As required by current legislation (art. 13 General Data Protection Regulation, hereinafter also GDPR), SO.GE.A.AL. S.p.A., the legal representative pro tempore, (hereinafter also referred to as "Owner" or the "Company") provides users of the website www.aeroportodialghero.it (hereinafter, the “website”), the information related to the processing of their data.
The Data Controller is SO.GE.A.AL. S.p.A., with a registered office in Regione Nuraghe Biancu, 07041 Alghero (SS), P. IVA 01635090903. The company can be contacted via email at email@example.com or by phone at +39.079.935011
DATA PROTECTION OFFICER (DPO) CONTACT
The Data Controller has appointed the Data Protection Officer. They can be contacted at firstname.lastname@example.org
WHAT DATA IS PROCESSED?
The data processed is navigation data and data provided spontaneously by the user.
Data provided directly by the user
This category includes all personal data provided by the user on an optional basis (for example, when requesting information by calling the numbers indicated on the website or writing to e-mail addresses on the website).
The computer systems and software procedures for this website's operation, during regular operation acquires some personal data whose transmission is implicit in the use of internet communication protocols.
This collected information is not to be associated with users, however through processing and association with data held by third parties, users could be identified.
This category of data includes IP addresses or domain names of computers that connect to the website, the addresses in notation URI (Uniform Resource Identifier) of requested resources, time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (successful, error, etc.) and other parameters regarding the user’s operating system and the computer environment.
Information acquired through cookies and other tracking systems
WHAT ARE THE PURPOSES AND LEGAL BASIS OF THE PROCESSING?
Data provided directly by the user: purposes and legal basis
Personal data provided by the user in contacting the Data Controller is only used to process requests and use the services you have joined.
Therefore, the legal basis for processing such data is the execution of pre-contractual, contractual measures and legal obligations.
If necessary, the data can also be used against the owner's legitimate interest to ensure the security and proper functioning of its systems, to carry out defensive activities or assert or defend its right in court.
The user may provide their data through the forms present on the website and in the areas dedicated to certain services, where specific information is reported, the user must read and understand the information before providing personal data.
Navigation data: purposes and legal basis
Navigation data is used to keep track of requests made for website security purposes and to check its proper functionality and could be used to ascertain responsibility in any computer crimes against the website.
The legal basis and legal obligation for processing such data is in the legitimate interest of the Data Controller.
Information acquired through cookies and other tracking systems
The legal basis for non-technical cookies is consent, which can be revoked at any time.
HOW IS DATA COLLECTED
The data collected is processed with IT tools that guarantee adequate security measures to prevent data loss, illicit or incorrect use and unauthorised access.
Data transfer abroad
Per l’hosting, la ricezione delle richieste tramite email e per ulteriori servizi indicati specificamente nelle informative presenti sul sito il titolare utilizza strumenti di terze parti che comportano un trasferimento di dati all’estero nel rispetto delle necessarie garanzie (clausole contrattuali standard).
Data storage period
The data provided directly by the interested party is stored for the period necessary to process the requests and then deleted, subject to security needs (which may require further storage).
According to legal obligations, the navigation data of users who access the website are acquired and stored for 30 days. The IP addresses obtained during the compilation of the forms on the website are kept for the time established to store the user's data through these forms, for which reference is made to the specific information.
WHAT HAPPENS IF THE DATA IS NOT PROVIDED?
Except for the navigation data necessary to follow the computer and telematic protocols, users' provision of data through the various methods made available is free and optional. However, failure to provide data will make it impossible to respond to requests made and the use of services of interest.
The data will be processed by the Data Controller and authorized personnel.
The data will be known by the companies that the owner uses to provide hosting services and support and maintenance of the systems used and by the consultants who manage litigation and legal assistance in the case of any disputes for which you would need their involvement. The competent authorities may also know the data in case of specific requests to which the Data Controller is required, by law, to follow up.
Those who operate as independent controllers do so because it is required by law or necessary to fulfil the obligations arising from contractual relationships or the holder's legitimate interest in maintaining the security of the computer systems and security conduct through legal counsel. However, the communication is limited to only categories of data whose transmission is necessary for the performance of the activities and purposes pursued.
The interested party may request a list of external subjects who carry out their activity as data processors from the Data Controller.
WHAT ARE THE RIGHTS OF THOSE CONCERNED?
The law recognises that the interested party has the right to ask the Data Controller for access to personal data, the rectification or cancellation of data, the limitation or opposition to the processing of their data, as well as the right to data portability.
The interested party may assert their rights at any time, without formalities, by contacting the Data Controller or the Data Protection Officer through the contact information listed on this website. The Data Controller will respond within 30 days of receiving the request, as required by current legislation.
It should be noted that you have the right to oppose the processing of marketing data.
The interested party is then informed, and if they consider that the processing of their personal data occurs in violation of the provisions of the RGDP, they have the right to file a complaint with the guarantor, as provided for by art. 77 of the regulation itself or to appeal to the appropriate courts (art. 79 of the regulation).
Send us a complaint or a suggestion