Data protection policy pursuant to Article 13 of the European Regulation n. 16/679

The Company Reparking Srl with headquarters in Biella, Via A. Vialardi di Verrone 14, VAT number 02563970025, as Data Controller, intends to inform you about how your personal data is processed.

1. Principles Applicable to the Processing of Personal Data

Pursuant to Article 5 of the European Regulation n. 16/679 the data will be processed in the following ways:

  • lawful, correct and transparent,

  • relevant and not excessive in relation to the purposes pursued by the same,

will be accurate and, in any case, if necessary, will be updated.

2. Data object of the treatment

The data processed are personal data and contact details provided by you when registering on the application used for instant parking booking, in particular:

  • First and Last name

  • Address of residence / domicile

  • Tax code or VAT number

  • e-mail address

  • Vehicle license plate

3. Purpose of the treatment

Personal data is processed for:

  1. allow registration within the platform;

  2. reserve parking;

  3. forward commercial communications via e-mail address;

  4. fulfill obligations established by laws, regulations or community legislation, as well as to comply with any provisions issued by legitimate public authorities.

The provision of personal data is necessary for a correct and efficient management of the contractual relationship, therefore, any refusal to provide it may compromise all or part of the contractual relationship itself.

4. Legal basis

The processing is necessary for the execution of a contract of which you are a part or for the execution of pre-contractual or post-contractual measures adopted at your request pursuant to art. 6.1 lit. b) of EU Reg. 16/679, or for the fulfillment of a legal obligation pursuant to art. 6.1 lit. c) of Reg Eu 16/679.

The legal basis for commercial communications (so-called soft spam) is the legitimate interest pursuant to art. 6 lett. f) EU Regulation 16/679.

5. Processing methods

The data will be processed using IT tools also by inserting them into platforms suitable for the management and transmission of data, in the ways and within the limits necessary for the pursuit of the aforementioned purposes.

Your data will be processed exclusively by persons authorized to process it.

Adequate security measures have been envisaged pursuant to article 32 of the EU Reg. n. 16/679, in order to prevent accidental or illegal destruction, loss, modification, unauthorized disclosure or access to personal data transmitted, stored or otherwise processed.

Your data will not be subject to automated decisions regarding the aforementioned purposes.

6. Data Recipients and Data Transfer to Third Countries

The processed personal data will not be disclosed, i.e. it will not be disclosed to unspecified subjects, in any possible form, including that of making it available or simple consultation.

The data will be processed by companies that manage the platforms used for uploading data, always for the pursuit of the purposes indicated and within the limits established by the relevant legislation, as well as by companies or consultants who provide technical assistance to the owner, also on the video surveillance system for number plate reading and from the garage. The subjects indicated above, for the treatments they carry out, have been appointed responsible for the treatment.

Only the Stripe company will have access to the data relating to the payment, as independent Data Controller, for the purpose of paying for the service rendered. Stripe Inc is certified under the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework, and adheres to the principles of those agreements. For more information, see Stripe's Privacy Shield Policy.

In order to protect the interests of the Company, your data may also be disclosed to law firms. Finally, they may be communicated to subjects entitled to access them by virtue of the provisions of the law, regulations and community legislation.

7. Data Retention

The Data necessary for access to the platform will be kept as long as the application registration persists.

The data referring to the parking assignment and the duration of it are pseudonymised and after 12 months they are anonymised, as they are used for statistical purposes.

The data necessary for accounting and administrative purposes will be stored in accordance with the times established by the law.

The log files with the indication of the license plate will be kept for 60 days.

The images of the license plates are not subject to conservation.

8. Rights of the interested party

As an interested party in the processing of personal data, you may exercise your rights expressly recognized by the European Regulation at any time, in particular:

  1. the right of access to your personal data (art. 15). In order to obtain confirmation from the data controller as to whether or not personal data concerning you is being processed and, in this case, obtain access to your personal data and the following information:

    • the purposes of the treatment;
    • the categories of the concerned personal data;
    • the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
    • when possible, the envisaged retention period for personal data or, if this is not possible, the criteria used to determine this period;
    • the existence of the interested party’s right to ask the data controller to rectify or delete personal data or limit the personal data processing concerning him or to oppose to their treatment;
    • the right to submit a complaint to a supervisory authority;
    • if the data are not collected from the interested party, all the information available on their origin;
    • the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such treatment for the interested party;
    • the existence of adequate guarantees pursuant to article 46 relating to the transfer of data abroad;

  2. the right to rectification (art.16) and integration of inaccurate or incomplete personal data concerning you;

  3. the right to cancellation (art. 17) of personal data concerning you if:

    • they are no longer necessary with respect to the purposes for which they were collected or otherwise processed or they are processed unlawfully or they need to be canceled to fulfill a legal obligation established by the European Union or Member State law to which the data controller is subject;
    • they have been collected in relation to the information society services offer referred to in Article 8, paragraph 1;
    • you withdraw your consent and if there is no other legal basis for the processing;
    • you object to the processing pursuant to Article 21, paragraph 1 and there is no overriding legitimate reason to proceed with the processing, or you oppose the processing pursuant to Article 21, paragraph 2;

  4. the right to limit the processing of personal data (art. 18) when one of the following occurs:

    • You contest the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
    • the processing is unlawful and you oppose the erasure of your personal data and instead request that their use be limited;
    • personal data are necessary for the data subject to ascertain, exercise or defend a right in court even though the data controller no longer needs it for processing purposes;
    • You oppose the processing pursuant to article 21, paragraph 1, pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to your interests;

  5. the right to portability of personal data (art. 20) i.e. to transmit such data to another data controller if this is based on consent or on a contract;

  6. the right of opposition (art. 21) at any time, for reasons related to your particular situation, to the processing of your data concerning you;

  7. the right to lodge a complaint with a control authority.

If you decide to exercise the rights listed above, you can write to the ordinary mail address of the Data Controller: Biella, Via A. Vialardi di Verrone 14 or to the email address privacy@reparking.it.

9. Data Controller

The data controller is the Reparking Srl company based in Biella in Via A. Vialardi di Verrone 14, VAT number 02563970025, and you can contact it for any issue concerning personal data at the above address or at the following email address privacy@reparking.it.