Information note pursuant to Legislative Decree No. 196 of 2003 and EU Regulation 2016/679 ("GDPR") and Legislative Decree No. 101 of August 10, 2018 (Art. 13 of EU Regulation 679/2016)
With this statement, made pursuant to Article 13 of EU Regulation 679/2016, "Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC - General Data Protection Regulation," we are providing you with information about the processing of personal data concerning you.
In compliance with the provisions of the relevant regulatory provisions, the methods and purposes of the processing of personal data through the website https://intaxi.it are outlined below
DATA CONTROLLER
InTaxi, the data controller, hereby informs that the personal data of the data subjects are processed in strict compliance with the principles of Article 5 of the GDPR and the lawfulness of the processing itself (Article 6 GDPR).
The updated list of Data Processors and Processed Persons is kept at the registered office of the Data Controller.
THE DATA COLLECTED
"Personal data" means "any information concerning an identified or identifiable natural person ("data subject")", received by the Data Controller as part of the preparation, conclusion and execution of the business relationship. An identifiable person is defined as "a natural person who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity."
Here, the data collected by the Holder as identifying and non-sensitive (e.g., first name, last name, pickup address, phone, etc.), are collected by the Operations Center for the purpose of assigning a Taxi to the ride.
Therefore, with this notice it is intended to communicate that the use of personal data is reduced to the minimum necessary and in such a way as to exclude processing when the purposes pursued in individual cases can be achieved through the use of anonymous data or by other means, which allow identification of the data subject only in cases of necessity or at the request of the authorities.
For organizational and functional needs only, a number of internal and external data processors have been appointed to process personal data of site users for purposes strictly related to safeguarding the proper provision of services on the site and to protect the same confidentiality and security. The managers carry out the processing of personal data of users of the site according to the instructions given by InTaxi.
ACCESS TO PERSONAL DATA OF THE DATA SUBJECT
The data subject's personal data may be made accessible to employees and associates of the Data Controller, in their capacity as data processors and/or system administrators;
TRANSFER OF PERSONAL DATA
The data will not be transferred either to European Union member states or to non-European Union countries
SCOPE OF COMMUNICATION AND DIFFUSION
The data collected will never be disseminated and will not be disclosed without explicit consent, will be stored at the Registered Office and may be shared with individuals, authorized for processing by InTaxi, pursuant to Article 29 of the GDPR, except for necessary communications that may involve the transfer of data to public entities, consultants or other entities for the fulfillment of legal obligations.
NAVIGATION DATA
This website uses technical cookies to ensure the proper functioning of procedures and improve the user experience of online applications. This document provides information on the use of cookies and similar technologies, (on their use and management).
The computer systems and software procedures used to operate the website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this possibility, at present the data on web contacts do not persist for more than seven days.
Cookie
Disclosure and acquisition of consent for the use of cookies on the www.intaxi.it portal for the protection of personal data.
What are cookies?
Cookies are small text strings that sites visited by the user send to the user's terminal (usually the browser), where they are stored and then transmitted back to the same sites on the next visit by the same user.
In the course of browsing a site, the user may also receive cookies on his terminal that are sent by different sites or web servers (so-called "third parties"), on which some elements (such as, for example, images, maps, sounds, specific links to pages of other domains) present on the site he is visiting may reside.
Based on the characteristics and use of cookies, several categories can be distinguished:
Technical cookies
Technical cookies are those used for the sole purpose of carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such service.
They are not used for any further purposes and are normally installed directly by the owner or operator of the website.
They can be divided into navigation or session cookies, which ensure the normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); analytics cookies, assimilated to technical cookies where used directly by the operator of the site to collect information, in aggregate form, on the number of users and how they visit the site itself; functionality cookies, which allow the user to navigate according to a set of selected criteria (for example, language, products selected for purchase) in order to improve the service rendered to the same.
Technical navigation cookies
Use of these cookies allows the site to function properly and are used to collect information about how visitors use the site. This information is used to compile reports and to improve the site. cookies collect information anonymously, including the number of visitors to the site, where visitors came from, and the pages they visited.
Third-party cookies
these cookies are used by third-party companies. the use of these cookies normally does not involve the processing of personal data. third-party cookies are derived from ads from other sites, such as advertisements, on the displayed website. they may be used to record website usage for marketing purposes.
