Dear User,
Toscana Aeroporti S.p.A., with registered office in Via del Termine, 11 - 50127 – Florence (tel. +39 055 30615) hereby informs you that the data you have provided will be subject to processing based on the principles of correctness, lawfulness, transparency and the protection of your confidentiality and rights. We are providing you with the following information in our capacity as Data controller of the personal data of users who browse or register on our website (hereinafter referred to as ‘Users’), in accordance with Article 13 of EU Regulation 2016/679 of 27 April 2016 (the ‘Regulation’ or ‘Applicable Standard’). The purposes and methods of the data processing for which our company is responsible are outlined, with details specific to the types of data collected through the various pages of our website that may have directed you here (links on the personal data entry pages).
PURPOSE OF PROCESSING THE DATA COLLECTED:
- VIP services. Your personal data are processed to respond to the request for information about VIP SERVICES and relevant services including the purchase of these services.
- Contacts. The personal data communicated will be used to respond to requests submitted by you in the contact form. If you provide us with your explicit authorisation, the data may be optionally processed to send commercial or advertising messages by Toscana Aeroporti S.p.A.
- Parking reservation. Your personal data are processed to provide information about the availability and/or reservation of parking spaces in Toscana Aeroporti S.p.A. parking lots. They will also be processed to perform the pre-contractual and contractual obligations undertaken towards Customers and deriving from the reservation and purchase of the parking ticket, including administrative, accounting and payment management, for the protection of the contractual rights of Toscana Aeroporti S.p.A. as well as to ensure that explicit national and international legal obligations are observed.
- Curriculum. The data you voluntarily provide will be processed by Toscana Aeroporti S.p.A., as well as its subsidiaries and affiliated companies, solely for the purposes of personnel search and selection, both for current and future job openings. Processing will be carried out using paper, electronic, and digital means, all of which are designed to ensure the security and confidentiality of your data. Providing this data is optional, however, failure to do so will prevent the Data Controller from processing your information, thereby making it impossible to submit your curriculum and/or application and to participate in any selection process. We invite you to refrain from entering sensitive data (by way of example, but not limited to: belonging to protected categories, disability status) unless you consider it strictly necessary for the purposes of the selection. If you choose to provide this information, please indicate your consent to the processing of your data by checking the appropriate box on the data entry form.
- Browsing the website, regarding the potential collection of technical data necessary for site operation, such as the User’s IP address, when browsing the website. The following information is collected:
- Internet Protocol (IP) address or domain name of the device used by you;
- type of browser and the parameters of the device used to connect to the website;
- the URI (Uniform Resource Identifier) or the method used to submit the request to the server;
- name of the Internet Service Provider (ISP);
- date and time of the visit;
- web pages from which the User arrived (referral) and exited;
- possible number of clicks;
- file size obtained in response;
- the numerical code indicating the response status from the server (successful, error, etc.);
- other parameters relating to the operating system and IT environment of your device
- Administrative and accounting purposes, i.e. to perform organisational, administrative, fiscal, and accounting tasks, including internal management activities and those necessary to perform contractual and pre-contractual obligations;
- Legal obligations, i.e. to fulfil obligations required by the law, an authority, regulation or European legislation;
- Registration on the ‘Suppliers register portal’, for the procurement of works, supplies and services below the EC threshold;
- ADC (Airside Driving Certificate) courses: the data are processed in order to issue airport ADC permits;
- Access to the document area: the data are acquired for the purpose of registration in the document area for consultation of the documents contained therein (such as, but not limited to, the Airport Manual, Terminal Regulations, airport emergency plans);
- Work permits: the data provided are processed in order to respond to the request for the issue of work permits within the airport grounds;
- PPR (Parking Permission Request): the data provided by you are processed in order to respond to PPRs for General Aviation.
- Newsletter. The personal data are processed in order to provide the Service for sending information about Toscana Aeroporti S.p.A’s activities and the newsletter. If you provide us with your explicit authorisation, the data may be optionally processed to send commercial or advertising messages by Toscana Aeroporti S.p.A.
With reference to the purposes under points (1, 2, 3, 5, 6, 10,11,12) of the preceding paragraph, the legal basis for the processing is the provision of the services provided through the website requested by you (pursuant to Article 6, paragraph 1, letter b of the General Data Protection Regulation 2016/679). With reference to the purposes under points (4, 9, 13) of the preceding paragraph, the legal basis for the processing is your consent where freely expressed (pursuant to Article 6, paragraph 1, letter a of the General Data Protection Regulation 2016/679). With reference to the purposes under points (7,8) of the preceding paragraph, the legal basis for the processing is to comply with a legal obligation to which the data controller is subject (pursuant to Article 6, paragraph 1, letter c of the General Data Protection Regulation 2016/679).
