Information regarding the processing of personal data of users as per art. 13 of reg. (EU) 2016/679 (“GDPR”)
Controller of the process
Aeroporto Guglielmo Marconi di Bologna S.p.A. – “AdB”
Address: Via Triumvirato, n. 84, 40132 Bologna (BO)
Data Protection Officer (DPO)
e-mail address dpo@bologna-airport.it
Personal Data processed
Name, surname, phone contact, e-mail address, nationality, as well as any other information directly supplied by the concerned person in the communication sent to the Controller ('common personal data')
Special categories of personal data processed
Data which the concerned person, by writing to AdB, directly provides to the Controller, regarding their health and, in particular, their condition as a passenger with reduced mobility ('PRM'), as well as their racial or ethnic origin, thier religious belief and/or, any other information type of a special nature that may refer to Art. 9 of the GDPR.
Data processing
PURPOSES OF THE PROCESSING (A)
Your personal data which you provided when filling out the paper/online form will be processed by AdB in order to reply to your remarks, requests and complaints and, in general, to assess the customer satisfaction level and improve the quality of our service.
LEGAL BASIS OF THE PROCESSING (A)
With reference to your common personal data, the legal basis of the processing is represented by:
- as regards complaints, the need to accomplish a duty the Controller of the data is subject to (ex art. 6, par 1 lett. c) of the GDPR);
- as regards remarks and suggestions, the execution of a contract of which you are part (ex art. 6, par. 1 lett. b) of the GDPR).
With reference to the personal data belonging to a special category, the legal basis is represented by your explicit consent regarding your personal data themselves (ex art. 9, par. 2, lett. a) of the GDPR).
PERIOD OF DATA STORAGE (A)
Your data will be stored for the time strictly necessary to deal with your request, remarks and complaints to the Controller and, then for further 24 months, starting from the definition and subsequent closing of your remark, suggestion, complaint.
By completion of the above mentioned period, your data will be deleted, erased or made anonymous, in accordance with the technical procedures of cancellation and backup used by the Controller.
PURPOSES OF THE PROCESSING (B)
The data you provided while filling out the online form may as well be used to verify, exert or defend the Controller's right for any legal claim, or in any situation in which legal authorities may exert their function.
LEGAL BASIS OF THE DATA PROCESSING (B)
With reference to your common personal data, the legal basis is represented by the legitimate interest of the Controller to defend their own personal interest for any legal claim (ex art. 6, par.1 lett. f) of the GDPR).
With reference to your data regarding the special categories, the legal basis of the processing is represented by the need to verify, exert or defend the Controller's right for any legal claim, or anytime the legal Authorities will exert thier function (ex art. 9, par. 2, lett. f) of the GDPR).
PERIOD OF STORAGE (B)
Your personal data will be stored for the period limited to the judicial litigation, until expiry of the terms for any legal remedy is reached.
Beyond the above mentioned deadline, data will be eliminated, deleted or made anonymous, in accordance with the technical procedures of cancellation and backup used by the Controller.
Obligatory provision of data
The provision of data marked with an asterisk (*) on the paper/online form is mandatory for the handling of your remark/request/complaint. Therefore, a missing supply of such data on your part will result in AdB not being able to deal with your remark/request/complaint.
With specific reference to your data regarding the special categories ('special data', as follows), wherever not specifically required for the handling of your request, we ask you not to provide them to the Controller.
We would like to remind you however, that in case you consider the supply of such data necessary for the handling of your request/remark/complaint, your special data may be processed by AdB only after your free, specific and explicit consent to their processing has been given.
Therefore, in case this consent is missing, the Controller will have to refrain from processing your special data and, hence, will not be able to handle your remark/report/complaint.
Data recipients categories
Your personal data may be communicated to third parties operating as independent Controllers (such as, by way of example, airport authorities and supervisory and control bodies operating within the airport premises), or they may also be processed, on behalf of AdB, by external parties designated as Responsible for the processing ex art. 28 GDPR who are given appropriate operating instructions.
Authorized subjects to the processing
Data may be processed by employees of the corporate functions responsible for the pursuit of the above purposes, who have been explicitly authorized to process such data and who have received adequate operating instructions.
Rights of the data subject - the right to lodge a complaint with a Supervisory Authority
By contacting the Quality Management by e-mail at info@bologna-airport.it, data subjects have the right to ask the Controller to access to data concerning themselves, the right to cancel them, the right to rectify any incorrect data; the right to provide any missing data; to restrict their processing as per art. 18 GDPR, as well as the right to object to their processing in the subject's own interest.
Furthermore, if the data processing is based on consent or on a contract, and it is processed with automated tools, data subjects shall have the right to receive their personal data in a structured, commonly used and machine-readable format, as well as, if technically possible, have the right to transmit those data to another Controller without hindrance (so called Right to portability as per art. 20 GDPR).
Data subjects have the right to lodge a complaint to the competent Supervisory Authority in the European State in which they habitually reside or work, or the State in which the alleged data breach has occurred, in case they suspect the processing violates the current regulations in place.
Data subjects have the right to withdraw their given consent at any time. We remind, however, that the withdrawal of the consent does not question the lawfulness of the processing based on the consent prior to the withdrawal.
