In compliance with the obligations arising from EU legislation, (European Regulation for the protection of personal data no. 679/2016, GDPR) and national (Legislative Decree June 30, 2003 no. 196, Code for the protection of personal data) and subsequent amendments.
We wish to inform you that, pursuant to art. 13 and 14 of DGPR 679/2016 and art. 13 of Legislative Decree 196/2003, the information and data acquired by AUTOSTRADA ASTI-CUNEO S.p.A. will be processed in compliance with the principles referred to therein.
This information is addressed to all the subjects interacting with AUTOSTRADA ASTI-CUNEO S.p.A., including the company’s website.
- Types of Data Collected
AUTOSTRADA ASTI-CUNEO S.p.A. collects some Personal Data such as, by way of example, name, surname, date of birth, address, sex, nationality, email contact, other data that may be necessary for the purposes of managing the service and any photographic images of the vehicle in the event of anomalies on the road relating to the toll due.
The processing of all this Personal Data will be carried out in compliance with the reference legislation, reminding you that consent does not need to be given in order to use the highway service.
- Purpose of processing
The processing of the collected data is aimed at managing the highway service with specific reference to the contractual obligations arising from the use of the service and concerning the functions carried out by AUTOSTRADA ASTI-CUNEO S.p.A., such as:
communications with the user regarding the use of the service and the infrastructure as well as toll transactions and any related requests, carried out by AUTOSTRADA ASTI-CUNEO S.p.A., as Concessionaire;
communications with the user regarding security arising from the use of the service and infrastructure;
communications of a contractual nature with customers and/or suppliers regarding administrative, commercial, fiscal, legal relations that may arise;
interventions on the site or by e-mail;
guarantee any obligations arising from the relationship established with the user;
- Processing methods
Personal Data can be processed on paper, computerized and telematic form and inserted in the relevant databases which can be accessed, and therefore come to the attention of operators, who can carry out consultation, use, processing, comparison and any other appropriate automated operation in compliance with the provisions of the law necessary to ensure, among other things, the confidentiality and security of data and the accuracy, updating and relevance of the data in relation to the stated purposes.
In addition, we inform you that the computer systems and software procedures used to operate the service and the website may acquire, during their normal operation, your Personal Data, the transmission of which is implicit in the use of Internet communication protocols. It is, however, information that is not collected to be associated with specific individuals, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters regarding the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
We inform you that the data managed as a result of contractual relationships established with AUTOSTRADA ASTI-CUNEO S.p.A. will therefore be treated in compliance with the laws in force D.Lgs. 196/03 and Regulation (EU) 2016/679 and used only for the purposes aimed at the proper functioning of business activities and the service offered.
- Nature of data conferment
The conferment of data is:
Obligatory for the achievement of the purposes related to obligations under laws, regulations or legislation;
Optional, but sometimes necessary for the correct establishment and/or continuation of the relationship with our Company, and for the correct navigation on the site.
Any refusal to provide data or their incompleteness may determine the impossibility of the owner to implement the services in their entirety and legal obligations.
- Scope of Data Communication
Your data may be communicated, where necessary for the provision of services, to the staff of our Company (related to the Concessionaires, and the following areas: Information Systems, Administration, Legal, Exercise, Technical also depending on the purpose to be achieved possibly on the basis of the request of the person concerned), third party companies also involved in access control and/or surveillance services, companies that provide computer and plant services in relation to the activities carried out.
The areas of communication mentioned above, do not require your authorization as they are functional to the provision of services, to defend a right in court or to pursue a legitimate interest of the owner. For any further communications that require your prior consent, we will do so.
- Data retention period
The personal data collected, also taking into account any choices made by the interested parties relating to cancellation or revocation during processing, will be processed for a period corresponding to the needs for which they were collected, in compliance with contractual obligations with the interested party or according to applicable laws or regulations or for a period deemed appropriate for defense in case of litigation.
- Owner – DPO and Data Processors
The Data Controller, for all the processing purposes expressed in this information notice, (hereinafter the “Data Controller”) is AUTOSTRADA ASTI-CUNEO S.p.A. with registered office in Turin, Via Bonzanigo 22 – 10144.
For the implementation of the provisions of the law as well as the operational functioning of certain services, the following figures have been appointed:
DPO (Data Protection Officer);
The Data Controller can be contacted by writing to: firstname.lastname@example.org.
The DPO can be contacted by writing to the privacy address: email@example.com.
- Rights of the interested party
As foreseen by the regulation, you have the right to know which personal data is used, its origin, verify its accuracy or request its integration or updating, or correction or limitation. It also has the right to request cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, to their processing and to modify or revoke the consents previously provided, without affecting the lawfulness of the processing based on the consent given before the revocation.
We also inform you that you have the right to complain to the Guarantor of the protection of personal data whose references you will find at the following link www.garanteprivacy.it.
Requests can be directed in writing to: firstname.lastname@example.org.