Pursuant to Article 13 of Italian Legislative Decree 196/2003 (Italian Data Protection Act)
Pursuant to the provisions of Italian Legislative Decree no.196 of 30 June 2003 (the Italian Data Protection Act, hereinafter “the Act”), we hereby inform you that any personal information which you may subsequently provide and/or which may otherwise be acquired in any form (web, email, hardcopy contracts etc.) will be processed by NGV Bus Srl using manual and electronic means in full compliance with the Act and other applicable privacy legislation.
We shall outline here for the purposes of clarity some definitions provided by the Italian Data Protection Act:
Processing: any operation, including those carried out without the aid of electronic devices, concerning the collection, recording, organisation, preservation, consultation, processing, modification, selection, extraction, comparison, usage, association, blocking, communication, dissemination, deletion and destruction of data;
Personal Data: any information relating to a natural person, legal person, organisation or association, who can be identified or is identifiable (even indirectly) by referring to any other information, including a personal identification number (data subject);
In view of this, and pursuant to Article 13 of Italian Legislative Decree 196/2003 (Italian Data Protection Act),
Purposes of the Processing
In accordance with the requirements expressed by users each time they access the website, the purposes of the processing of personal data provided directly by users when they complete forms on the website, send emails, fill out hardcopy forms etc. may be as follows:
- To allow registration on the website, which is necessary for access to particular sections of the website itself and to provide and manage the various services offered;
- To conclude and fulfil the requirements of sales contracts;
- To perform the steps necessary to fulfil existing contractual relationships (accounting, tax, commercial and technical requirements, as well as for all other company activities inherent in the relationship; the processing will be performed for the duration of the contractual relationship and thereafter, within the limits necessary to fulfil legal and administrative requirements);
- Subject to the consent of the user, and up until such time as this may be revoked (this can be performed at any time by writing to: email@example.com):
- to perform marketing activities (including, but not limited to, sending promotional and advertising material, performing related analyses on registered users which allow NGV Bus to improve the services and products offered to its customers); this may also be performed via phone, post, email, SMS, fax etc. subject to specific consent, up until such time as this may be revoked;
- To send newsletters providing updates on the services and activities of NGV Bus;
- To respond to user requests in relation to NGV Bus's services.
Data Processing Methods
Tools and Methods
With regard to the purposes specified above, processing is performed using manual, computerised and telematic tools, with methods strictly related to above-mentioned purposes, and in any case in such a way as to guarantee the security and privacy of the data themselves; users are required to notify us promptly in the event that any corrections, modifications or updates to such data should be required.
This processing may be performed, for the purposes and using the methods described above, and in full compliance with criteria suitable to guarantee security and privacy, by companies, organisations and external partners who are known as Data Processors, and only to the extent that this concerns the processing performed by them.
Duration of the Processing
Data shall be processed for the entire duration of any contractual relationships established. Subsequently, this shall only be performed in order to fulfil legal obligations and commercial purposes.
Types of data processed
The types of data processed by NGV Bus via email and hardcopy forms include customer names and addresses, telephone and electronic contact details (web, email etc.), tax codes, VAT numbers etc.
The IT systems and software processes used for the operation of this website acquire certain personal data during the course of their normal operations, the transmission of which is an integral and essential part of the use of the Internet, which is based on the TCP/IP communication protocol.
This is information which is not gathered in order to be associated with identified parties, but due to its nature could, through processing and association with data held by third parties, permit identification of the users. This category of data includes the IP addresses or domain names of the computers used by visitors to the website, addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to issue the request to the web server, the size of the file obtained in response, the numerical code indicating the status of the response given by the web server (success, failure etc.) and other parameters concerning the user's operating system and IT environment. These data are used only to obtain anonymous statistical information on use of the site and to check it is operating correctly. Please note that these data may be used to determine responsibility in the event of attacks or other criminal acts carried out against the NGV Bus website.
Data supplied voluntarily by the user of the website.
The optional, explicit and voluntary sending of personal data in order to access specific services, or to make requests for information, to the addresses listed on this website will result in acquisition of the sender's email address, which is necessary for responding to the requests, as well as any other personal data included in the message. Failure, even partial, to supply these data may make it impossible to satisfy the request.
It is possible that other data necessary to fulfil the customer's requirements, however not of a sensitive nature, will also be processed.
