INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR THE ISSUE OF THE PASS AND/OR RESIDENT / TRAVELLER CARD

The company BN DI NAVIGAZIONE S.P.A.
with registered office in CALATA ITALIA 24/A – 57037 – PORTOFERRAIO (LI) – P.I.: 01968710994
PEC (certified email): [email protected] – E-MAIL: [email protected]
TEL.: +39 0565.269752 – FAX: +39 0565.919894 (hereinafter, the “Company” or “the Controller”) hereby informs you that it is the controller of your personal data.

The Controller may process the following types of personal data:
– personal and contact details (name, date and place of birth; tax code; place of residence, abode and/or domicile; telephone number, vehicle registration number, email address);
– double-sided copy of your identity document;
– passport photo
– certificate of residence
– vehicle registration certificate
– pass/card number and pass/card code.

The above personal data shall be processed, including by means of computer systems, for the following purposes:
a) for the verification of the existence of the requirements contractually foreseen in order to be able to issue the season ticket and/or Passenger Card for Residents and/or Commuters;
b) for the issue of the pass and/or Passenger Card for Residents and/or Travellers, and their associated code, which is required in order to proceed with the booking of journeys at reduced fares at the Company’s ticket offices or through the online ticketing system;
c) for service communications relating to the pass and/or the Passenger Card for Residents and/or Travellers;
d) a copy of your passport photo in paper format will be acquired by scanning/digitising it and uploading it to the booking system of the Controller, after which the paper copy will be destroyed and will be viewable, via tablet, by the ground staff during boarding. This is in order to verify that it is in fact the passenger who is the one arriving at the boarding gate with a discounted ticket associated with their pass and/or Passenger Card for Residents and/or Travellers, while the employment contract, vehicle registration certificate and certificate of residence will be viewed at the time of signing by the ticketing agent, but no copies will be retained or acquired.
e) for reporting any abuse in the use of the pass and/or the Resident and/or Traveller Ticket;
f) for the application of the penalties provided for in the contract in the event of unlawful use of the pass and/or Passenger Ticket for Residents and/or Travellers
g) for purposes related to requirements provided for by law
h) for the sending of commercial communications relating to discounts and accessory services connected to the pass and/or Passenger Ticket for Residents and/or Travellers

The processing of your personal data for the purposes referred to in letters a), b), and c), referred to in the foregoing point, has as its legal basis the performance of the contract.
The processing of your personal data for the purposes referred to in letters d), e), and f), referred to in the foregoing point, has as its legal basis the legitimate interest of the data controller in preventing the unlawful use of the facilities reserved for residents/travellers, which is overridden by the consequent curtailment of your right to confidentiality resulting from such processing.
The processing of your personal data for the purpose referred to in point g) has as its legal basis the legal obligations to which the Controller is subject. The processing of your personal data for the purpose referred to in point h), in the event of communications sent by means of the e-mail used by you to proceed with the request for the “Resident/Passenger Card”, has as its legal basis Article 130 of Legislative Decree 196/2003 (known as soft spam). In the event that the aforementioned communications are sent by means of the Controller’s other contact details, the legal basis justifying such processing is the legitimate interest of the Controller balanced with their interest in receiving communications relating to the benefits granted through the pass and/or Passenger Ticket for Residents and/or Travellers. You may, at any time, request the Controller to cease receiving commercial communications relating to the benefits and accessory services connected to the season ticket and/or the Pass for Resident Passengers and/or Travellers, by writing to the e-mail address [email protected] or by registered letter with acknowledgement of receipt addressed to BN DI NAVIGAZIONE S.P.A., CALATA ITALIA 24/A – 57037 – PORTOFERRAIO (LI).

The provision of the personal data requested when applying for the pass and/or the Passenger Card for Residents and/or Travellers is compulsory in order to enable you to receive the same and, therefore, to take advantage of the benefits provided. If you fail to provide your personal data, you will not be able to receive your pass and/or Passenger Card for Residents and/or Travellers and, therefore, you will not be able to take advantage of the benefits provided with it.

Your personal data will be retained for the entire period of validity of the pass and/or Passenger Card for Residents and/or Travellers, and will be deleted at the end of the relationship, unless other legal (e.g. tax) or other obligations (e.g. defence in court of a right of the Controller or a third party) require longer retention periods.

The personal data communicated by you for the purposes described in Article 3 above may be brought to the attention of or disclosed to the following parties:
(i) employees and/or collaborators of the Controller, as well as professionals and/or professional firms in charge of the administrative and accounting management of the contractual relationship;
(ii) public or private entities pursuing tax purposes, etc. (e.g. Revenue Agency, etc.);
(iii) public or private entities who, by virtue of provisions of law and/or an administrative or judicial measure, are entitled to access the data;
(iv) private data subjects that the Controller uses for the pursuit of one or more of the purposes indicated in paragraph 3. In particular, the employees of the port company who carry out check-in operations upon boarding may have access to a copy of your identity document by means of a tablet provided by the Company;
(v) Entities that the Controller uses to perform activities related to the execution of the service or companies that the Controller uses for the hosting and development of the booking/administration services (SITRAP – SISTEMI TRASPORTO PERSONE SRL).

The Data Controller does not transfer personal data to third countries or to international organisations.
The list of “personal data processors” pursuant to Article 28 of the GDPR that may be appointed will be available at the Controller’s registered office or may be requested by sending a written request to: [email protected]

Articles 15-22 of the Regulation confer on the data subject the exercise of the following rights:
• request confirmation of the existence or otherwise of their personal data;
• obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and when possible, the storage period
• obtain the rectification and erasure of the data;
• obtain the restriction of processing;
• obtain the portability of the data, i.e. receive them from the data controller, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance
• object to an automated decision-making process concerning natural persons, including profiling;
• where the processing is based on consent, to withdraw their consent at any time (pursuant to Article 7(3) GDPR).

The above rights may be exercised by the data subject by contacting the Data Controller, sending an email to [email protected] or by registered letter with acknowledgement of receipt addressed to BN DI NAVIGAZIONE S.P.A., CALATA ITALIA 24/A – 57037 – PORTOFERRAIO (LI).

The Data Controller has appointed a Data Protection Officer (“Data Protection Officer”, “DPO”), whom you may contact in order to exercise your rights, as well as to receive any information relating thereto and/or this Policy, by writing to: [email protected] or by ordinary mail by writing to the attention of the Data Protection Officer at the Company’s registered office.
Or by sending a certified e-mail message to the PEC (certified email) address: [email protected]

Pursuant to Article 77 of the GDPR, if the data subject considers that the processing of their personal data violates EU Regulation 2016/679, they have the right to lodge a complaint with the Supervisory Authority, which in Italy is the Italian Data Protection Authority, Piazza Venezia n. 11 – Scala B, 00187, Rome (RM) – www.garanteprivacy.it, or to take the matter to the appropriate Judicial Authorities as provided for in Article 79 of the GDPR.