Privacy – Amicobus

Pursuant to Regulation (EU) 2016/679, which establishes rules relating to the protection of natural persons with regard to the processing of personal data, CTM S.p.a. is obliged to provide you with the following information regarding the processing of your personal data and the data provided by you relating to other persons. The data, according to the principles set out in Article 5 of Regulation (EU) 2016/679, knowsshall be: processed in a lawful, correct and transparent manner, processed for specified, explicit and legitimate purposes and in a manner compatible with such purposes, adequate, relevant and limited with respect to the purposes, accurate and up-to-date, kept for a period of time not exceeding the achievement of the purposes, so as to ensure adequate security, integrity and confidentiality through technical measuresniche and organisational requirements.

The Data Controller is CTM S.p.A. with registered office in Cagliari, Viale Trieste 159/3. At any time you can contact the Data Controller through the following channels: PEC address ctmspa@legalmail.it, fax 070 2091 222.

The Company CTM S.p.A. has appointed the Data Protection Officer (DPO) who can be contacted at the following address: rpd@ctmcagliari.it.

The Amico Bus transport service is provided by the company CTM S.p.a., through its own driving staff and through external staff to accompany the user, who is on board any means of transport. CTM S.p.a. provides the service to users accredited to the SUS portal of the Autonomous Region of Sardinia.
The treatment to which your lost data is subjectedwill be processed by CTM S.p.a. for the following purposes:

1. on-call transport service request management
2. planning and provision of the on-call transport
service
3. verification of the accreditation of the user to the SUS portal of the Sardinia Region

The processing of data for the purposes stated above will be carried out to fulfil the transport contract.

For the processing of personal data relating to health pursuant to art. 9 of Reg. (EU)679/2016 the processing is necessary for reasons of public interest aimed at using the requested on-call transport service.

the personal data originate from the request to provide the Amico Bus call service.

The data provided, in addition to the Data Controller, will be processed by the personnel of the company entrusted with the on-board assistance service who has been appointed Data Processor.
The data you provide will not be communicated or disclosed to third parties.
The subjects who provide services instrumental to the purposes specified above may become aware of the personal dataicate. These subjects will act as Data Processors. The data may be accessed, only for occasional technical interventions, by subjects (appointed Data Processors for this purpose) who provide assistance and maintenance services for the CTM Computer System.
The identity of the other parties to whom the data may be communicated may be requestedto the Data Controller at any time.

The processing of data is carried out through paper media or computer procedures by the personnel of CTM S.p.a. specifically authorised. They are allowed access to your personal data to the extent and to the extent that it is necessary for the performance of the processing purposes indicated. In addition, data can be processed through messaging applicationsfor the possible cancellation of the request. All the aforementioned data will be kept for the time necessary to pursue the purposes referred to in this information regarding the duration of the on-call service requested and for the times provided for by law and reference standards, i.e. for at least 10 years from the request for the service. In the case of processed datavia instant messaging applications will be deleted within 4 days of receipt.

The data communicated by the Data Subject through instant messaging applications may be transferred outside the European Union.

The communication of personal data for the purposes stated above is optional but necessary in order to follow up on the transport service requested by the user.
CTM S.p.a. informs that the possible failure and/or incorrect communication of any of the necessary information could make it impossible to guarantee the adequacy of the treatment of the agreements withfor which it is carried out.
It will be your responsibility to inform the Data Controller of any change in the data processed, in order to ensure proper management of the contractual relationship, without prejudice to your right to rectification.

As a Data Subject, you may exercise, at any time, the following rights, as provided for in the articles of Regulation (EU) 2016/679: art. 15 – right to request the data controller to access your personal data, art. 16 – right to request the data controller to correct your inaccurate or incomplete personal data, art. 17 – right toask the Data Controller to delete your personal data, art. 18 – right to ask the Data Controller to limit the processing of your personal data, art. 20 – right to receive from the Data Controller in a structured, commonly used and machine-readable format the personal data concerning you and right to transmit such data to anotherdata controller and right to direct transmission from data controller to another data controller, if technically feasible. This right to data portability may only concern data processed by automated means and on the basis of consent or a contract, art. 21 – right to object at any time, for reasons related to your particular situation, to the processing of data fordata concerning you, art. 22 – right not to be subjected to a decision based solely on automated processing, including profiling.
For the exercise of the aforementioned rights, and for any further information and communication regarding their data, theData Subject may contact the Data Controller through the communication channels indicated above.
Donewithout prejudice to any other administrative or judicial appeal, the data subject who considers that the processing concerning him/her violates Regulation (EU) 2016/679, has the right to lodge a complaint with the Privacy Guarantor.
If CTM S.p.a. intends to process personal data for a purpose other than that for which they were collected, before such further processing it will provide you with specific informationrmativa.