INFORMATION on the processing of personal data for "FRUITERS OF SERVICES" of AMTAB S.p.A.
Pursuant to the Italian and European legislation on data protection (EU Regulation 2016/679), the processing of information concerning the user of Amtab S.p.A.'s services ("User" or "Interested Party"), will be based on the principles of correctness, lawfulness and transparency, to protect your confidentiality and your rights.
- Identity and contact information
The Data Controller for the services offered is Amtab S.p.A., based in Viale Jacobini, Z.I. - 70132 Bari.
The Data Protection Officer (DPO) of AMTAB S.p.A. can be contacted at the following contact details AMTAB S.p.A. Viale Jacobini, Z.I. 70132 Bari(BA) and at the following e-mail addressdpo@amtab.it
The Data Protection Officer is the point of contact for receiving information about the processing of your data and/or for the Supervisory Authority.
For any further information regarding the Holder's internal contact persons, it is possible to refer to the Transparent Company section of the website where the organization chart of the functions in charge of coordinating the processing activities of Amtab S.p.A. is published in an updated form.
- How we use customers' personal information (purpose and legal basis)
To provide its services to users, Amtab S.p.A. will process personal data and information collected for specific purposes such as:
(a) conclusion of the contract for the provision of services and fulfillment of pre-contractual, contractual, administrative and tax obligations arising from the existing relationship, including the provision of online services on the Site;
(b) handling of complaints, reports, and/or service-related inquiries (on schedules, routes, stops, etc.), including through the dedicated toll-free number;
(c) fulfillment of obligations under the Law, a Regulation, Community Regulations, or an order of the Authority;
d) litigation management (contract defaults, warnings, settlements, debt collection, arbitration, court disputes, etc.);
(e) Management of Telecontrol activities (aimed at geolocation of vehicles for LPT service verification needs, improvement of local public transport service, such as service anomalies and verification of problems encountered, including timely ones related to service design, physiological delays for service rescheduling);
(f) service monitoring (through a system of tracking and video surveillance on means of transportation) to ensure the level of quality required by regulations, regularity and punctuality of service, safety of travel, and personal and property security of the traveler;
g) imposition of sanctions towards users, within the scope of transportation services and auxiliary service (for LPT service or vehicles parked in parking areas carried out on behalf of the Municipality of Bari), who at the time of control by the staff in charge during the performance of the service is without a travel or parking ticket (Regional Law No. 18 of 2002);
(h) handling requests for granting concessionary fares to certain categories of users for season tickets on means of transportation;
(i) Management of subscriptions at regular transportation rates, to the right to park and park in so-called ZTL (limited traffic zones) and ZSR (regulated parking zones), as part of parking services (carried out on behalf of the Municipality of Bari).
In addition, the regulations require that there be a specific justification for allowing the processing of Users' personal data, and that justification consists of:
- in the performance of the existing contract or pre-contractual measures taken at its request;
- in some cases, in the need to provide feedback to User requests or claims (contractual or pre-contractual purposes);
- in some cases, in complying with certain legal and/or regulatory requirements (such as fulfilling obligations under the Law, a Regulation or Community Legislation);
- In the pursuit of a legitimate interest of Amtab S.p.A. or third parties (Service Users), regarding video surveillance systems installed on buses and in parking lots;
- in limited circumstances, in the consent to be given by the User (for one or more specific purposes).
The interested party may provide personal data falling under "special categories of personal data" (in particular data relating to health status) for the purpose of access to subsidized fares and/or obtaining contractual conditions provided for by law and/or the Service Regulations. In the event of failure to provide the aforementioned data and/or failure to give consent for processing, Amtab S.p.A. will not be able to apply the specific regimes provided. In fact, please note that the special categories of data (i.e., data capable of revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership in parties, trade unions, associations or organizations of a religious, philosophical, political or trade union, genetic or biometric data, as well as personal data disclosing health and sex life), may be processed only with the written consent of the data subject or if the processing is necessary to ascertain, exercise or defend a right of Amtab S.p.A. in judicial proceedings or if it is necessary for reasons of public interest.
- Data subject to processing
By way of example and not limited to, the personal data that will be processed, are those identifying the User of the services, such as:
- Last name, first name and place of birth;
- tax code and/or VAT number;
- phone number/email address;
- address and house number;
- Invoice delivery address;
- bank details;
- Any other personal data functional to the satisfaction of the relationship between the User of the service and Amtab S.p.A.
- Nature of data provision and consequences of refusal to provide data
The provision of personal data requested by Amtab S.p.A. is necessary for the pursuit of the purposes indicated above. Any refusal to provide the data necessary for these purposes may result in the impossibility of executing the user's requests or providing the other services available or, again, to properly fulfill contractual (or pre-contractual), legal and/or regulatory obligations.
The communication to Amtab S.p.A. of further data, other than those the provision of which is mandatory, for the purpose of fulfilling its legal or contractual obligations or for the provision of certain services upon request is, on the other hand, optional and does not entail any consequences for the enjoyment of the services.
As appropriate and, if necessary, from time to time, the Interested Parties will be informed of the mandatory or optional nature of the provision of personal data. The compulsory or optional nature of the provision of data will be highlighted by means of a notice or a special character to the information of a compulsory nature. Finally, please note that failure to provide optional personal data will not result in any obligation or disadvantage.
