Pursuant to the legislation in force regarding privacy (European Regulation 2016/679 “GDPR” and Italian Legislative Decree no. 196/03 and subsequent modifications and addition, the following disclosure is provided.1. DATA CONTROLLER
Aeroporti di Roma S.p.A. with registered office at via Pier Paolo Racchetti, 1 - 00054 Fiumicino (Rome).2. TYPES OF DATA PROCESSED
The data processed by ADR S.p.A. include personal information such as first name, last name and e-mail address.3. PURPOSE AND LEGAL BASIS OF THE PROCESSING
ADR S.p.A. Will process your personal data, subject to your express consent, in order to permit access to the on-line services of ADR S.p.A. (In particular e-commerce services). The granting of the data is necessary to pursue the aforementioned purpose, in the event of your refusal to the processing it will not be possible to provide you with the services requested on line.
Furthermore, your specific, additional and separate consent will be requested for the use of the data for direct marketing purposes, in particular to send you newsletters relative to airport and air transport services, commercial promotions and institutional advertising. The granting of the aforementioned data is optional and, if consent to the processing is not granted, the newsletter service will not be carried without this entailing, however, any prejudice regarding the possibility of using other services connected to the registration of the ADR S.p.A. web site.4. PROCESSING METHODS
The data is processed in compliance with the rules in force on computer and electronic instruments, with logics strictly connected to the purpose listed, in order to guarantee their security and confidentiality.5. STORAGE TIME OF THE DATA
Your Personal Data will be stored just for the time necessary for the purposes for which it was collected in compliance with the principle of minimization pursuant to Art. 5.1 c) GDPR and, with reference to the promotional and marketing purposes, for a period of 3 years consistent with the purposes and in conformity with the provisions in force on the subject.6. RECIPIENTS OF THE DATA
Within ADR S.p.A., only the individuals appointed to the processing by the Data Controller and authorised to perform the processing operations on the aforementioned activity may learn your personal data. Furthermore, your data may be processed by just the third party companies to whom ADR could assign specific activities and services connected with the management of the internet site.
The data may be communicated to the relevant Public Authorities, according to the requirements set out by law. In any case your personal data will not be broadcast.7. RIGHTS OF THE INTERESTED PARTIES
Lastly, we wish to inform you that Articles 15-22 GDPR grant the interested parties the possibility of exercising specific rights. The interested party can obtain from the Data Controller: access, correction, cancellation, limitation of the processing, the revocation of the consent as well as the portability of the data that concern you.
In addition, the interested party has the right to object to the processing. Should the right of objection be exercised, the Data Controller reserves the possibility of not honouring the petition, and therefore of continuing the processing if legitimate binding reasons exist to proceed with the processing which prevail over the interests, rights and liberty of the interested party.
The aforementioned rights may be exercised either by accessing one’s personal profile on www.adr.it
, by cancelling the newsletter service through the link received at the bottom of the e-mail, or by request sent informally to the Data Protection Office (DPO) at the following address dpo.adr.it. The contact information of the Data Protection Officer is available at