Informativa Privacy

(in conformità all’art.13 del Regolamento UE n. 2016/679)

Data Controller and DPO

The Data Controller is CILIA Italia S.r.l., which can be contacted via email at cilia-italia@pec.it or by sending a letter to CILIA Italia S.r.l. – Privacy Owner – Via Valvarina 1, 00036 Palestrina (RM). The DPO can be contacted by writing to DPO@cilia-italia.com or by sending a letter to CILIA Italia S.r.l. – Privacy Owner – Via Valvarina 1, – 00036 Palestrina (RM) – Italy.

Types of Personal Data

CILIA Italia S.r.l. collects personal data directly from the customer (hereinafter also referred to as the “Data Subject”) such as, but not limited to, name, address, email address.

Purposes of Processing

Personal data is collected for the purpose of: a) managing customer relations for the issuance of subscriptions and travel tickets; b) handling information requests/reports collected on the company’s official website. The legal basis for processing is for the purpose of executing a contract pursuant to Article 6(1)(b) of EU Regulation 2016/679;

Recipients of Data

Personal data will be processed exclusively by employees of CILIA Italia S.r.l. The data may be visible to companies commissioned by CILIA Italia S.r.l. for the review of IT procedures. CILIA Italia S.r.l. will not transfer the data to a third country or an international organization. The data is not subject to automated decision-making.

Data Retention

Personal data will be stored for the purpose of: a) data provided during the presentation for the issuance of subscriptions and travel tickets will be stored for 5 years to allow the Company to defend itself against possible claims related to the request;

b) data provided during the submission of information and/or reporting of service anomalies will be stored for 5 years for the management of information requests and/or reports to allow the Company to defend itself against possible claims related to the request. At the end of the respective retention periods, the data will be deleted or otherwise irreversibly de-identified, unless further retention of some or all of the data is required by law.

Rights of the Data Subject

The Data Subject has the right to:

  • request confirmation from CILIA Italia S.r.l. whether or not personal data concerning them is being processed and, if so, to gain access to it (Article 15 of EU Regulation 2016/679);
  • request CILIA Italia S.r.l. to rectify inaccurate personal data concerning them and/or to complete incomplete personal data (Article 16 of EU Regulation 2016/679);
  • request CILIA Italia S.r.l. to delete data processed for the purpose of managing customer complaints only if the personal data:
    are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    have been unlawfully processed, must be deleted to comply with a legal obligation under EU or Member State law to which the controller is subject (Article 17 of EU Regulation 2016/679).
  • request CILIA Italia S.r.l. to restrict processing when one of the following applies:the Data Subject contests the accuracy of the personal data, requesting its restriction for the time necessary for the controller to verify its accuracy;
    the processing is unlawful, and the Data Subject opposes the deletion of the data and requests the restriction of their use instead, although the controller no longer needs the data for processing purposes, the personal data are required by the Data Subject for the establishment, exercise or defense of legal claims (Article 18 of EU Regulation 2016/679).

The Data Subject can exercise their rights by writing to cilia-italia@pec.it or by sending a letter to CILIA Italia S.r.l. – Privacy Owner – Via Valvarina 1, 00036 Palestrina (RM); The Data Subject does not have the right to object to the processing of data collected for the management of complaints and/or service anomaly reporting because the processing is based on Article 6(1)(b) of EU Regulation 2016/679 (execution of a contract) and not on Article 6(1)(e) – execution of a task in the public interest – or (f) – legitimate interest of the controller (Article 21 of EU Regulation 2016/679).

The Data Subject has the right to lodge a complaint with a supervisory authority if they believe that the processing concerning them violates EU Regulation 2016/679. The complaint can be lodged with the supervisory authority of the Member State where the Data Subject habitually resides, works, or where the alleged violation occurred (Article 77 of EU Regulation 2016/679). Personal data is necessary for the conclusion of processing, in its absence, it will be impossible to manage the complaint and/or report service anomalies.

Devices for the reconstruction of accidents installed on the buses of Cilia Italia S.r.l.

Notice in accordance with Article 13 of EU Regulation No. 2016/679

Cilia Italia S.r.l. informs the data subjects, in accordance with the Provision No. 368 of 29.11.2012 by the Italian Data Protection Authority, that on its buses, identifiable by specific pictograms placed on the front entrance door of the vehicles equipped with them, devices called Dashcam Autoroute have been installed, capable of reconstructing the dynamics of road accidents and passenger injuries.

These devices automatically record images immediately before and after the event, related to the road in front of the vehicle as well as its interior area, without capturing the driver, when conditions suggest that the bus may be involved in an incident.

The same device can also be activated by the driver for the further purpose of safeguarding the safety of customers, staff of Cilia Italia S.r.l., individuals accessing the bus, and protecting company assets.

The data collected by the device may be communicated, in the event of an accident, to the Insurance Institute for the protection of rights, even without the consent of the data subjects.

Such data, processed exclusively by subjects appointed by the Data Controller or the Data Processor in accordance with the prescriptions dictated on data security, will not be subject to dissemination.

The retention of images, in the event of an accident, is provided for until its resolution and in any case not beyond the limitation periods established by law.

Data subjects can exercise their rights, as provided for in the Notice described above, in the section Rights of the Data Subject (click here) Insert the internal link to the Rights of the Data Subject section of the previous notice.

 

Data Protection Officer (DPO)

The DPO designated by Cilia Italia S.r.l. in accordance with the European Regulation No. 679/2016 (GDPR) on the protection of personal data, who will act as the contact point for all data subjects, can be reached through the following contact channels:

 

  • Email: dpo@cilia-italia.com
  • Fax: +39 055 8490432
  • Mail: CILIA Italia S.r.l. – Privacy Owner – Via Valvarina 1, – 00036 Palestrina (RM) – Italy