Privacy Policy

1. Introduction

Pursuant to art. 13 and 14 of Regulation (EU) 2016/679 on the “protection of natural persons with regard to the processing of personal data” (hereinafter also “GDPR”), the Users of the Services are hereby provided with the requested information on the processing of personal data concerning them (“Data”) carried out by LECCO BOATS s.r.l.

2. Identity and contact details of the Data Controller

The Data Controller is LECCO BOATS s.r.l., with registered office in Milan in Piazza Castello n. 1 and operational headquarters in Pero in Via Lungolario Isonzo (Riva Martiri delle Foibe).

3. Data Protection Officer (D.P.O.)

LECCO BOATS s.r.l. has appointed the Data Protection Officer (D.P.O.), who can be contacted at the following e-mail address: e-mail privacy@leccoboats.it

4. Categories of personal data

The Data that Lecco Boats processes are personal data and contact data provided by users (e-mail address and telephone number).

5. Purpose of the processing and legal basis

The Data provided by users may be processed for the following purposes:

1. issue of travel ticket/season ticket through the traditional ticket office and e-commerce systems of the Cardholder;
2. purposes directly connected and instrumental to the provision and management of the services on the Site (e.g. online ticket purchase, verification of previous routes, recovery of tickets not received,…)
3. response to requests for information submitted by users;
4. data processing for Personnel recruiting purposes ( Work with Us section)
5. Subject to your specific consent, commercial information, marketing and market research, sending advertising material relating to Autostradale’s products and services, with automated and non-automated contact methods
6. Management of data processing from video surveillance for the protection of assets and personal safety.
7. Subject to your specific consent, survey of the quality of services and the degree of satisfaction of Users, carried out both directly and with the collaboration of specialized companies;

The legal basis of the processing is:

1. For the purposes referred to in sub a), b), c) and d), from the execution of the contract to which the user is a party (purchase of the service) or from the execution of pre-contractual measures (e.g. provision of credentials);
2. For the purposes referred to in sub e), f) and g), by the consent given by the user.

The provision of Data is not mandatory, but any refusal to provide the Data will make it objectively impossible to follow up on the user’s requests.
On the contrary, it is understood that your refusal to give consent to the processing for the purposes referred to in points d), e) and f) will not allow LECCO BOATS s.r.l. to pursue only the purposes indicated therein.

6. Processing methods

The processing of personal data is carried out using manual, IT and telematic tools with logics strictly related to the purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data in accordance with the regulations in force.

7. Data retention period

LECCO BOATS s.r.l. will process the Data for the time strictly necessary to pursue the above purposes, without prejudice to any retention periods provided for by law or regulations.

8. Categories of subjects to whom the Data may be communicated

Some User Data may be communicated, for all the purposes indicated in point 4, to other companies of the group or to third parties, in charge of carrying out activities directly connected and instrumental to the provision of the services offered on the Site (such as, for example, the centralized provision of IT activities at group level) as well as, subject to the User’s consent, to third party companies with which Lecco Boats has entered into commercial or partnership agreements aimed at promoting the diffusion of services or the offer of new services.

The subjects belonging to the categories to which the data may be communicated will process the data and will use them, as the case may be, as Data Processors expressly appointed by the Data Controller pursuant to the law, or rather as independent Data Controllers.

The list of designated Data Processors is constantly updated and available at the headquarters of LECCO BOATS s.r.l.

9. Transfer of personal data outside the EU

Personal data may be transferred to non-EU countries, in particular in the case of services that are located outside the territory of the European Union (e.g. cloud storage). In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, for example subject to the stipulation of the standard contractual clauses adopted by the European Union.

10. Rights of the data subject

As a data subject, you have the right to:

1. Ask the Data Controller for access to the Data, their cancellation, the correction of inaccurate Data, the integration of incomplete Data, as well as the limitation of processing in the cases provided for by art. 18 of the GDPR;
2. Object, at any time, in whole or in part, to the processing of Data necessary for the legitimate pursuit of the Data Controller’s interest;
3. In the event that the conditions for exercising the right to portability referred to in art. 20 of the GDPR, receive the Data provided to the Data Controller in a structured, commonly used and machine-readable format, as well as, if technically feasible, transmit them to another Data Controller without hindrance;
4. Revoke the consent given at any time;
5. Lodge a complaint with the competent supervisory authority.

These rights can be exercised by registered mail, addressed to LECCO BOATS s.r.l, Piazza Castello, 1 – 20121 Milan (MI) – email to the address privacy@leccoboats.it