Information on the processing of personal data
ITITALO, in relation to personal data provided through the present self-declaration, informs You, in accordance with the article 13 Regulation (UE) 2016/679 (“GDPR”) and as an integration of information on the processing of personal data provided for the purchase of ticket, that:
1. Purposes of the processing activities and legal basis: the purpose of the personal data processing is related to the adoption of measures to prevent and contain the contagion from COVID-19 as required by applicable provisions of the Guidelines for information to users and the organizational measures for limiting the spread of COVID-19 in public transport (“Linee guida per l'informazione agli utenti e le modalità organizzative per il contenimento della diffusione del COVID-19 nel trasporto pubblico”) referred to in the Ordinance of the Minister of Health, in agreement with the Minister of Sustainable Infrastructures and Mobility, of 30 August 2021.
2. Data retention period: personal data collected through self-declaration, will be kept for a period not exceeding:
• Fifteen (15) days from the date of the travel purchased (in the case of purchase of a return ticket, the fifteen days retention period starts from the date of that return trip), for all personal data collections done in other manner than the paper form;
• Four (4) months from the date of the travel purchased, in the event of the collection of personal data carried out through the paper form.
3. Recipiens of personal data: personal data collected through self-declaration, exclusively with regard to the declaration relating to the renunciation of travel for the manifestation of COVID-19 symptoms can be communicated to the competent health authority in the cases and in the manner provided by the applicable legal provisions.
4. Methods of the processing activities: the processing will be carried out with logic strictly related to the purposes and in such a way as to guarantee data security.
5. Data subject’s rights: at any time You could exercise Your rights provided by the GDPR (articles from 15 to 21) and, in particular, You have the right to: access, rectification, limitation, opposition, erasure and to lodge a complaint with the competent supervisory authority.
6. Data controller: the data controller is ITALO – Nuovo Trasporto Viaggiatori S.p.A. in the person of Legal Representative, with registered office in Via Casilina, no. 1, Rome, Italy. Any request relating to the personal data processed by ITALO – Nuovo Trasporto Viaggiatori S.p.A. may be sent to the company’s registered office or to its e-mail privacy@ntvspa.it.
7. Data Protection Officer (“DPO”): the DPO contact is dpo@ntvspa.it.
This is an English courtesy translation of the original documentation prepared in Italian language. Please consider that only the original version in italian language has legal value.
