Privacy Notice
Dear Customer,
Autogrill Italia S.p.A. (“Autogrill”), acting as data controller (“Controller”), informs you that your personal data are processed through electronic and non electronic means, according to logics and procedures connected with the purposes set out below and in compliance with the GDPR, including the confidentiality and security principles.
1. Purposes of the processing and consequences in case of denial to provide your personal data
Autogrill collects the personal data that our Customers provide when they send their reports through our “Customer Service”. For the use of the service it is necessary that our Customers provide their name and surname, their telephone number and their email address where we can contact them and give them feedback.
We process your personal data for the following purposes.
a) Purposes necessary for managing relations with customers
Autogrill processes your personal data with the intent to allow our Customer to use our “Customer Service” through which our Customers can submit reports and/or complaints concerning the services offered by Autogrill , and for the fulfillment of the applicable legal and regulatory obligations.
For the purposes indicated above, it is necessary to provide your personal data and any refusal could prevent you from using the Service.
2. Legal bases of processing
Autogrill will base the processing of your personal data on the following legitimacy bases:
- your consent,
- fulfillment of legal obligations
In compliance with the GDPR, the personal data concerning you from time to time may be used to update and correct the information collected previously.
3. Communication of your personal data to third parties
Personal data is accessible to our duly authorized personnel (eg CRM, Retail, IT personnel) based on need criteria and communicated to third parties in the following cases: (i) when communication is required by law and applicable regulations with respect to legitimate third parties, such as authorities and public bodies for their respective institutional purposes, e.g. anti-money laundering legislation, judicial authorities; (ii) communication to third parties in the case of extraordinary transactions (eg mergers, acquisitions, sale of companies, etc.).
Your personal data is also shared with our service providers, e.g. for services of a technical and organizational nature that are functional to the purposes indicated above. We provide to these entities only the data necessary to perform the services agreed and they act as Data Processors, based on the instructions received from Autogrill.
Autogrill does not communicate your personal data to third parties for marketing or profiling purposes.
4. Data retention
Your personal data is stored by Autogrill for the time strictly necessary for achieving the purposes for which your personal data are collected, particularly for the time necessary to collect your report and to give you any feedback; and for the fulfillment of the applicable legal and regulatory obligations.
Furthermore, the data will be deleted or permanently anonymised to achieve the aforementioned purposes, except in the case where Autogrill is required to keep the data for a further period to comply with legal obligations or regulations.
5. Data Controller and Data Protection Officer
The Data Controller is Autogrill Italia S.p.A. with its registered office in Novara, Via Greppi 2, and secondary office in Rozzano (MI) Centro Direzionale Milanofiori, Strada 5 – Palazzo Z. You can contact our Group DPO located in Italy to the following address: dpo@autogrill.net.
6. Your rights
You can contact the Data Controller or Data Protection Officer at the above addresses to get an updated list of our external subprocessors, the subjects to whom the data are communicated and to exercise at any time the rights referred to in art. 15 ss. of the RGPD, e.g. obtain confirmation of the existence or otherwise of your data, verify its content, origin, accuracy, request integration, updating, rectification, cancellation, anonymity, requesting portability, data protection, processing limitation, opposition to processing for legitimate reasons, e.g. opposition to marketing activities. You have the right to withdraw your consent at any time, as well as to file an application with the Supervisory Authority (the Personal Data Protection Authority).
