Information pursuant to Art. 13 of Reg. 679/2016 (GDPR)
(site and cookies)

In compliance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data), Lucca Plus S.r.l., with registered office in Piazzale Verdi c/o Vecchia Porta S. Donato snc, 55100 Lucca (LU) – hereinafter, abbreviated “Lucca Plus” – as Data Controller – hereby informs you that, pursuant to Articles 13 and 14 of the European Regulation on the protection of personal data is in possession or may subsequently come to know information relating to you, which will be processed in accordance with the provisions herein.

OWNER, RESPONSIBLE AND AUTHORIZED

The Data Controller, pursuant to Articles 4 and 24 of EU Reg. 2016/679 is Lucca Plus, with registered office in Piazzale Verdi c/o Vecchia Porta S. Donato snc, 55100 Lucca (LU), in the person of the legal representative pro tempore, Dr. Roberto Di Grazia. The Data Controller can be contacted at the following e-mail address: info@luccaplus.it.
The updated list of Data Processors can be consulted at the registered office of Lucca Plus.

DATA PROTECTION OFFICER (DPO)

The Data Protection Officer is Attorney Victoria Parise and can be contacted at the e-mail address dpo@luccaplus.it

PURPOSE AND LAWFULNESS OF PROCESSING

The data will be processed in order to provide the institutional services of the Data Controller, namely the issuance of transit permits and parking passes paid by the City of Lucca.
The legal basis for the above processing is the performance of a task of public interest or related to the exercise of public powers vested in the Data Controller.

NATURE OF CONTRIBUTION

The provision of the requested information (personal data, license plate, VAT number, C.F., tel., etc.) is mandatory in order to fulfill legal and contractual obligations, therefore, any refusal to provide them or to the subsequent processing will determine the impossibility for the writer to execute the contract or to properly carry out all the fulfillments required by the purposes indicated in the previous point.

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Data of a personal nature provided may be disclosed to recipients, appointed pursuant to Art. 28 EU Reg. 2016/679, who will process the data as external Data Processors and/or as natural persons acting under the authority of the Data Controller and the Data Processor, in order to comply with contracts or for recruitment purposes.

Precisely, the data may be disclosed to the following parties:

• Computer system support and maintenance companies or suppliers of computer storage systems;
• Other individuals or Companies that carry out activities instrumental to the above purposes on behalf of the Owner;
• City of Lucca.

DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION

Data of a personal nature provided to Lucca Plus will not be transferred abroad, either within or outside the European Union.

RETENTION PERIOD OR CRITERIA USED TO DETERMINE THIS PERIOD

The processing will be carried out in an automated form using computer or manual methods and tools designed to ensure maximum security and confidentiality, by persons specifically authorized to do so. In compliance with the provisions of Art. 5 EU Reg. 2016/679 and the principle of minimization, personal data will be stored on protected computer systems or in paper form in a manner that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed and in any case not more than 10 years after the termination of the service.

RIGHTS OF DATA SUBJECTS AND HOW TO EXERCISE THEM

In your capacity as data subject, you may assert your rights under Chapter III (Articles 15-22) of EU Reg. 2016/679 by contacting the Data Controller by e-mail at amministrazione.luccaplus@pec.wmail.it, by regular mail c/o the address of the registered office of Lucca Plus, Piazzale Verdi c/o Vecchia Porta S. Donato snc, 55100 Lucca (LU) or by paper delivery. It should be noted that in the case of failure of the Holder to adhere spontaneously, you have the right to file a complaint before the Guarantor Authority or a judicial appeal.

Your rights under EU Reg. 2016/679 are precisely as follows:

• obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and its communication in intelligible form (right of access). In particular, the data subject has the right to access the following information:
  • (a) purpose of processing;
  • (b) categories of personal data involved;
  • (c) subjects or categories of subjects to whom personal data may be disclosed;
  • (d) the period of retention of personal data or the criteria used to determine this period;
  • (e) the existence of the data subject’s right to request from the controller the rectification or erasure of personal data concerning him or her or to object to their processing;
  • (f) the right to lodge a complaint with the supervisory authority; (g) information on the origin of the data, if not collected from the data subject;
  • (h) the existence of automated decision-making, including profiling, and in such cases at least the logic used;
  • (i) the right to be informed of the safeguards in place if personal data are transferred to a third country;
  • (l) the right to obtain a copy of the personal data being processed;
• Obtain rectification or, when interested, integration of data (right to rectification);
• Obtain the deletion of personal data concerning him/her without undue delay
  (right to be forgotten);
• Obtain restriction of processing (right to restriction of processing);
• obtain certification that the above operations have been brought to the attention, also as
  regards their content, of those to whom the data have been communicated or disseminated, except where
  such fulfillment proves impossible or disproportionate;
• the right to receive one’s data in a commonly used, machine-readable structured format in order to reuse it for other purposes and through different services, and the right to transmit one’s data from one Data Controller to another without hindrance (right to portability);
• The right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, including profiling. Where data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such purposes (right to object);
• The right not to be subjected to a decision based solely on automated processing (including profiling) that produces legal effects concerning him or her or similarly significantly affects him or her;
• The right to revoke consent at any time, without affecting the lawfulness of the processing based on the consent given prior to revocation, if the processing is based on Art. 6(1)(a) EU Reg. or Art. 9(2)(a) EU Reg;
• in certain situations, the right to receive notices that their personal data has been breached.

DATA DISSEMINATION

The personal data contained within the curriculum vitae will not under any circumstances and for any reason be disclosed to third parties not authorized by the Data Controller and may be produced only at the request of the Judicial Authority and/or Guarantor Authority, as well as to all other parties to whom the communication is required by law for the fulfillment of the said purposes.

AMENDMENTS TO THIS POLICY AND REFERRALS

Lucca Plus reserves the right to change this document, users will be notified by notices posted on www.luccaplus.it or by personal email.