DATA CONTROLLERS AND DATA PROCESSING METHOD
Toscana Aeroporti S.p.A. in its capacity as data controller, collects and processes your personal data, provided with this registration to provide the specific services you may request, using paper, automated and telematic methods and logic strictly related to the above-mentioned purposes. The data you provide will be stored for as long as is strictly necessary to fulfil your requests, without prejudice to your request for the erasure or modification of your data as provided for by current legislation. Your data may, however, be stored in order to comply with specific legal obligations. The data under point 4) will be processed for a period of 24 months, then erased. The data processed for the purpose of sending the newsletter and marketing content under point 13) will be managed on the basis of the OPT IN principle (voluntary participation), i.e. until the data subject indicates they no longer wish to receive promotional and marketing content.
CONSEQUENCES OF THE FAILURE TO PROVIDE DATA AND CONSENT TO PROCESSING
Whether to provide your personal data or not is always optional. However, if the data indicated with an * in the form are not provided (referred to in this policy) and in any subsequent collection forms, it may not be possible to provide the Service, or part thereof, and you will be unable to use the requested services.
DATA SUBJECT’S RIGHTS
You may always exercise the rights granted by current legislation, including the right to access the data free-of-charge, to obtain the updating or erasure of the data concerning you without undue delay, or to object to the processing of your data for commercial or advertising purposes, and to request the full, updated list of all the data processors. You can exercise your rights by written communication to our head office, without any formalities, or by sending an email to the address: privacy@toscana-aeroporti.com
SUBJECTS WHO MAY ACCESS YOUR DATA
Your personal data collected with this registration may be processed by persons appointed to manage the services requested and by the Data Processors listed above. This privacy policy may be integrated by additional information after requesting specific services.
SUBJECTS TO WHOM YOUR PERSONAL DATA MAY BE COMMUNICATED IN ITALY
Your personal data may be communicated to third parties to fulfil legal obligations, i.e. to comply with orders from public authorities or to exercise a right in court. They may also be communicated to external companies to pursue the same purposes for which they were collected. The data will not be disseminated.
VIDEO SURVEILLANCE IN THE FLORENCE AND PISA AIRPORTS
This is an explanatory note - pursuant to current legislation and the provisions of the Supervisory Authority for video surveillance - on the use of images and recordings managed through the video surveillance system installed at the ‘Amerigo Vespucci’ Airport in Florence and the ‘Galileo Galilei’ Airport in Pisa. The data controller is Toscana Aeroporti SpA, with registered office in Florence, Via del Termine no. 11 and VAT/Tax Code 00403110505, hereinafter referred to as TA.
The entire video surveillance system is installed by TA and many video cameras are used for the purposes of protecting security and public order and have been installed at the express request of the Law Enforcement Agencies, such as the Border Police (Airport Border Police of Florence and Pisa). In relation to these installations, the aforementioned State Entities act as ‘Data Controllers’ under the Privacy Code, and have access to the recorded images via a dedicated control room, using operator credentials that are distinct and separate from those assigned to TA personnel.
Other systems have been installed by TA for the purposes of airport safety and security, operational purposes and the protection of the company’s assets. If recordings are made by the latter systems, the images are stored by TA for a maximum period of 7 days, as stipulated for cases of particular risk in the 2010 Supervisory Authority Provision, after which they will be automatically deleted.
The Airport Border Police has access to all the video cameras, therefore the policies were created with this management in mind, as recommended by the Supervisory Authority in point 4.6-c of the 2010 Provision.
The data subject may request the rights included in the current legislation regarding their personal data access and erasure, by contacting TA as outlined in this privacy policy page. The areas under exclusive control of the Airport Border Police are indicated by specific policies.
The Supervisory Authority contact information for personal data protection:
www.garanteprivacy.it
Email: garante@gdpp.it
Fax: +39 06 696773785
Telephone switchboard: +39 06 696771
DATA PROTECTION OFFICER (‘DPO’)
Pursuant to Article 37 of the ‘GDPR’ Regulation EU 2016/679, Toscana Aeroporti S.p.A., as data controller, has appointed a Data Protection Officer (so-called ‘DPO’).
Contact information:
Company head office: Toscana Aeroporti SpA – Via del Termine 11, Florence (Tel.: +39 055 30615)
Email: privacy@toscana-aeroporti.com
The user may contact the Data Protection Officer to exercise specific rights by completing and submitting the form available for download below. The rights under Article 15 and subsequent amendments of the GDPR 2016/679 refer to the access, rectification, erasure, restriction of or objection to processing of their data. If the right to object is exercised, the Data Controller may refuse the request and continue processing the data if there are compelling legitimate grounds, based on mandatory privacy regulations, that override the data subject’s interests, rights, and freedoms.