We apologize for the inconvenience. Currently this section is available only in Italian
In compliance with the provisions of EU Regulation 2016/679 on personal data protection of the European Parliament and Council (hereinafter “GDPR”), we offer the necessary information regarding the processing of personal data. This notice is provided pursuant to article 13 of the GDPR on the protection of natural persons with regard to the processing of personal data.
ATAC S.p.A. (hereinafter "Controller"), acting as data controller, informs you that the personal data (hereinafter, "data") provided by you, will be processed by Atac S.p.A. in the manner and for the purposes specified below.
1. Legal basis and purpose of data processing
The collected personal data are provided directly by the interested party and are processed exclusively for the purposes for which they are collected, in compliance with the lawfulness of processing (article 6 of EU Regulation 2016/679), as described below.
Data provided by interested parties are used:
2. Data provision, possible refusal or withdrawal of consent
The provision of data for the sending of newsletters for promotional purposes is optional, but necessary to carry out the activities referred to in paragraph 1 and the refusal to give your consent to the processing will make it impossible to be updated on commercial initiatives and/or promotional campaigns, as well as to receive offers or other promotional material.
Personal data cannot be disclosed.
The interested party can withdraw his consent to receive promotional and commercial communications at any time by clicking on the unsubscribe link that can be found in the footer of every promotional and commercial email received.
3. Data communication
Data processors may get to know personal data and communicate them to internal and/or external partners, to whom communication is necessary for the correct fulfilment of the customer’s request.
4. Transfer of personal data to third countries
Personal data are stored on servers located within the European Union at our data centres in Via Sondrio n. 18 and/or Via Prenestina n. 45 - 00176 Rome; the data will not be transferred outside the European Union.
5. Processing methods
The processing of your personal data is based on the principles of fairness, legality and transparency. Your personal data are subject to both paper and electronic processing.
The processing usually takes place at the headquarters of the company Atac S.p.A. and is done by personnel or internal collaborators duly designated as data processors for the sending of newsletters and for the time necessary to fulfil the above mentioned purposes. The processing will be strictly related to the indicated purposes and use methods that guarantee security and confidentiality of the data.
The registration and pertaining data processing are considered valid until the unsubscription by the user, through the specific link that can be found in every email or after 12 months from the last communication of which there is evidence of direct interaction (opening click).
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
6. Data retention period
The processing will be carried out in an automated and manual form, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed for this task.
In compliance with article 5, paragraph 1, letter e) of EU Regulation 2016/679, the personal data collected will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
The retention of the personal data provided depends on the purpose of processing:
for the reception of newsletters or promotional communications via email - maximum 24 months.
7. Rights of the data subject
At any time, pursuant to articles 15-22 of EU Regulation no. 2016/679, you have the right to:
a) ask for confirmation of the existence or not of your personal data;
b) obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, their retention period;
c) obtain the correction and deletion of data;
d) obtain the limitation of the processing;
e) obtain data portability, i.e. receive them from a data Controller, in a structured and commonly used format and readable by an automatic device, and transmit them to another data Controller without hindrance;
f) oppose the processing at any time, also in the case of processing for direct marketing purposes;
g) oppose an automated decision-making process relating to natural persons, profiling included;
h) ask the data Controller access to your personal data and correct or cancel them, limit their processing or oppose their processing, in addition to the right to data portability;
i) withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
j) submit a complaint to the supervisory authority.
You can exercise your rights, in whole or in part, for reasons legitimate to the processing of your personal data, even if pertinent to the purpose of the collection. In particular, the data subject has the right to object to the processing of personal data concerning him for the purpose of sending commercial advertising material or commercial communications.
You will have to send a written request via email to the contacts of the Data Controller or of the Data Protection Officer, that you find in paragraphs 8 and 9 of this notice, by filling in the appropriate form that can be downloaded by clicking here.
8. Contact details of the data Controller
The Controller of the processing of your personal data is ATAC S.p.A. in the person of its pro tempore legal representative, with registered office in Rome Via Prenestina n. 45 - 00176. To exercise the rights provided for by the law and better specified above, you can contact the Controller at the following certified email address: protocollo@cert2.atac.roma.it
9. Contact details of the Data Protection Officer
Hereinafter the contact details of the Data Protection Officer (DPO): Via Prenestina n. 45 - 00176 Rome, email: responsabileprotezionedati@atac.roma.it