Privacy notice on
the processing of personal data according to articles 13-14 of Regulation (EU)
2016/679
Updated on 15/05/2018
Data controller
The Data Controller in
accordance with the Law and Regulation (EU) 679/2016 is:
DOTTO srl (via Borgo Pieve, 115
Casella postale 156 31033 Castelfranco Veneto (TV) – Italy)
e-mail: info@dottotrains.com
telephone: +39 0423 723020
VAT number: 02039610262
represented by its legal
representative pro tempore.
We wish to inform you that the
abovementioned regulation contains provisions to protect data subjects with
regard to the processing of personal data and such processing will be based on
the principles of lawfulness, fairness and transparency and protection of your
privacy and your rights in compliance with the provisions of Regulation (EU) 679/2016
and Legislative Decree 196/2003.
Purpose of the
processing.
Purpose of the processing: your
data will be processed for the following purposes related to the performance of
legislative or contractual obligations:
- the purposes necessary for the establishment, exercise or defence of legal claims or whenever courts
are acting in their judicial capacity;
- the purposes of advanced browsing and personalised content management;
- the purposes relating to the performance of a contract to which you
are a party, or the performance of pre-contractual measures undertaken on
your request (e.g. a contact request via the Contacts form, etc.);
- the purposes of statistical research/analyses on aggregated or
anonymous data, without therefore the possibility of identifying the data
subject, to measure the operation of our Website, the traffic and assess usability
and interest.
The processing of functional data
for performing such obligations is necessary to properly manage the
relationship and providing them is mandatory for carrying out the purposes
indicated above. The Data Controller
also declares that any failure to provide, or the incorrect provision of, any
of the mandatory information, may make it impossible for the Data Controller to
ensure the adequacy of this processing.
Methods of
processing.
Your personal data may be
processed in the following ways:
- by means of electronic computers using software systems managed by
third parties;
- by means of electronic computers using software systems managed or
programmed directly;
- temporary processing in anonymous form.
All processing is done in
compliance with the procedures referred to in articles 6 and 32 of the GDPR and
via the adoption of the appropriate security measures envisaged.
Communication of
personal data:
The collection of personal
data acquired in anonymous format with cookies for the operation of the website
is documented in the full notice on cookies which can be viewed by following
the link shown at the bottom of the website pages (footer).
Your personal data, which may
be voluntarily entered in the services available on this website, will be
processed and managed for the purposes and performance of the services required
to properly manage the relationship requested, while guaranteeing that the rights
of the data subject are protected.
Your data shall only be
processed by personnel expressly authorised by the Data Controller and, in
particular, by the following categories of company employees:
- direction
- administration department;
- commercial department.
In the event the personal data
require the performance of a service that involves the sending of informative,
promotional, electronic communications in compliance with the terms and
authorizations issued by the data subject, the company may use the external services
of third parties specialized in the management of such a service. In this case the data controller will be
responsible for specifying precisely the terms of the service and request
consent under the terms of this regulation.
Contact request form
The personal data voluntarily entered in the contact form and in the
presence of specific consent, are the minimum requirement to properly manage
the request and fall within the category of mandatory data. The user will specify directly the details of
the information requested in the reasons for the contact request (notes field).
Quote Request Form
The personal data voluntarily entered in the contact form are the minimum
requirement to properly manage the request and fall within the category of mandatory
data. The user will specify directly the
details of the information requested in the reasons for the contact request
(notes field).
Newsletter subscription
The voluntary request to subscribe to the newsletter and in the presence of
specific consent by the user will allow electronic communications to be sent to
the data subject with the methods and purposes defined in the terms and
conditions of service provision. This
information will be an addendum to this notice.
To unsubscribe from the service requested, it will be sufficient to send an
e-mail to the marketing department in charge. The company will send
confirmation via e-mail that the subscription has been cancelled.
Request for download of informative
material
The personal data voluntarily entered in the website page are the minimum
requirement to manage this request. The
data requested will be used for the time necessary to fulfil the request and
will not be stored.
Request for access to
restricted area
The personal data voluntarily entered in the website page are the minimum
requirement to manage this request. The personal
data will be stored for the duration of the service requested.
Other types of data requests
If other types of services are established, in the context of the services
present on the website, which require the entry of the user's personal data,
they will be the subject of specific notices in an addendum to this document.
Disclosure of
personal data:
Your personal data will not be
disclosed in any manner whatsoever.
Storage period.
We would like to inform you
that, in compliance with the principles of lawfulness, purpose limitation and
data minimisation, in accordance with article 5 of the GDPR, the storage period
of your personal data is:
- set for a period of time no longer than the performance of the
services provided.
- According to the terms of the law envisaged for the specific
processing requested.
Management of
cookies:
For more detail, see the full
notice on the management of cookies shown in the footer of the homepage:
http://www.dottotrains.com/
If you have doubts or concerns
about the use of cookies, you can always intervene to prevent them being set
and read, for example by changing the privacy settings in your browser to block
certain types.
For an overview of how the
most common browsers work, you can visit www.cookiepedia.co.uk.
Advertising companies also
allow you to opt out of receiving targeted advertisements if you so wish. This does not prevent the setting of cookies
but stops the use and collection of some data by such companies.
For more information and how
you can opt-out, visit www.youronlinechoices.eu/.
Rights of the data
subject:
You have the right to obtain
from the controller the erasure (the right to be forgotten), restriction,
updating, rectification, portability and objection to the processing of
personal data which relate to you, and in general you can exercise all your
rights envisaged by articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.
1. The data subject will have
the right to obtain confirmation as to whether or not personal
data concerning him or her exist, even if not yet recorded, and communication
of such data in intelligible form.
2. The data subject shall have
the right to be informed:
- of the source of the personal data;
- of the purposes and methods of the processing;
- of the logic applied to the processing, if the latter is carried out
with the help of electronic means;
- of the identification data concerning the data controller, data
processors and the representative designated as per Article 5, paragraph 2;
- of the entities or categories of entity to whom or which the personal
data may be communicated and who or which may get to know said data in
their capacity as designated representative in the State’s territory, data
processors or persons in charge of the processing.
3. The data subject shall have
the right to obtain:
- updating, rectification or, where interested therein, integration of
the data;
- erasure, anonymization or blocking of data that have been processed
unlawfully, including data whose retention is unnecessary for the purposes
for which they have been collected or subsequently processed;
- certification to the effect that the operations as per letters a) and
b) have been notified, also regarding their content, to the entities to
whom or which the data were communicated or disseminated, unless this
requirement proves impossible or involves a manifestly disproportionate
effort compared with the right that is to be protected;
- the portability of data.
4. The data subject shall have
the right to object, in whole or in part:
- on legitimate grounds, to the processing of personal data concerning
him/her, even though they are relevant to the purpose of the collection;
- to the processing of personal data concerning him/her, where it is
carried out for the purpose of sending advertising materials or direct
selling or else for the performance of market or commercial communication
surveys.
Data subject’s right
to lodge a complaint:
The data subject has the right to lodge a complaint
with the competent supervisory authority and before the competent courts of the
Member States in accordance with article 79.
Competent authority: www.garanteprivacy.it
Profiling
It is confirmed, for the purposes and types of data
collected by this website, that there is no
automated decision-making process, including profiling as referred to in
Article 22(1) and (4).
Further
information
For any further requirements, requests for
information or clarification please contact our office directly at the
telephone number and/or e-mail address below (see footer).
