Privacy – Reserved Area

Regulation (EU) 2016/679 (GDPR) provides for the right to protection of natural persons with regard to data processing. In compliance with this legislation, with reference to your personal data provided to us, the company CTM S.p.a. wishes to inform you in advance, pursuant to Articles 12 and 13 of the GDPR, that such processing will be based on the principles of lawfulness, fairness, transparencyand the protection of your privacy and your rights as enshrined in Article 5 of the GDPR.

The Data Controller is CTM S.p.a. with registered office in Cagliari, Viale Trieste 159/3, certified email address ctmspa@legalmail.it, fax 070 2091 222.

The Data Controller, in compliance with the provisions of art. 37 GDPR, has appointed the Data Protection Officer (DPO). DPO contact details: rpd@ctmcagliari.it

Your data will be processed exclusively for specific, explicit and legitimate purposes, and subsequently processed in such a way that it is not incompatible with these purposes. In particular, CTM S.p.a. will process your personal data to allow the creation/registration of the account and to be able to access the services offered by the Company through its institutional website.
The legal basis of the data processing, for the purpose stated above, is your explicit consent, which may be expressed by means of a specific flag at the bottom of the format dedicated to the account creation/registration phase. Consent is always revocable at any time. To revoke the consent given, you can send an email to the following address: < a href="mailto:gruppoprivacy@ctmcagliari.it">gruppoprivacy@ctmcagliari.it, indicating in the subject "Revoke consent reserved area site". The revocation, however, does not affect the lawfulness of the processing based on consent before the revocation.

Data processing is carried out through IT procedures by specially authorised internal parties. They are allowed access to your personal data to the extent and to the extent that it is necessary for the performance of the processing activities concerning you.
In addition, to ensure your confidentiality and the integrity of your personal informationprovided to us, personal data will be processed in such a way as to ensure adequate security, including protection, through appropriate technical and organisational measures.
CTM S.p.a. periodically checks the tools by which the data are processed and the security measures envisaged for them, which require constant updating; checks, including through the car subjectsprocessed, that no personal data is collected, processed, stored or stored that does not need to be processed or whose purposes are exhausted; verifies that the data are stored with the guarantee of integrity and authenticity and their use for the purposes of the processing actually carried out.
CTM S.p.a. guarantees that the data that, also following thechecks, whether they are excessive, irrelevant or non-essential, will not be used except for the possible storage, in accordance with the law, of the deed or document containing them.
The data requested from you at the time of creation/registration in the appropriate area of the Company's institutional site, for the purpose stated above, will be stored in a form that withhear your identification for a period of time not exceeding the achievement of the purposes, after which your data will be definitively destroyed.
In particular, in relation to the purpose stated above, personal data will be kept until the revocation of consent and subsequent cancellation of registration from the Company's website.

The processing of data provided through registration on the Company's institutional website takes place at the aforementioned registered office of the Data Controller and may be communicated to other recipients for the performance of the regulatory obligations, for this purpose, provided for. Your data may be processed, for occasional technical interventions, also by external parties specifically notmines Processors (such as maintenance companies, IT assistance).
The identity of the external parties providing the services indicated above may be requested at any time from the Data Controller. Apart from the aforementioned hypotheses, the data are not disclosed to third parties nor are they subject to dissemination.

The communication of personal data for the purposes stated above is optional. However, the possible failure and/or incorrect communication of any of the requested information could result in:

• the impossibility of proceeding with the creation/registration of the account to access the services through the istit siteof the Company

It will be your responsibility to inform the Data Controller of any change in the data processed, in order to ensure proper handling of the request, without prejudice to your right to rectification.

As a Data Subject, you may exercise, at any time, the right of access (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art. 17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR) in the manner indicated in the same articles, to which reference is expressly made.
For the exercise of the aforementioned rights and for any further information and communication regarding their data, theData Subject may contact the Data Controller through the communication channels indicated above.

Without prejudice to any other administrative or judicial appeal, the data subject who considers that the processing concerning him/her violates Regulation (EU) 2016/679 has the right to lodge a complaint with a supervisory authority, in particular in the Member State in which he/she usually resides, works or in the place where the alleged violation occurred.

The information on the processing ofthe personal data relating to the services offered by CTM S.p.a., through its institutional website, will be viewable in the specific section dedicated to the specific service requested.