PRIVACY POLICY AND COOKIES
Information note pursuant to Legislative Decree No. 196 of 2003 and EU Regulation 2016/679 ("GDPR")
and Legislative Decree No. 101 of August 10, 2018
(Art. 13 of EU Regulation 679/2016)
With this statement, made pursuant to Article 13 of EU Regulation 679/2016, "Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC - General Data Protection Regulation", we are providing you with information about the processing of personal data concerning you.
In compliance with the provisions of the relevant regulatory provisions, the methods and purposes of the processing of personal data through the website www.milanoradiotaxi.it are outlined below .
The Autoradiotassi Cooperative Society (radio cab 028585), has the mutualistic purpose, and therefore aims to provide goods and services to its cooperative members, licensed to operate public square cab service in order to facilitate the operation of their respective business activities with individual cooperative members' own vehicles.
DATA CONTROLLER
Autoradiotassi Società Cooperativa (radio cab 028585), the data controller, hereby informs that the personal data of the data subjects are processed in strict compliance with the principles of Article 5 of the GDPR and the lawfulness of the processing itself (Article 6 GDPR). Autoradiotassi Società Cooperativa has its registered office and operational headquarters at Via Gioacchino Murat n. 23/25, 20159, Milan, Italy, tax code/taxpayer's code 03137090159 e mail privacy@028585.it, certified mail address (PEC) radiotaxi028585@pec.it, Tel. (+39) 02.6070978+1.+1
The updated list of Data Processors and Processed Persons is kept at the registered office of the Data Controller.
DATA PROTECTION RESPONSIBLE - DPO (Data Protecion Officer).
The Data Controller has appointed a Data Protection Officer (DPO), who is responsible for overseeing the correct application of EU Regulation 679/2016 for the purposes of data protection, in the person of Attorney Maurizio Nestonni, electively domiciled, at the offices of the Data Controller. The DPO can be reached directly at the e mail address privacy@028585.it to provide at the request of data subjects any information related to the data and/or this Policy. The Data Controller and the DPO will respond to any requests and provide the data subject, without undue delay and in any case, at the latest, within 15 (fifteen) days of receipt of the same, with information regarding the action taken in this regard. If the Data Controller has doubts about the identitỳ of the natural person making the request, it may request additional information necessary to confirm the identity of the data subject.
DATA COLLECTED.
"Personal data" is defined as "any information relating to an identified or identifiable natural person ("data subject")" received by the Data Controller as part of the preparation, conclusion and execution of the business relationship. An identifiable person is defined as "a natural person who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity."
Here, the data collected by the Holder as identifying and non-sensitive (e.g., first name, last name, pickup address, phone, etc.), are collected by the Operations Center for the purpose of assigning a Taxi to the ride.
Therefore, with this notice it is intended to communicate that the use of personal data is reduced to the minimum necessary and in such a way as to exclude processing when the purposes pursued in individual cases can be achieved through the use of anonymous data or by other means, which allow identification of the data subject only in cases of necessity or at the request of the authorities.
For exclusively organizational and functional needs, a number of internal and external data processors have been appointed to process the personal data of site users, for purposes strictly related to safeguarding the proper provision of services on the site and to protect the same confidentiality and security. The managers carry out the processing of personal data of users of the site according to the instructions given by Autoradiotassi Cooperative Society.
EXPLICIT CONSENT OF THE PERSON CONCERNED
From Autoradiotassi Soc. Coop. is always requested an explicit consent of the person concerned to the processing of his personal data both at the time of the call made to the Operation Center (028585) and in the site registration.
Explicit consent to privacy is also provided after reading this policy by clicking on the check box that appears on the registration section.
This consent is requested only at the time of registration and counts as acceptance of cookies.
WAYS.
Pursuant to Article 4 of EU Regulation 679/2016, the processing of personal data consists of any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.
The processing of personal data is carried out through the use of electronic or otherwise automated tools, in compliance with the rules of confidentiality and security required by current legislation. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
The personal data provided are processed lawfully, correctly and transparently through manual and computer processing by persons authorized for processing by the owner.
The personal data collected are hosted and protected at the Registered Office located at Via Gioacchino Murat 23/25, 20129, Milan. Autoradiotassi Soc. Cooperativa does not use automated technologies for decision making or profiling.
The personal data provided will not be disclosed or disseminated.
ACCESS TO PERSONAL DATA OF THE DATA SUBJECT
The data subject's personal data may be made accessible to employees and associates of the Data Controller, in their capacity as data processors and/or system administrators;
PURPOSE
The data collected by the operations center is solely for the purpose of connecting the customer (the data subject) with the cab licensed to make the ride and make possible the implementation of public service over private transportation.
Specifically, once you contact the Operations Center (028585) you will be required to provide personal information such as your first and last name, phone number, and pick-up address to be reached by cab.
