Privacy Policy Mobility Connect Web App

Mobility Connect Web App

Information on personal data processing

(Art. 13 EU Regulation April 27, 2016, n. 679 on personal data protection “GDPR”)

In compliance with the requirements imposed by the General Regulation on personal data protection, the Data Controller provides the data subject with the following information regarding the processing of personal data.

Data Controller: Wiseair S.r.l. IT10700370967

Contacts for exercising rights: Requests to exercise the rights provided by GDPR or any withdrawal of consent can be addressed to the Data Controller at the following contacts:

• Address: Via Andrea Costa 8 - 20131, Milano (MI) - Italy
• Contacts: +393490566225, amministrazione@wiseair.vision, wiseair.srl@legalmail.it

Categories of data subjects: Mobility Connect Web App Users

For what purposes do we process your data?

The Data Controller will process your data for the following purposes and according to the related legal bases:

• Service provision (pursuant to Art. 6.1.b GDPR)

  Fulfillment of pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR), Execution of a contract (pursuant to Art. 6.1.b GDPR)

• Administration and management of information systems

  Legitimate interest of the Data Controller (Art. 6.1.f GDPR), Need to fulfill legal obligations to which the Data Controller is subject (pursuant to Art. 6.1.c GDPR), Legal obligation to technical regulations to which the Data Controller adheres.

Are there recipients or possible categories of recipients?

Your personal data may be sent, to fulfill legal obligations, because essential for the purposes pursued, to private organizations such as cloud space providers, hosting providers, as well as (in pseudonymized form) to the companies of belonging or to specific natural persons (e.g., the appointed Mobility Manager)

Do we transfer your data to third countries or international organizations?

Your personal data may be sent, to fulfill legal obligations, because essential for the purposes pursued, to:

• United States of America

  Adequate safeguards: Standard data protection clauses adopted by the Commission on 04/06/2021 and MODULE TWO, Sec. II, Clause 8 (https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/)

  Adequacy decisions: Adherence to the Data Privacy Framework (DPF) as per the constantly updated list on the official website (https://www.dataprivacyframework.gov/s/participant-search)

How long do we keep your data?

Common data (Art. 4.1.1 GDPR excluded from the specialty regime): 10 years

What are your rights?

Right of access

The data subject has the right, according to Art. 15 of GDPR, to request from the controller access to their personal data.

Right to rectification

The data subject has the right, according to Art. 16 of GDPR, to request from the controller rectification of their personal data.

Right to erasure

The data subject has the right, according to Art. 17 of GDPR, to request from the controller erasure of their personal data.

Right to restriction of processing

The data subject has the right, according to Art. 18 of GDPR, to request from the controller restriction of processing of data concerning them.

Right to object

The data subject has the right, according to Art. 21 of GDPR, to object to their processing.

Right to data portability

The data subject has the right, according to Art. 20 of GDPR, to exercise their right to data portability.

How to exercise your rights

Subject to identification, preferably by sending an email to privacy@wiseair.vision and including in the subject line EXERCISE OF PRIVACY RIGHTS.

Additional notes

The data subject may also lodge a complaint with a supervisory authority (for example, the Italian Data Protection Authority).

Automated processing

The processing is not based on automated decision-making.

What data is necessary?

The provision of personal data that can be inferred from - and connected to - Province of residence, Municipality of residence, Age, Gender, Type of employment contract, Travel distance, Main means of transport, Travel preferences, Remote working frequency, Home-work travel frequency, Working days, Travel conditions, Transport means preferences, Company of belonging, Name (natural person), Surname (natural person), Company email address (from which personal connotations may possibly be inferred) is mandatory. The consequences for failure to provide such data consist in the impossibility to start or continue the contractual relationship (concerning the Controller’s services).