Cookie analytics
This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies," which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to, and stored on, Google's servers in the United States. Google (the independent data controller) will use this information for the purpose of tracking and examining your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse to use cookies by selecting the appropriate setting on your browser, but this may prevent you from using the full functionality of this website.
Duration of cookies
Some cookies (session cookies) remain active only until the browseris closed or any logout command is executed . Other cookies "survive" when the browser is closed and are available on subsequent visits by the user. These cookies are called persistent and their duration is set by the server when they are created. In some cases an expiration date is set, in other cases the duration is unlimited.
How to disable cookies
Most Internet browsers are initially set to accept cookies automatically. The user can change these settings to block cookies or to warn that cookies are being sent to the user's own device. In the case of different devices (e.g., computers, smartphones, tablets, etc.), the user should ensure that each browser on each device is adjusted to reflect their cookie preferences. Please note that disabling cookies does not guarantee full functionality of the websites.
Cookies are used to improve the services we offer, for example:
- They allow a service to recognize your device, to prevent you from entering the same information multiple times during the course of an activity.
- They recognize that you have already provided a user name and password when you logged in to the web portal www.intaxi.it so you don't have to repeat the operation for each required web page.
- They calculate how many users are using the services, so as to facilitate their use and ensure the necessary capacity for fast browsing.
If permission to use cookies is missing certain features and pages may not work as intended.
Optional provision of data
Apart from what has been specified for navigation data, the user is free to provide the personal data indicated in the forms or registration procedures. Failure to provide them may make it impossible to obtain what has been requested.
RIGHT OF THE DATA SUBJECT (Articles 15 -20 of EU Regulation 2016/679)
The Data Subject has the right to obtain the following from the data controller:
(a) confirmation as to whether or not personal data concerning him or her is being processed, and if so, to obtain access to the personal data and the following information:
- the purposes of processing;
- the categories of personal data in question;
- The recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly if recipients in third countries or international organizations;
- when possible, the intended retention period of personal data or, if not possible, the criteria used to determine this period;
- the existence of the data subject's right to request from the data controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to their processing;
- The right to file a complaint with a supervisory authority;
- where the data are not collected from the data subject, all available information about their origin;
- the existence of automated decision-making, including profiling, and, at least in such cases, meaningful information about the logic used, as well as the significance and expected consequences of such processing for the data subject;
- The appropriate safeguards that the third country (non-EU) or an international organization provides to protect any data transferred.
(b) a copy of the personal data undergoing processing, provided that́ this right does not infringe the rights and freedoms of others; In the case of further copies requested by the data subject, the data controller maỳ charge a reasonable fee based on administrative costs;
(c) the rectification of inaccurate personal data concerning him/her without undue delay;
(d) the deletion of personal data concerning him/her without undue delay, if the grounds provided for by the GDPR in Article 17 exist, including, for example, if they are no longer necessary for the purposes of the processing or if the processing is assumed to be unlawful, and provided that the conditions provided for by law are met; and in any case if the processing is not justified by another, equally legitimate reason;
e) the limitation of processing, in the cases provided for in Article 18 of the GDPR, for example where the data subject has disputed its accuracy, for the period necessary for the Data Controller to verify its accuracy. The Data Subject must also be informed, in an appropriate timeframe, when the period of suspension has expired or the cause for the restriction of processing has ceased to exist, and thus the restriction itself lifted;
(f) communication from the owner of the recipients to whom requests have been transmitted of any rectification or cancellation or restriction of processing carried out, unless this proves impossible or involves a disproportionate effort;
(g) the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her and the right to have such data transmitted to another controller without hindrance by the controller to whom he or she has provided them, in the cases provided for in Article 20 of the GDPR, and the right to obtain the direct transmission of personal data from one controller to another, if technically feasible.
RIGHT OF COMPLAINT
Interested parties in the event that they believe that the processing of personal data referring to them is carried out in violation of the provisions of EU Regulation 679/2016 have the right to lodge a complaint with the Guarantor, as provided for in Article 77 of EU Regulation 679/2016 itself, or to take appropriate legal action, Article 79 of EU Regulation 679/2016.