The request to report a call sign is necessary to ensure that the service is rendered to the person who actually requested it mind the collection of the phone number may sometimes be needed by the Operations Center to report an advance or delay of the cab to the pickup .
The collection of such data is necessary for the provision of the requested service. The partial or inexact failure to provide personal data could generate, as a consequence, the non-delivery or incorrect delivery of the service.
The processing of such personal data is solely for the purpose of booking the cab and (a) connecting the customer with the Taxi licensed for that ride.
PLACE
Processing related to the services takes place at the Offices in Via Gioacchino Murat 23/25, 20159, Milan, which provides for the management of the data provided. Autoradiotassi Società Cooperativa guarantees that the processing of data complies with the provisions of the legislation on the protection of personal data. See in this regard www.garanteprivacy.it.
FTRANSFER OFPERSONAL DATA
The data will not be transferred either to European Union member states or to non-European Union countries
SCOPE OF COMMUNICATION AND DIFFUSION
The data collected will never be disseminated and will not be subject to communication without explicit consent, will be kept at the Legal Office and may be shared with individuals, authorized to process by Autoradio Tassi Soc. Coop, in accordance with art.29 of the GDPR, except for necessary communications that may involve the transfer of data to public bodies, consultants or other entities for the fulfillment of legal obligations.
EXISTENCE OF AUTOMATED DECISION MAKING, INCLUDING PROFILING
Autoradiotassi Soc. Coop. does not adopt any automated decision-making processes, including profiling, as referred to in Article 22(1) and (4) of EU Regulation No. 679/2016.
RETENTION PERIOD
The personal data provided by the interested party will be processed by Autoradiotassi Soc. Cooperativa for the purpose indicated above will be kept for a maximum period of 30 (thirty) days.
After that time they will be deleted.
Such storage, once the specific purposes for which they were requested have been exhausted subject to compliance with punctual legal obligations, is carried out for the sole purposes pertaining to the return of items lost by the customer or the handling of any disputes related to the performance of the service.
At any time, the data subject has the right to revoke consent to data processing or to request deletion of his or her data by writing to the e-mail address: privacy@028585.it. Following such a request, personal data will be removed and deleted within 7 working days.
DISCLOSURE EXTENDED TO OTHER PERSONAL DATA
NAVIGATION DATA
This website uses technical cookies to ensure the proper functioning of procedures and improve the user experience of online applications. This document provides information on the use of cookies and similar technologies, (on their use and management).
The computer systems and software procedures used to operate the website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, at present the data on web contacts do not persist for more than seven days.
Cookie
Disclosure and acquisition of consent for the use of cookies on the www.milanoradiotaxi.it portal for the protection of personal data.
What are cookies?
Cookies are small text strings that sites visited by the user send to the user's terminal (usually the browser), where they are stored and then transmitted back to the same sites on the next visit by the same user.
In the course of browsing a site, the user may also receive cookies on his terminal that are sent by different sites or web servers (so-called "third parties"), on which some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the site he is visiting may reside.
According to the characteristics and use of cookies, several categories can be distinguished:
Technical cookies
Technical cookies are those used for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service.
They are not used for any further purposes and are normally installed directly by the owner or operator of the website.
They can be divided into navigation or session cookies, which ensure the normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); analytics cookies, assimilated to technical cookies where used directly by the operator of the site to collect information, in aggregate form, on the number of users and how they visit the site itself; functionality cookies, which allow the user to navigate according to a set of selected criteria (for example, language, products selected for purchase) in order to improve the service rendered to the same.
Technical navigation cookies
Use of these cookies allows the site to function properly and are used to collect information about how visitors use the site. This information is used to compile reports and to improve the site. cookies collect information anonymously, including the number of visitors to the site, where visitors came from, and the pages they visited.
Third-party cookies
these cookies are used by third-party companies. the use of these cookies normally does not involve the processing of personal data. third-party cookies are derived from ads from other sites, such as advertisements, on the displayed website. they may be used to record website usage for marketing purposes.
Cookie analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to, and stored on, Google's servers in the United States. Google (the independent data controller) will use this information for the purpose of tracking and examining your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse to use cookies by selecting the appropriate setting on your browser, but this may prevent you from using the full functionality of this website.
INFORMATIVE
Duration of cookies
Anyi cookies (session cookies) remain active only until the browser is closed or anylogout command is executed. Other cookies "survive" when the browser is closed and are available on subsequent visits by the user. These cookies are called persistent and their duration is set by the server when they are created. In some cases an expiration date is set, in other cases the duration is unlimited.
