BRESCIA INFRASTRUTTURE S.r.l., with registered office in via Triumplina 14, 25123 Brescia, tax code 03379210986, as "Data Controller",

as required by art. 13 of Regulation (EU) 2016/679 that your personal data will be processed in compliance with the principles of lawfulness, fairness and transparency.

1. Data Controller.
   At any time, you can contact Brescia Infrastrutture S.r.l., Data Controller, at the email address dpo@bresciainfrastrutture.it for information and/or to report any problems.
   
   
2. Purpose and legal basis of data processing.
   The data that will be collected will be processed for the management of the Luggage Storage service provided to customers by Brescia Infrastructures and for the performance of activities strictly connected and instrumental to the management of the service. Brescia Infrastructures will process the Data in order to fulfill your request to use the service therefore the legal basis of the processing for the aforementioned purpose consists in the execution of a contract and in the legal obligation regarding the data provided for billing purposes. The provision of data is voluntary but necessary for the provision of the service, a possible refusal will not allow B.I. to provide the requested service The legal basis for the processing of personal data referred to above is based on the execution of a contract (see art. 6 paragraph b, of Regulation (EU) 2016/679).
   
   
3. Types of data and methods of processing
   Brescia Infrastrutture processes its common data understood in accordance with the GDPR (contact and tax data). The processing takes place with the help of electronic and even paper tools, with the collaboration of our duly trained and authorized personnel to access the data that correspond to them, according to the assigned task.
   
   
4. Data retention times
   Your data will be kept only for the time necessary for the purposes for which they are collected in compliance with the principle of minimization pursuant to art 5.1.c) GDPR. In particular, the Data collected is kept for a period of 1 year. Further prolongation of retention could only result from the exercise or defence of a right in court.
   
   
5. Communication of data, recipients and/or categories of recipients of personal data
   Your data will not be disclosed, but only communicated to third parties for reasons related to the execution of the contract or for legal obligations. Your data will be communicated exclusively to competent and duly appointed subjects for the performance of the services necessary for a correct management of the relationship, with guarantee of protection of the rights of the interested party and will be processed only by personnel authorized by the Owner.  Your data, for legal obligations and for functional purposes in the context of the execution of the contract, may be communicated to third parties, in particular to:
   
   
   • in the context of public and/or private entities for which the communication of data is mandatory or necessary in compliance with legal obligations or is in any case functional to the management of the service;
   • insurance companies;
   • constitutional or constitutional bodies;
   • related companies;
   • IT service providers.
     
     

6. Obligation to provide personal data
   It is specified that the provision of data for the execution of a contract or the provision of a service is mandatory.
   
   

7. Transfer of personal data
   The personal data collected will not be transferred to third countries or international organizations.
   
   

8. Rights of the data subject
   We have the obligation to respond to your requests to know how and why we process your data; we also have the obligation to rectify inaccurate data, integrate incomplete data and update no longer current data; finally, we have the obligation to delete the data and limit its processing for legitimate reasons, as well as to transmit the data to you and/or to third parties indicated by you; we have the obligation to stop processing if You no longer agree, unless there is a legitimate interest and/or legal right and/or obligation to process it.
   If you intend to exercise one or more of the rights indicated above, we invite you to contact our office in charge, sending a request to dpo@bresciainfrastrutture.it so that we can promptly and effectively verify your request.
   
   
9. Communication in case of data breach
   Please note that if there is a breach of your personal data such as to present a high risk to your rights and/or freedoms, Brescia Infrastrutture S.r.l. will proceed to communicate the breach without undue delay and in compliance with the company policies prepared to manage this crisis situation and, in any case, in compliance with the provisions of current legislation on the protection of personal data