We are aware of the great importance of protecting privacy and personal data and are committed with the utmost care to respect principles aimed at ensuring safe, secure and controlled web browsing, bearing in mind that, whenever personal data is provided on the web, there is a the risk that these data are intercepted and used improperly by third parties, so that it is not possible to guarantee the total security and protection of the personal data provided.
INFORMATION ON THE TREATMENT OF PERSONAL DATA PURSUANT TO LEGISLATIVE DECREE NO. N. 196/2003
The data controller is the company S.T.C. Combined Transportation Service, based in Genoa, Via Francesco Rolla n. 29 / C, CF 02196090928.
TYPOLOGY OF DATA - COLLECTION AND PURPOSE OF PROCESSING
The collection and processing of personal data of users who use the Site is generally limited to browsing data only, ie the data that the computer systems and software procedures used to operate this Site acquire during their normal exercise and whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers used by the user that connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the user's computer operating system. This information is not collected to be associated with users and identified subjects, but by their very nature could, through processing and association with other data held by third parties, allow users to be identified. Navigation data is collected and processed for the sole purpose of obtaining anonymous statistical information on the access and use of the Site and to check its correct functioning and improve its content and functioning. The navigation data is deleted immediately after being processed anonymously; could be used to ascertain responsibility in case of computer crimes against the Site or carried out through the Site: except for this eventuality, users' browsing data are generally not kept for more than seven days or according to what established by the applicable legislation.
Data provided voluntarily by the user
We also collect and process personal data (for example, identification data, such as name, surname, telephone numbers, e-mail addresses; company master data - office, telephone numbers, e-mail addresses - information on company activities; information on goods or transport, data of third parties only where strictly necessary for the purposes of the requested service and exclusively for the pursuit of this purpose) provided voluntarily by the user (and subject to the specific consent of the latter, if requested) on the occasion of user interaction with Site functionality, or user request for services offered by the Site - also for the purpose of executing the reciprocal obligations deriving from the contractual relationships established with the user or the provision of services to this strictly connected or necessary - such as registration or registration on the Site, request for quotation, tracking of me rci, online billing, adherence to a program or other initiatives offered through the Site, or for the purpose of controlling access to password-protected areas or managing requests for information received from the user; or, with the user's consent, free and optional, in case of request to send information or informative, promotional and advertising material, newsletters, or to evaluate any request for employment or curriculum vitae sent in hypothesis by the user.
Always with the specific consent of the user, free and optional, we collect and process personal data (such as, in addition to the above, information relating to habits, interests, preferences, propensity to consume, user profile, especially with reference to the freight transport) also for profiling purposes, detection of the degree of satisfaction, internal statistical processing, loyalty, and for marketing purposes, such as sending to the user - also through automated call systems without the intervention of an operator , newsletters, e-mail, sms- information and updates on products, services, promotional or commercial offers.
As a rule, we do not collect or process sensitive data (personal data that can detect racial or ethnic origin, religious, philosophical or other beliefs, political opinions, political or philosophical memberships, trade unions, associations or organizations) , political or trade union as well as the personal data suitable to reveal the state of health and sexual life), unless the sensitive data can influence the performance of the requested service or the execution of the contract; in such cases, we will be able to proceed with the collection and processing of sensitive data only with the user's express consent.
Additional specific purposes relating to individual processing operations are identified in detail in the sections of the Website relating to the services provided from time to time. In correspondence of the individual sections, the user will find specific information on the processing of personal data, pursuant to Article 13 of the Privacy Code.
We may also process the user's personal data even without consent in the cases provided for by the Privacy Code (among other things: to fulfill obligations arising from a contractual relationship or to fulfill obligations under the law, regulations or EU legislation).
OPTIONAL DATA SUPPLY
Apart from what has been specified for navigation data, and without prejudice to the provisions of some sections of the Website with reference to specific processing purposes, the user is free to provide personal data to request the services we offer such as registration or registration on the Site (for example: in order to receive newsletters), sending informative, promotional or advertising material, profiling, surveying satisfaction, processing internal statistics, direct marketing. Failure to provide personal data, however, may make it impossible to receive informative, promotional or advertising material or to proceed with profiling or surveying satisfaction.
The personal data required to provide the services requested by the user (including the request for quotation, the tracking of goods, online billing), to execute the reciprocal contractual obligations deriving from the contractual relationships established with the user, for the provision of services strictly connected to this, they are strictly necessary for the specific purpose of the processing. Failure to provide such data could make it impossible to perform the service or services requested or to carry out the contractual relationships to which the processing is aimed, without prejudice to the fact that the user's consent is not required for the collection and processing of personal data necessary for these purposes, as required by art. 24 Privacy Code.