How to disable cookies
Most Internet browsers are initially set to accept cookies automatically. The user can change these settings to block cookies or to warn that cookies are being sent to the user's own device. In the case of different devices (e.g., computers, smartphones, tablets, etc.), the user should ensure that each browser on each device is adjusted to reflect their cookie preferences. Please note that disabling cookies does not guarantee full functionality of the websites.
Cookies are used to improve the services we offer, for example:
They allow a service to recognize your device, to prevent you from entering the same information multiple times during the course of an activity.
They recognize that you have already provided a user name and password when you logged in to the web portal www.milanoradiotaxi.it so you don't have to repeat the operation for each required web page.
They calculate how many users are using the services, so as to facilitate their use and ensure the necessary capacity for fast browsing.
If permission to use cookies is missing certain features and pages may not work as intended.
Optional provision of data
Apart from what has been specified for navigation data, the user is free to provide the personal data indicated in the forms or registration procedures. Failure to provide them may make it impossible to obtain what has been requested.
EXERCISE OF THE PERSON CONCERNED
Any individual using the services from Autoradiotassi Soc. Cooperativa may:
to obtain from the Data Controller, at any time, information about the existence of their personal data, the origin, the purposes and methods of processing and, if any, to obtain access to personal data and information, to know the storage period;
Exercise the right to file a complaint with the Italian Data Protection Authority, as set forth in Article 15 of the GDPR;
Please note that for any questions or requests regarding your personal data and respect for privacy you can write to the dedicated address privacy@028585.it.
RIGHT OF THE DATA SUBJECT (Art.15 -20 of EU Regulation 2016/679)
The Data Subject has the right to obtain the following from the data controller:
(a) confirmation as to whether or not personal data concerning him or her is being processed, and if so, to obtain access to the personal data and the following information:
the purposes of processing;
the categories of personal data in question;
The recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly if recipients in third countries or international organizations;
when possible, the intended retention period of personal data or, if not possible, the criteria used to determine this period;
the existence of the data subject's right to request from the data controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing;
The right to file a complaint with a supervisory authority;
where the data are not collected from the data subject, all available information about their origin;
the existence of automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic used, as well as the significance and expected consequences of such processing for the data subject;
The appropriate safeguards that the third country (non-EU) or an international organization provides to protect any data transferred.
(b) a copy of the personal data undergoing processing, provided that́ this right does not infringe the rights and freedoms of others; In the case of further copies requested by the data subject, the data controller maỳ charge a reasonable fee based on administrative costs;
(c) the rectification of inaccurate personal data concerning him/her without undue delay;
(d) the deletion of personal data concerning him/her without undue delay, if the grounds provided for by the GDPR in Article 17 exist, including, for example, if they are no longer necessary for the purposes of the processing or if the processing is assumed to be unlawful, and provided that the conditions provided for by law are met; and in any case if the processing is not justified by another, equally legitimate reason;
e) the limitation of processing, in the cases provided for in Article 18 of the GDPR, for example where the data subject has disputed its accuracy, for the period necessary for the Data Controller to verify its accuracy. The Data Subject must also be informed, in an appropriate timeframe, when the period of suspension has expired or the cause for the restriction of processing has ceased to exist, and thus the restriction itself lifted;
(f) communication from the owner of the recipients to whom requests have been transmitted of any rectification or cancellation or restriction of processing carried out, unless this proves impossible or involves a disproportionate effort;
(g) the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her and the right to have such data transmitted to another controller without hindrance by the controller to whom he or she has provided them, in the cases provided for in Article 20 of the GDPR, and the right to obtain the direct transmission of personal data from one controller to another, if technically feasible.
For any further information and in any case to send the request one can contact the Data Controller at privacy@028585.it . In order to ensure that the above rights are exercised by the Data Subject and not by unauthorized third parties, the Data Controller may request the Data Subject to provide any additional information necessary for this purpose.
PRMODALITYOF EXERCISING RIGHTS
For the purposes of exercising the rights set forth in Articles 7 of Legislative Decree 196/03 and 15 et seq. of EU Reg. 2016/679, the Data Subject may at any time exercise the rights by sending:
e-mail to the following address: privacy@028585.it.;
by sending a registered letter addressed to Autoradiotassi Soc.Coop. Via Murat 23/25 20159 Milan, Italy.
It should be noted at the outset that before any information can be provided, or changed, it may be necessary to verify the identity of the Data Subject.
RIGHT OF COMPLAINT
Interested parties in the event that they believe that the processing of personal data referring to them is carried out in violation of the provisions of EU Regulation 679/2016 have the right to lodge a complaint with the Guarantor, as provided for in Article 77 of EU Regulation 679/2016 itself, or to take appropriate legal action, Article 79 of EU Regulation 679/2016.
Updating this privacy policy
The Owner reserves the right to modify and update this document, therefore, please refer to the privacy policy on the website www.028585.it.