Privacy and cookie policy
Information pursuant to Art. 12, 13 and 14 of the General Data Protection Regulation (EU) 2016/679 (GDPR) – südtirolmobil
For the purposes of the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as “GDPR”) on the protection of natural persons with regard to the processing of personal data, STA – Südtiroler Transportstrukturen AG/STA – Strutture Trasporto Alto Adige SpA in its position as data controller (hereinafter referred to as “Company” or “Controller”) is obliged to provide information on personal data that may have been collected on natural persons (“Data Subjects”).
The data held by the Controller is typically collected directly from the Data Subjects and occasionally also from third parties.
Pursuant to Article 14 g) of the GDPR, the Controller hereby informs all Data Subjects that, if and when personal data is not collected directly from a Data Subject, no automated decision-making processes are used; this includes profiling as referred to in Article 22, paragraphs (1) and (4) of the GDPR.
Purposes of data processing
Any data is processed as part of the Controller’s regular operations for the following purposes:
- for purposes related to obligations arising from national and/or international laws or regulations, as well as from measures adopted by national or international bodies or authorities.
- for purposes related to the use of the website www.suedtirolmobil.info/en.
No consent is required for the processing of this personal data.
Processing this data is permitted under Art. 6 a), b), c) and f) of the General Data Protection Regulation (EU) 2016/679 (GDPR).
Data processing methods
Any data collected may be processed manually or electronically with the help of IT systems; all such methods are designed to safeguard and guarantee data security, confidentiality and availability.
Providing your data for the purposes set forth in 2) is optional; on a practical level, however, refusal to do so would make it impossible to process the requests and applications of the persons concerned.
Providing your data for the purposes set forth in 1) is mandatory, since it is necessary in order to fulfil any regulatory obligations.
Disclosure of personal data
Collected data may be passed on to any legal entity (office, body or public administration organ, company or institution) that are legally required or entitled to have knowledge of such data, as well as to any person with a right of access (diritto di accesso/Aktenzugriffsrecht) or a so-called right of generalised civic access (diritto di accesso civico generalizzato/allgemeiner Bürgerzugang). In the case of special data and/or data relating to criminal convictions and offences, data may be passed on to legal entities as set forth in the regulations for the processing of sensitive and judicial data, as outlined by the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) on 30/05/2005. Moreover, data may also be passed on to any consultants, insurers and other service providers for processing in connection with the aforementioned purposes.
No consent is required for the processing of data pertaining to the above-mentioned categories.
Scope of availability of personal data within the Company
The data collected may be made available to the Data Controller, their Data Protection Officer and their Data Processing Officers.
Time limits for the processing and storage of personal data
The data processing referred to in this present notice will be limited to the duration strictly necessary to comply with the obligations imposed on the Controller by national and/or international laws, as well as by the laws of the countries to which the data may be transferred.
Data Controller and Data Protection Officer
As the Data Controller, STA – Strutture Trasporto Alto Adige SpA/STA – Südtiroler Transportstrukturen AG (Via dei Conciapelli/Gerbergasse 60, 39100 Bolzano/Bozen) is responsible for all data processing.
E-mail address: info@sta.bz.it;
As the Data Protection Officer, Paolo Recla is the person responsible for the protection of personal data; for this purpose, they are based at the registered office of this Company.
Certified e-mail address (in Italy: PEC): paolorecla.dpo@legalmail.it
Rights of the persons affected
In accordance with Articles 15 to 22 of the GDPR, all Data Subjects are entitled to exercise certain rights. In relation to their personal data in particular, all Data Subjects are entitled to obtain the following from the Data Controller: the right to lodge a complaint with a supervisory authority (Art. 13, paragraph [2] d); the right of access (Art. 15); the right to rectification (Art. 16); the right to erasure (“right to be forgotten”, Art. 17); the right to restriction of processing (Art. 18); the right to be notified of any rectification, erasure of personal data or restriction of processing (Art. 19); the right to data portability (Art. 20); the right to object to the processing of their personal data (Art. 21) and the right not to be subject to automated decision-making processes including profiling (Art. 22).
Cookies
We use technical, navigation or session cookies enabling you to browse and use our website (e.g. choice of language, timetable searches, paying for or topping up your Südtirol Pass, authentication when accessing personalised information online etc.).
However, we do not install profiling cookies, which are used for advertising messages based on the user's navigation. In accordance with European and Italian law, prior consent is required for the use of profiling cookies.
Most browsers are set to automatically accept cookies. You can deactivate the automatic storage of cookies at any time or tell your browser to notify you whenever cookies are used.
Online ticket shop
Information pursuant to Art. 12, 13 and 14 of the General Data Protection Regulation (EU) 2016/679 (GDPR)
For the purposes of the General Data Protection Regulation (EU) 2016/679 (hereinafter referred to as “GDPR”) on the protection of natural persons with regard to the processing of personal data, STA – Südtiroler Transportstrukturen AG/STA – Strutture Trasporto Alto Adige SpA in its position as data controller (hereinafter referred to as “Company” or “Controller”) is obliged to provide information on personal data that may have been collected on natural persons (“Data Subjects”).