- To whom we disclose personal data
Personal data provided may be disclosed:
to personnel employed by Amtab S.p.A. or acting as data processors for the management of the paperwork necessary to carry out the service you have requested. The above-mentioned personnel have been duly trained in the security and confidentiality of personal data;
to the Municipal and Regional Administration, Social Security Bodies (INPS and INAIL), Financial Administration, Tax Police organs, Guardia di Finanza, Hygiene Office, Supervisory and Control Authorities and in general to all bodies in charge of verifications and controls about the regularity of the fulfillments referred to the purposes mentioned above;
Third-party companies or other entities that perform outsourced activities on behalf of Amtab S.p.A.;
In any case, no personal data will be disseminated.
- Data Transfer
The management and storage of personal data will take place on servers located within the European Union. Currently, the servers used are located in Italy. The data will not be transferred outside the European Union. It is in any case understood that Amtab S.p.A., where it deems it necessary, will have the right to change the location of the servers in Italy and/or in the European Union and/or in countries outside the EU. In this case, Amtab S.p.A. assures as of now that the transfer of data to non-EU countries that do not ensure adequate levels of protection will be carried out only after the conclusion, between Amtab S.p.A. and said parties, of specific contracts containing appropriate safeguard clauses and guarantees for the protection of personal data (e.g. standard contractual clauses approved by the European Commission) or only in the presence of other requirements that comply with applicable Italian and European regulations.
- Mode of treatment.
The User's personal data will be processed by automated and non-automated means, ensuring the use of appropriate security and organizational measures and guaranteeing the confidentiality of such data. It should also be noted that calls to the toll-free number will be recorded for verification of service quality and better management of reports and/or complaints (for the protection of telephone operators and for the defense of Amtab S.p.A. in court).
- Period of data retention
The data collected will be retained for the duration of the services requested and, even after termination, for the fulfillment of any legal obligations related to or arising from them, unless the User has given explicit consent in relation to some of the services offered; in the latter case, the processing may last until the consent is revoked.
Therefore, the criteria used to determine the retention period are established by:
(i) specific legal regulations, which govern the activities of Amtab S.p.A;
(ii) by the terms established by the Municipality of Bari, in cases where Amtab S.p.A. acts as data controller;
(iii) by tax regulations regarding the processing of administrative-accounting data (10 years); in particular, the retention period required by applicable tax and accounting laws is applied for financial data (e.g., payments, refunds, etc.).
Finally, personal data may also be kept for as long as permitted by Italian law to protect the legitimate interests of Amtab S.p.A. (art. 2947, co. 1 and 3 c.c.).
For more and more detailed information, with reference to specific processing activities and on specific categories of personal data processed, you can write to dpo@amtab.it or exercise your access rights as specified below .
- Rights of service users: how to access, correct and delete personal information
The user of the services offered by Amtab S.pA. has the rights provided by the new European legislation on the processing of personal data, namely:
(a) to have confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to such data and to all information relating to such processing;
(b) to obtain rectification of inaccurate personal data without undue delay and to supplement incomplete data, including by providing a supplementary statement;
(c) to obtain the deletion of your personal data if:
- data are no longer necessary in relation to the purposes for which they were collected or processed,
- The data were processed unlawfully,
- data must be deleted to fulfill a legal obligation,
- revoked consent,
- opposes the treatment;
(d) to obtain restriction of processing when one of the following occurs:
- if the accuracy of personal data is disputed, for the period necessary for Amtab S.p.A. to verify said accuracy;
- if the processing is unlawful, we object to the deletion of personal data and instead request that their use be restricted;
- if the personal data are necessary for the establishment or exercise of a right in court of the data subject, although Amtab S.p.A. no longer needs them for the purpose of processing;
- whether the data subject has objected to the processing, pending verification as to whether Amtab S.p.A.'s legitimate reasons prevail over his or her own;
e) to receive in a structured, commonly used and machine-readable format the personal data concerning him/her and to transmit such data to another data controller without hindrance from Amtab S.p.A;
(f) to object, in whole or in part, to the processing; where personal data are processed for scientific or historical research purposes or for statistical purposes, on grounds relating to his or her particular situation, he or she shall also have the right to object to the processing, except where it is necessary for the performance of a task carried out in the public interest;
(g) to revoke, at any time, the consent given (in these cases, revocation of consent does not affect the lawfulness of the processing based on the consent before revocation);
h) to file a complaint with the Garante per la protezione dei dati personali (for more details on how to do this, please visit garanteprivacy.it).
The aforementioned rights may be exercised by request forwarded to Amtab S.p.A., or to the Data Protection Officer by sending:
- an e-mail to the following e-mail address:[dpo@mtab.it]
o
- A communication by certified e-mail to: info@pec.amtabservizio.it
o
- a registered letter with return receipt to the following address "Amtab S.p.A., viale Jacobini, Z.I. - 70132 Bari."
- Changes and updates to this policy
Amtab S.p.A. will take care to modify or simply update, in whole or in part, this information on the processing of data, also in consideration of the modification of the laws or regulations that regulate this matter and protect the rights of service users. Changes and updates, to the users of our services whose data are in our possession, will be notified by e-mail and, in any case, will be made available in the "Transparent Society" section as soon as they are adopted. We therefore ask you to regularly access this section to consult the most recent and updated information.
Last modified: 03/02/2020