INFORMATION PURSUANT TO ARTICLE 13 OF EU REGULATION N. 2016/679

 

TERMINAL ONE S.p.A., (Tax ID and VAT number: 02776300358) (hereinafter referred to as 'T1'), represented by its pro tempore legal representative, with registered office in Reggio Emilia, via G. Gutenberg, 3, as the Data Controller pursuant to Articles 4 no. 7) and 24 of EU Regulation No. 2016/679 (GDPR), informs you that, in accordance with Article 13 of the GDPR, your information described in Article 1 will be processed for the purpose described in Article 2.

1. Category of personal data subject to processing.
1.1. T1 collects and processes your personal data pursuant to Article 4 no. 1) of the GDPR, such as identification data (e.g., name, surname, license plate number, email address, phone number) (hereinafter referred to as 'personal data'), in order to pursue the processing purpose described in Article 2.

2. Purpose of processing and its legal basis.
2.1. Your personal data is processed by T1 for the following processing purpose:

      1. 1. Execution of your reservation request for a parking space managed by T1, including the performance of various regulatory obligations related to it.

In compliance with Article 13 paragraph 2) letter e) of the GDPR, T1 specifies that the failure to communicate (even partially) your personal data may result in T1's inability to correctly and completely fulfill the processing purpose described in Article 2.1. letter a).

In this regard, T1 specifies that the legal basis for the processing purpose described in Article 2.1. letter a) can be found in the following legal provisions: Article 6 paragraph 1) letters b) and c) of the GDPR."

3. Retention Period.
3.1. In compliance with Article 13 paragraph 2) letter a) of the GDPR, T1 communicates the following retention period/criteria, after which your personal data will be subject to deletion, destruction, or anonymization: (i) for the execution of the processing purpose described in Article 2.1. letter a): 1 year from the final conclusion, with a negative outcome, of a pre-contractual relationship/request (i.e., reservation of a parking space managed by T1); 10 years pursuant to Article 2946 of the Italian Civil Code, starting from the final conclusion of a contractual relationship (resulting from your reservation of a parking space managed by T1), a term that may be extended in order to allow T1 to fulfill regulatory obligations (even if they arise subsequently) or to assert or defend a right, even in a judicial context.

4. Recipients.
4.1. In compliance with Article 13 paragraph 1) letter e) of the GDPR, T1 specifies that your personal data may be disclosed, when necessary and appropriate, to one or more recipients pursuant to Article 4 no. 9) of the GDPR, generally categorized as follows: (i) for the execution of the processing purpose described in Article 2.1. letter a): subjects authorized by T1 to process the data; consultants or companies of various types that provide services and/or performances (including professional services) related, directly or indirectly, to the fulfillment of the specified purpose (e.g., IT companies/tax consultants).

5. Trasfer.
5.1. T1 specifies that your personal data is stored within automated, partially automated, or non-automated records owned or attributable, directly or indirectly, to T1 and located within the European Economic Area (EEA).

6. Data Subject's Rights.
6.1. In relation to your personal data, T1 informs you of the option to exercise the following rights, subject to the limitations provided for in Articles 2 undecies and 2 duodecies of the Privacy Code: the right of access under Article 15 of the GDPR: the right to obtain confirmation of whether or not personal data is being processed, as well as the information listed in Article 15 of the GDPR (e.g., processing purposes, retention period); the right to rectification under Article 16 of the GDPR: the right to correct, update, or supplement personal data; the right to erasure under Article 17 of the GDPR: the right to obtain the erasure, destruction, or anonymization of personal data, provided that the conditions listed in the same article are met; the right to restriction of processing under Article 18 of the GDPR: a right with a clear protective nature aimed at obtaining the limitation of processing in cases specified by the same Article 18; the right to data portability under Article 20 of the GDPR: the right to receive personal data provided to the Data Controller in a structured, commonly used, and machine-readable format (and, if requested, to transmit it directly to another Data Controller), subject to the specific conditions indicated in the same article (e.g., legal basis of consent and/or performance of a contract; personal data provided by the data subject); the right to object under Article 21 of the GDPR: the right to permanently cease a specific processing of personal data; the right to lodge a complaint with the Supervisory Authority (i.e., the Italian Data Protection Authority) under Article 77 of the GDPR: the right to lodge a complaint when it is believed that the processing under analysis violates national and EU data protection regulations.

6.2. In addition to the rights described in the preceding Article 6.1., the Data Controller specifies that, in relation to your personal data, there is, where possible and relevant, the right to exercise, on the one hand, the (sub) right provided for in Article 19 of the GDPR ("The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1), and Article 18 to each recipient to whom the personal data have been disclosed unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it."), which is considered connected and related to the exercise of one or more rights regulated by Articles 16, 17, and 18 of the GDPR; on the other hand, the Data Controller specifies that, in relation to your personal data, there is, where possible and relevant, the right provided for in Article 22 paragraph 1) of the GDPR ("The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her"), subject to the exceptions provided for in the subsequent paragraph 2).

6.3. In accordance with Article 12 paragraph 1) of the GDPR, T1 commits to provide communications in accordance with Articles 15 to 22 and 34 of the GDPR in a concise, transparent, intelligible, easily accessible, and plain language: such information will be provided in writing or by other electronic means or, upon request of the data subject, orally, provided that their identity is proven by other means

6.4. In accordance with Article 12 paragraph 3) of the GDPR, T1 informs that it undertakes to provide information regarding the action taken in response to a request under Articles 15 to 22 of the GDPR without undue delay and in any event within one month of receipt of the request; this period may be extended by two months if necessary, taking into account the complexity and number of requests (in such case, T1 commits to inform you of such extension and the reasons for the delay within one month of receiving the request).

6.5. The aforementioned rights (except for the right under Article 77 of the GDPR) can be exercised using the contact details provided in the following Article 7.

7. Contact Information.
7.1. T1 can be contacted at the following address: terminalonepec@legalmail.it
Reggio Emilia (RE), November 15, 2022 (last updated).

TERMINAL ONE S.p.A.
(by its pro tempore legal representative)