STATEMENT PURSUANT TO ARTICLE 13 OF EUROPEAN REGULATION No. 679/2016 (ALSO “GDPR”)
1. DATA CONTROLLER
We would like to inform you that Strada dei Parchi S.p.A., based at Via Giulio Vincenzo Bona 105, 00156 Rome (RM), as the concessionaire of the A24 (Rome-Teramo) and A25 (Torano- Pescara) freeway section and the services connected to them, is the Data Controller of personal data in relation to the processing operations described in more detail below.
Your personal data will be processed, by paper and electronic means, as part of the “Toll Non-Payment Reports” and the consequent deferred payment procedure through an online service provided by a third party acting as an autonomous Data Controller – NEXI Payments S.p.a. with Registered Office and General Management at Corso Sempione 55, 20149 Milan – as the company that owns the technological platform for accepting online payments.
2. TYPES OF DATA PROCESSED
The personal data processed by Strada dei Parchi S.p.A. include common data (first name, last name, photo of the license plate of the motor vehicle to be charged for non-payment of toll, residence address, entry toll booth, exit toll booth of the section of highway conducted under concession by Strada dei Parchi S.p.A., non-payment report number).
3. PURPOSE AND LEGAL BASIS FOR PROCESSING
The personal data collected is processed to fulfill the purposes of the law and the contract, so as to verify the correctness of the mileage transits traveled and consequently calculate the correct toll collection in relation to the route traveled, as well as to enable the payment of the “Online Non-Payment Report” and the processing of the receipt of payment of the same.
The provision of personal data for the above-mentioned purposes must be considered mandatory and, therefore, failure to provide, partial or inaccurate provision of the same may result in the impossibility of proper follow-up to these activities.
4. MODE OF TREATMENT
The personal data collected are processed in compliance with the regulations in force by means of manual, computerized and telematic tools, with logic strictly related to the stated purposes, so as to ensure the security, confidentiality of the data and their minimization.
5. DATA RETENTION TIMES
Your personal data will be kept only as long as necessary for the purposes for which they are collected in accordance with the principle of minimization ex art. 5.1.c) of EU Regulation No. 679/2016 and within the prescriptive terms of the law for documentation having a fiscal, tax and legal nature.
6. RECIPIENTS OF DATA
Only those individuals entrusted with the processing by the Data Controller and belonging to the Sales and Procurement Department, as well as suppliers of goods and services appointed as Data Processors and authorized to carry out processing operations within the scope of the aforementioned activities, may become aware of the personal data collected.
The activities of online settlement of non-payment reports are guaranteed and carried out by NEXI Payments S.p.a. with Registered Office and General Management at Corso Sempione 55, 20149 Milan, Italy, which acts as autonomous Data Controller.
The details of your credit card and/or means of payment used for the balance of the non-payment report or the details of the online transaction are not transmitted to Strada dei Parchi S.p.A., which only receives a notification of payment of the disputed amount.
7. RIGHTS OF INTERESTED PARTIES
Finally, we would like to inform you that Articles 15-22 of EU Regulation No. 679/2016 give data subjects the possibility to exercise specific rights; the data subject may obtain from the Data Controller: access, rectification, erasure, restriction of processing, revocation of consent, as well as portability of data concerning him/her.
The data subject also has the right to object to the processing. In the event that the right to object is exercised, the Data Controller reserves the right not to act on the application, and thus to continue the processing, if there are compelling legitimate reasons to proceed with the processing that override the interests, rights and freedoms of the data subject.
The above rights may be exercised by making a request addressed without formalities to the Data Protection Officer of Strada dei Parchi S.p.a. at the following address: rpd.privacy@stradadeiparchi.it while the Data Processor of Strada dei Parchi S.p.A. for any other request is the p.t. Director of the Commercial and Procurement Department, who can be contacted at the following address: info@stradadeiparchi.it.
We also inform you that should you feel your rights with reference to the protection of personal data have been infringed, you may lodge a complaint with the Guarantor Authority for the Protection of Personal Data with headquarters in Piazza di Monte Citorio n.121, 00186 Rome.
