Regulation (EU) 2016/679 (GDPR) provides for the right to protection of natural persons with regard to data processing. In compliance with this legislation, with reference to your personal data provided to us, CTM S.p.A. wishes to inform you in advance, pursuant to art. 12 and 13 GDPR, that such processing will be based on the principles of lawfulness, fairness, transparencyand to protect your privacy and your/your rights as enshrined in Art. 5 GDPR.
Cancellation from the newsletter service
The User who no longer wishes to subscribe to the newsletter service of CTM SpA may cancel by following the procedure below:
Identity and contact details of the Data Controller
The Data Controller is CTM S.p.A. with registered office in Cagliari, Viale Trieste 159/3, certified email address: ctmspa@legalmail.it, fax 070 2091 222.
Contact details for the Data Protection Officer
The "Data Controller", in compliance with the provisions of art. 37 GDPR, has appointed the Data Protection Officer (DPO). DPO contact details: rpd@ctmcagliari.it
Purposes of the processing for which the data are intended and the legal basis of the processing
Your data will be processed, exclusively for sending the user the newsletter relating to the services of CTM S.p.A.
By subscribing to the newsletter service, the user expressly agrees to periodically receive update emails and communications and/or information including, for example, information about any changes to the er serviceogato, the communiqués relating to the activities of CTM, the new schedules.
For the processing of your personal data for the purposes stated above, your consent is required, which you can express by accessing the personal area of the CTM website, after registration. It is possible to express your consent, after having read the privacy policy dedicated to the Newsletter and clicking on"I CONSENT" or "I DO NOT CONSENT" to the processing of personal data. We inform you that you may withdraw your consent at any time, by contacting the data controller at the addresses indicated above, or through the procedure of cancellation from the newsletter service in the manner indicated above. The withdrawal of consent, however, does not affect the lawfulness of theprocessing based on consent before revocation.
Methods of Processing and Period of Retention of Personal Data
Data processing is carried out through IT procedures by specially authorised internal parties. They are allowed access to your personal data to the extent and to the extent that it is necessary for the performance of the processing activities concerning you.
In addition, to ensure your confidentiality and the integrity of your personal informationprovided to us, personal data will be processed in such a way as to ensure adequate security, including protection, by appropriate technical and organisational measures, against unauthorised or unlawful processing and against accidental loss, destruction or damage.
CTM S.p.A. periodically checks the tools by which the data are processed and the security measures to ensurethe provisions of which it provides for constant updating; verification, also through the persons authorised to process, that no personal data are collected, processed, stored or stored which do not need to be processed or whose purposes are exhausted; verification that the data are stored with the guarantee of integrity and authenticity and their use for the purposesof the treatments actually carried out.
The data requested from you will be kept for the entire duration of the requested service and until the user cancels the newsletter service.
Recipients or categories of recipients of personal data
Your data will be stored at the aforementioned registered office of the Data Controller and may be communicated to other recipients for the performance of the regulatory obligations, for this purpose, provided for.
Your data may be processed by authorised persons in charge of managing the service, such as the External Relations Office.
Where necessary, for the purposes statedinstallments, your data may be disclosed to categories of external subjects for the fulfillment of regulatory obligations related to the activities carried out by the Data Controller, in compliance with the law.
In addition, only for occasional technical interventions, the user's personal data may be processed by subjects (appointed Data Processors) who provide assistancemaintenance of the Computer System of CTM S.p.A.
Optional nature and consequences of data refusal
The communication of personal data for the purposes stated above is optional but necessary in order to provide the newsletter service. Any failure or incorrect communication by you of any of the information necessary for us, or failure to express consent in the manner indicated above, will not allow CTM S.p.A. to provide the requested service.
you will be responsible for communicating to the Data Controller any change in the data processed, in order to guarantee the correct use of the requested services, without prejudice to your right to rectification.
Rights of the interested party
As a Data Subject, you may exercise, at any time, the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR) in the manner indicated in the same articles, to which reference is expressly made.
For the exercise of the aforementioned rights, and for any further information and communication regarding their data, theData Subject may contact the Data Controller through the communication channels indicated above.
The right to lodge a complaint with a Supervisory Authority
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the Regulation.