The data held by the Controller is typically collected directly from the Data Subjects and occasionally also from third parties.
Pursuant to Article 14 g) of the GDPR, the Controller hereby informs all Data Subjects that, if and when personal data is not collected directly from a Data Subject, no automated decision-making processes are used; this includes profiling as referred to in Article 22, paragraphs (1) and (4) of the GDPR.
Purposes of data processing
Any data is processed as part of the Controller’s regular operations in connection with the issuing of and payment for tickets.
Tickets can be purchased online using the ticket shop function of the südtirolmobil app.
All ticket payment is processed by LogPay Financial Services GmbH, which acts as a separate Controller.
https://documents.logpay.de/en/datenschutzinformationen.pdf
Any personal data collected in connection with the above activities is processed for the following purposes:
- for purposes closely related to the contract and the performance of the obligations deriving from the contract itself;
- for purposes related to obligations arising from national and/or international laws or regulations, as well as from measures adopted by national or international bodies or authorities. Where applicable, this includes activities required in order to comply with obligations arising from anti-money laundering legislation.
No consent is required for the processing of this personal data. Processing this data is permitted under Art. 6 b), c), e) and f) of the General Data Protection Regulation (EU) 2016/679 (GDPR).
Data processing methods
Any data collected may be processed manually or electronically with the help of IT systems; all such methods are designed to safeguard and guarantee data security, confidentiality and availability.
Providing your data for the purposes set forth in 1) is optional; on a practical level, however, refusal to do so would make it impossible to perform the existing pre-contractual and/or contractual relations. Providing your data for the purposes set forth in 2) is mandatory, since it is necessary in order to fulfil any regulatory obligations.
Disclosure of personal data
Collected data may be passed on to any legal entity (office, body or public administration organ, company or institution) that are legally required or entitled to have knowledge of such data, as well as to any person with a right of access (diritto di accesso/Aktenzugriffsrecht) or a so-called right of generalised civic access (diritto di accesso civico generalizzato/allgemeiner Bürgerzugang). In the case of special data and/or data relating to criminal convictions and offences, data may be passed on to legal entities as set forth in the regulations for the processing of sensitive and judicial data, as outlined by the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) on 30/05/2005. Moreover, data may also be passed on to any consultants, insurers and other service providers for processing in connection with the aforementioned purposes.
No consent is required for the processing of data pertaining to the above-mentioned categories.
Scope of availability of personal data within the Company
The data collected may be made available to the Data Controller, their Data Protection Officer and their Data Processing Officers.
Time limits for the processing and storage of personal data
The data processing referred to in this present notice will be limited to the duration strictly necessary to provide the services of the online ticket shop, after which all data will be deleted.
Data Controller and Data Protection Officer
As the Data Controller, STA – Strutture Trasporto Alto Adige SpA/STA – Südtiroler Transportstrukturen AG (Via dei Conciapelli/Gerbergasse 60, 39100 Bolzano/Bozen) is responsible for all data processing.
E-mail address: info@sta.bz.it;
As the Data Protection Officer, Paolo Recla is the person responsible for the protection of personal data; for this purpose, they are based at the registered office of this Company.
Certified e-mail address (in Italy: PEC): paolorecla.dpo@legalmail.it
Rights of the persons affected
In accordance with Articles 15 to 22 of the GDPR, all Data Subjects are entitled to exercise certain rights. In relation to their personal data in particular, all Data Subjects are entitled to obtain the following from the Data Controller: the right to lodge a complaint with a supervisory authority (Art. 13, paragraph [2] d); the right of access (Art. 15); the right to rectification (Art. 16); the right to erasure (“right to be forgotten”, Art. 17); the right to restriction of processing (Art. 18); the right to be notified of any rectification, erasure of personal data or restriction of processing (Art. 19); the right to data portability (Art. 20); the right to object to the processing of their personal data (Art. 21) and the right not to be subject to automated decision-making processes including profiling (Art. 22).
Cookie: _fbp
Run-time: 3 months
This website uses the Facebook pixel, an analytics service provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”) based on prevailing legitimate interest (analysis of website usage). Part of the data is transmitted to the USA. All data transfer takes place in accordance with the Privacy Shield Principles. When you visit our website, a connection is established with servers owned by Facebook. Data is then transmitted to those Facebook servers, some of which are located in the USA. The Facebook pixel uses cookies to store information about the website user and to analyse their use of the website. Facebook uses the collected data to assess how the website is used, to create reports on website activities and for other services in connection with the use of the website and the internet. For more information about how Facebook manages user data, please visit their privacy policy: https://www.facebook.com/privacy/explanation
How to deactivate the Facebook pixel
As a general rule, you can avoid the storage of your data on our website by activating the “Do not track” function in your browser. Our website will recognise the “Do not track” request that your browser then sends out to all websites. To deactivate the storage of your data using the Facebook pixel only on this website, simply unflag Facebook in the cookie settings. An opt-out cookie will be created preventing your data from being stored during your future visits to this website.