Cookies are small text files stored on the user's hard disk that a server sends to the user's browser when a website is visited. Cookies therefore allow a link to be created between the user's computer and browsing on the site, allowing the server to download web pages more quickly on subsequent visits to the first and allowing the user to recognize the profile eventually created by the user .
The cookies we use do not allow any control on the user's computer or to start programs or download viruses; furthermore, it is not possible to use the cookies used to access the user's computer or the information stored there.
Browsers are set up to accept cookies automatically; the user can also modify the settings of his browser to disable this function (using the "Help" / "Help" section of the toolbar which illustrates how to avoid receiving cookies and other technologies used to track users or, usually , selecting the items "Tools - Internet Options - Privacy" and choosing the preferred settings). Disabling cookies allows browsing the site but may limit the possibility of use or the functionality of the site.
PLACE AND METHOD OF TREATMENT
The personal data collected on our site, physically placed "in hosting" at the company Cap S.p.A. - Fastweb server farms - with administrative headquarters in Via Lungobisagno Dalmazia 71, 16141 Genoa, are processed and stored through an electronic system at the headquarters of the data controller company and are only handled by its employees, contractors or appointed persons, or by any in charge of occasional maintenance operations.
The server that makes the Site available is located in Italy at the company Cap S.p.A. - Fastweb server farm, owner of an independent treatment.
The personal data collected are mainly processed with computer tools and in any case automated, but also without the use of electronic tools, ie with manual tools. In any case, the data is stored only for the time necessary to achieve the purpose for which it is intended and in compliance with current legislation. We collect and process data in accordance with current regulations in order to safeguard the confidentiality, integrity, completeness, availability of personal data and to minimize the risks of cancellation, destruction, loss, alteration, even accidental, of access unauthorized, processing not allowed or not in accordance with the purpose of data collection, unlawful or incorrect use of data, illegitimate disclosure.
In no case can we be held responsible for any untruthful or inaccurate information sent by the user as well as information regarding the user provided by third parties, even fraudulently, nor can any responsibility be charged to us for any consequences that may arise.
Likewise, we cannot be held responsible for any damage of any kind caused directly or indirectly by accessing and / or browsing the Site.
COMMUNICATION OF PERSONAL DATA
The personal data provided by the user are used only to perform the requested service or services and are accessible to our internal and external personnel in charge of processing.
The user's personal data may be communicated to third parties that perform services or functions connected or instrumental to the activity we carry out and for purposes connected to the provision of the services requested by the user, our consultants, controlling and / or controlled companies and / o connected, to subjects that carry out the insurance, banking, parabanking activity, to persons in charge of the maintenance of the computer system or of the software in use.
Personal data may be communicated to any person envisaged as a legitimate recipient by legal or regulatory obligations such as, by way of example only, the Judicial Authority, the police, the Financial Administration, the Countries and the Authorities of the Countries of the 'European Union or third parties with respect to the European Union for security reasons (the collection and processing of personal data in this case pursues this purpose), in compliance with the applicable legislation.
In respect of the aforementioned purposes, the user's personal data may be transferred to third party commercial partners, including companies based outside the European Union that can guarantee a level of protection of personal data different or lower than that offered by the Privacy Code or within the European Union, with the user's consent, which is free and optional.
The third parties to whom the data may be communicated according to the above, will act as autonomous data controllers.
RIGHTS OF INTERESTED PARTIES
The rights of the interested party
The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in an intelligible form.
The interested party has the right to obtain the indication:
of the origin of the personal data;
of the purposes and methods of processing;
of the logic applied in the case of processing carried out with the aid of electronic instruments;
of the identification data concerning the data controller, data processors and the representative designated pursuant to art. 5 paragraph 2;
the subjects or categories of subjects to whom the personal data can be communicated or who can learn about them as appointed representative in the State, managers or appointees.
The interested party has the right to obtain:
updating, rectification, or, when interested, data integration;
the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data was collected or subsequently processed;
the attestation that the operations referred to in letters a) and b) have been brought to the attention, even with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves a manifestly disproportionate use of resources with respect to the protected right.
The interested party has the right to object, in whole or in part:
for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
to the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication.
To exercise their rights or for any questions or requests regarding the processing of personal data, the user can contact:
S.T.C. Servizio Trasporti Combinati S.p.A. Via Rolla 29 C 16152 Genova – Italy