be processed exclusively by staff or external parties authorised as part of their roles and in compliance with instructions received from the Data Controller and only for the purposes detailed above, to guarantee the security of the data and confidentiality and protection of your rights.

The data must or may be communicated, within their specific competences in providing services for the Data Controller, to external public and private parties, including suppliers, collaborators, lawyers, accountants, business consultants, consultants in general, banks, public bodies and competent offices with the authority to request them. These data will not be communicated to third parties in the EU or international organisations. The data will be stored for the entire duration of the relationship and in any case for no longer than it takes to carry out the above-detailed purposes for which they are being processed. Accounts/administrative data required for tax purposes (accounting entries) are stored by law (Italian Civil Code) for at least 10 years from the date of the last entry or until any tax inspections are completed by the competent bodies relative to the corresponding tax year under review (article 22(2), Italian Presidential Decree no. 600/1973).

The data processing does not involve any automated decisional process including profiling.

3 – Rights of the data subject

The Regulation gives you, as the Data Subject, specific rights, detailed in articles 15 to 20. You can therefore request from the Data Controller:

  • access to your personal data (article 15): confirmation of the existence or not of processing of your personal data and access the same;
  • rectification of your data (article 16): rectification of incorrect data and integration of incomplete data;
  • cancellation of data – “right to be forgotten” (article 17);
  • processing limitation(article 18);
  • data portability (article 20): receipt of the data provided to the controller and possibility of transmitting them without impediment to another controller;
  • opposition to processing (article 21);
  • non subjection to a decision based solely on automated processing that produces legal effects or significantly affects you (article 22).

Furthermore you have the right to:

  • propose a complaint to the Personal data protection authority;
  • withdraw your consent at any time, without this affecting the lawfulness of processing before the withdrawal (article 7, paragraph 3). The right to withdraw may not be exercised in those cases where processing is necessary for fulfilling a legal obligation regarding the data controller.

The rights above may be exercised at any time and freely, by sending an email to the data controller Iscotrans S.P.A. at info@ge.iscotrans.it.

In the event of a personal data breach likely to result in a high risk to your rights and freedoms, you will be communicated without undue delay, in accordance with article 34 of the Regulation.