INFORMATION ON THE PROCESSING OF PERSONAL DATA

pursuant to art. 13 of Regulation EU 679/2016 G.D.P.R.

This information is provided pursuant to art. 13 of EU Regulation 679/2016 by Onebus S.r.l., having its registered office in Via Santuario 20 – 20831 Seregno (MB) and operating headquarters in Corso delle Province 7 – 98030 Gaggi (ME), n. q. of Data Controller.
We inform you that your personal data are used in compliance with the principles of correctness, lawfulness, transparency, protection and confidentiality of the same and your rights, as established by the Regulation.
We invite users of the site to verify that the device from which they connect is equipped with adequate software to protect the transmission of data on the network (for example antivirus and updated browsers) and that their internet service provider has adopted suitable measures for security network data transmission.

1. PURPOSE OF DATA PROCESSING AND LEGAL BASIS
We inform you that the site you are browsing within allows you to make reservations, reports and complaints, requests repayments. The registration of your data is aimed at creating a personal account within the site itself, through which you can manage the aforementioned purposes.
Your data will be processed with the support of paper and computerized means for the following purposes:

• administrative and accounting activities related to the management of reservations, the supply of products and services, the management of payments and communications relating to the service provided. In such cases, the legal basis of the treatment consists in the performance of contractual obligations by Onebus S.r.l., pursuant to art. 6, paragraph 1, lett. b) of the GDPR;
• correct execution of obligations under laws, regulations or EU legislation, as well as to comply with provisions issued by public Authorities legitimated to this or by supervisory and control bodies to which Onebus srl is subject. In such cases, the legal basis of the processing consists in the fulfillment of a legal obligation pursuant to art. 6, paragraph 1, lett. c) of the GDPR;
• registration of contact data for sending information and / or commercial communications relating to the services requested, – Article 6, paragraph 1, lett. a) G.D.P.R .;
• prevention and detection of computer fraud and abuse (fraud, phishing, spam, etc.), aimed at protecting our and our visitors’ safety, pursuant to art. 6, paragraph 1, lett. f) GDPR.

2. NATURE OF DATA PROVISION AND CONSEQUENCES OF FAILURE TO COMMUNICATE DATA
Refusal to provide personal data or failure to provide consent to their processing makes it impossible for Onebus S.r.l. to proceed with the provision of the services requested and to implement the purposes referred to in point 1, letters a) and b) of this information. The provision of data for the purposes referred to in point 1, letter c) of this information is instead optional and the interested party is therefore free to give or deny his consent. Even after giving consent, the interested party is free to withdraw it at any time.

3. METHODS OF DATA PROCESSING
The processing of your personal data will be based on the principles of lawfulness, correctness and transparency, protecting your confidentiality in compliance with the principles referred to in Article 5 of the REG. EU. The treatment can be carried out manually, with paper documents and also with the aid of electronic or automated means. The data are collected and processed at Onebus S.r.l.’s offices, through special document and IT archives. Your personal data are processed using appropriate technical and organizational security measures pursuant to art. 32 of the REG. EU, in order to guarantee an adequate level of security and minimizing the risks of destruction or loss, unauthorized access or treatment not in accordance with the purposes of the collection.

4. CATEGORIES OF RECIPIENTS
Without prejudice to the communications made in fulfillment of legal and contractual obligations, your data may also become aware of the following categories of recipients, identified in writing and to whom specific instructions have been provided about the treatment: employees authorized by “Onebus” ; management and data processing platforms; banking institutions; IT service providers, consultants and freelancers also in associated form, as external data processors.

5. STORAGE PERIOD
In compliance with specific legislative and contractual obligations, your data will be processed for as long as necessary for the performance of the existing commercial relationship. They will also be suitably archived for the following 10 years from the date of acquisition to guarantee the exercise of control activities to the relevant bodies.
You will always have the possibility to withdraw one or more of the consents given, as well as to ask Onebus S.r.l. the total cancellation of your data and the cancellation of the registration, with the immediate interruption of the supply of the services connected to it.
The data will be immediately deleted or processed anonymously, if their conservation is not otherwise justified.

6. IDENTITY AND CONTACT DATA OF THE DATA CONTROLLER
The data controller is Onebus S.r.l. with registered office in “Via Santuario 20 – 20831 Seregno (MB)” and operational headquarters in “Corso Delle Province 7 – 98030 Gaggi (ME)”. For the purposes of exercising your rights as interested parties listed below, the Data Controller can be contacted at the email address info@onebus.it or at the telephone number 0942 981409 – 0942 982115. The Privacy Contact person to whom you can contact for the exercise of the rights provided by the REG. UE listed in point 7 below is: Gioacchino Cipolla

7. RIGHTS OF THE INTERESTED PARTY
Pursuant to EU Reg. 679/2016 (GDPR) and national legislation, the interested party can, according to the methods and within the limits established by current legislation, exercise the following rights: request confirmation of the existence of personal data concerning him (right of access); know its origin; receive intelligible communication; have information about the logic, methods and purposes of the treatment; request its updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected; in cases of consent-based processing, receive your data provided to the owner, in a structured and readable form by a data processor and in a format commonly used by an electronic device; the right to lodge a complaint with the supervisory authority.
The exercise of rights is not subject to any form constraint and is free of charge.

Onebus s.r.l.
Tel. +39 0942 981409 – 0942 982115;
E-mail: info@onebus.it;
Pec: onebus@legalmail.it