INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA OF USERS AS PER ART. 13 OF REG. (EU) 2016/679 ("GDPR")
Controller of the process
Aeroporto Guglielmo Marconi di Bologna S.p.A. – “AdB”
Address: Via Triumvirato, n. 84, 40132 Bologna (BO)
Data protection officer (DPO)E-mail address: firstname.lastname@example.org
Personal data processed
Name, surname, sex, telephone number, e-mail address, etc.
Processing of special categories of personal data (former sensitive data)
Processing of personal data concerning health, and in particularly concerning your condition of Reduced mobility passenger “PRM”; racial or ethnic origin, religious beliefs and any other condition concerning special categories of personal data.
Data ProcessingPurposes of the processing (A)
Personal data provided by you by filling out the form will be processed by AdB for the following purposes:
- to allow the registration on the web site, etc.;
- to allow the use of services offered, i.e. booking and purchasing of air tickets, parking lot and to use the Vip Lounge and Meeting Area;
- to give feedback to your suggestions, reports and complaints; to detect customer satisfaction and to improve the quality of services.
Execution of a pre-contractual measure.
Execution of a contract of which you are a part.Period of storage (A)
Until the consent is withdrawn, except for the contact data that will be stored.
Contract duration and, after the expiry date, for the ordinary 10-year statutory limitation period, in addition to any other time limits accorded to the related tax documentation.Purposes of the processing (B)
If necessary, to ascertain, exercise or defend the rights of the Controller.Legal basis of the processing (B)
Legitimate interest.Period of storage (B)
In case of judicial litigation, for the entire duration of it, until the exhaustion of the terms of practicability of the actions of challenge/final sentence.Purposes of the processing (C)
Personal data you provided by filling out the form, with your consent, will be also processed for the purposes of: reporting of corporates events; newsletter; market analysis and statistics; marketing (promotional and commercial communications relating to services offered by AdB); profiling (automated individual decision-making, including profiling), of user profiles based on preferences, in order to customize the services offered.Legal basis of the processing (C)
Consenso (facoltativo e revocabile in qualsiasi momento).Period of storage (C)
Consent (optional and revocable at any time).
Once the above terms have been elapsed, personal data will be deleted or made anonymous, in accordance of the technical procedures for cancellation and backups.
Obligatory provision of data
The provision of data highlighted with an asterisk (*) on the registration form is mandatory for the creation of a MyBLQ profile and for the conclusion of the contract, in the case of purchase of an online service. The refusal to provide those data does not allow the registration of the profile.
Personal data may be processed by third parties operating as Controllers such as, i. e. airlines that issued the purchased ticket, companies that provide payment management services authorities and supervisory and control bodies and in general, public or private subjects who are entitled to request those data. Personal data may also be processed, on behalf of AdB, by external parties designated as Processors who are given appropriate operating instructions.
Authorized subjects to the processing
Data may be processed by employees of the corporate functions responsible for the pursuit of the purposes, who have been authorized to process and who have been received adequate operating instructions.
Rights of the data subject - the right to lodge a complaint with a Supervisory Authority
By contacting the Quality Area by e-mail at email@example.com, data subjects have the right to ask the Controller to access to data concerning themselves, the right to rectifications; erasure; to restriction of processing as per art. 18 GDPR; right to data portability; right to object and others.
Data subjects, furthermore, if the data processing is based on consent or on a contract, and it is processed with automated tools, shall have the right to receive their personal data in a structured, commonly used and machine-readable format, as well as, if technically possible, have the right to transmit those data to another Controller without hindrance from the Controller to which the personal data have been provided– so called Right to portability as per art. 20 GDPR.
Data subjects have the right to withdrawn their given consent at any time and have the right to object.
Data subjects have the right to lodge a complaint to the competent Supervisory Authority in the European State in which they reside habitually or work, or the State in which the alleged data breach has occurred.