Judicial data in particular may also be gathered in order to allow for preliminary analyses required for buying and selling vehicles.
Nature of Providing Data
Providing data is always optional and not mandatory.
The refusal to provide such data or agree to its processing may, however, make it impossible to continue any relationship of a commercial or any other nature with our company. Refusal to allow personal data to be used for sending marketing materials/communications, on the other hand, will have no consequences for present or future relationships.
In regard to the website, without the agreement to provide certain data it is impossible for NGV Bus to satisfy user requirements in terms of website functionality.
As such, failure to fully or precisely provide the personal data marked with an asterisk or otherwise marked as mandatory will make it impossible to provide the service requested, as these data are essential for the service in question.
Categories of persons who may come to have knowledge of the personal data
The processing of the specified personal data, for the purposes outlined above, may also be performed by physical or legal persons who provide specific processing services or perform connected, instrumental or supporting activities on behalf of and/or in the interests of NGV Bus Srl. As such, your data may also be communicated for the same purposes as previously indicated to:
- Anyone who is the legitimate recipient of communications provided for by legislation or regulations (such as, for example, public authorities and offices)
- Anyone who is the recipient of communications necessary to carry out the obligations deriving from the services provided
- Third-party companies specialised in the management of commercial and credit information (e.g. data processing centres, banks etc.)
Your data will also be processed by:
- Companies and/or partners for the management of administrative services used to fulfil legal or contractual requirements
- Other parties (companies, physical persons) involved in providing the services and purposes indicated
These parties operate as Data Processors or persons assigned to the data processing, and are specifically nominated and trained as such.
Rights of the Data Subject
With regard to the personal data specified above, users may exercise the rights provided for by Article 7 of Italian Legislative Decree 30.06.2003 no.196 (including, in particular, the right to request updates, corrections or deletion of the data, as well as to object on legitimate grounds to the processing of their personal data), within the limits and subject to the conditions provided for by articles 8, 9 and 10 of the Act; such requests must be made by sending an email to: firstname.lastname@example.org, or via post by sending a letter to NGV Bus Srl, Via A.Fleming 52, 42122 Reggio Emilia, Italy.
Data Controller and Data Processor
Data Controller: the Data Controller is Luca Iori, NGV Bus Srl, via A.Fleming, 52 - 42122 Reggio Emilia - Phone: +39 0522272658, e-mail: email@example.com.
Any requests for clarification or further information can be addressed to this data processor.
A complete and up-to-date list of Data Processors can be requested directly from the company by writing an email to: firstname.lastname@example.org).
This policy may be supplemented, either orally or in writing, with further content and instructions in order to better satisfy any requirements for further knowledge about matters of privacy, and to comply with legislative updates.
Article 7 of Italian Legislative Decree 196/2003 (Right to access personal data and other rights)
The Data Subject has the right to obtain confirmation from the Data Controller regarding the existence or non-existence of personal data relating to them, and may request that such data be made accessible to them in a clearly understandable form.
The Data Subject also has the right to know: a) the source of their personal data; b) the purposes and methods of processing; c) the applied logic if the data processing is performed by electronic means; d) the identifying details of the Data Controller, the Data Processors and the representative nominated pursuant to article 5 para. 2; e) the persons or category of persons to whom the personal data was forwarded or who may have come to have knowledge of it as designated representatives in the state, data processors or persons responsible for the processing.
The Data Subject also has the right to obtain: a) updates to, correction of, and where applicable, additions to the data; b) deletion of the data or to request that it be converted to an anonymous form or be blocked, if the processing was performed in an illegitimate manner, including in the case that the storage of the data is not necessary to the purposes for which the data was collected or subsequently processed; c) confirmation that the measures outlined in a) and b), and their content, have been communicated to parties to whom the data was forwarded or circulated, except in the event that fulfilment of this requirement should prove to be impossible or require the use of resources manifestly disproportionate to the right being protected.
The Data Subject has the right to object, in whole or in part, to: a) processing of personal data relating to them, for legitimate reasons, even if such data are relevant to the purposes for which they were collected; b) processing of personal data for the purposes of sending advertising or direct marketing material, market research or commercial communications.
We also wish to inform you that you have the right to lodge a complaint with a supervisory authority.