INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA OF USERS AS PER ART. 13 OF REG. (EU) 2016/679 ("GDPR") "YOUFIRST"
Name, surname, telephone number, e-mail address, billing information.
Processing of Data
PURPOSES OF THE PROCESSING
Your personal data and those provided as the holder of parental responsibility when completing the paper / online form will be processed by AdB to give feedback to your request for YouFirst services departing, YouFirst return and YouFirst on arrival.
LEGAL BASIS OF THE PROCESSING
Execution of a contract of which you are a part.
PERIOD OF STORAGE
Contract duration and, after the expiry date, for the ordinary 10-year statutory limitation period.
Obligatory provision of data
The provision of personal data highlighted with an asterisk (*) on the paper registration form/online form is required to handle the received request. The refusal to provide those data does not allow AdB to proper respond to your report.
Data recipients
Personal data may be processed by third parties operating as Controllers such as, i. e. Authorities and control bodies and in general, public or private subjects who are entitled to request those data. Personal data may also be processed, on behalf of AdB, by external parties designated as Processor who are given appropriate operating instructions.
Authorized subjects to the processing
Personal Data may be processed by employees of the corporate functions responsible for the pursuit of the purposes, who have been authorized to process and who have been received adequate operating instructions.
Rights of the data subject - the right to lodge a complaint with a supervisory authority
By contacting Marconi Business Lounge – MBL at the following e-mail address marconilounge@bologna-airport.it, data subjects have the right to ask the Controller to access to data concerning themselves, the right to rectifications; erasure; to restriction of processing as per art. 18 GDPR; right to data portability; right to object and others, as well as the opposition to the process in the hypothesis of legitimate interest of the Controller.
Data subjects, furthermore, if the data processing is based on consent or on a contract, and it is processed with automated tools, shall have the right to receive their personal data in a structured, commonly used and machine-readable format, as well as, if technically possible, have the right to transmit those data to another Controller without hindrance from the Controller to which the personal data have been provided – so called Right to portability as per art. 20 GDPR.
Data subjects have the right to lodge a complaint to the competent Supervisory Authority in the European State in which they reside habitually or work, or the State in which the alleged data breach has occurred.
