pursuant to Article 13 of European Regulation 679/16
Purpose and legal basis of data processing
In compliance with the regulatory principle of data minimization, we collect only relevant and not excessive personal data with the aim of satisfying the requests of our customers. We put the customer in contact with the taxi enabled to make the journey to make it possible to run the non-scheduled public service. Apart from cases in which only the withdrawal address is provided, a processing of personal data relating to identified or identifiable subjects takes place, when the address itself is associated with the name of a customer or a telephone number. In particular, in addition to the withdrawal address, when this is necessary to facilitate the exact execution of the service, the data relating to the name of the customer and his telephone number (fixed or mobile) can be processed. In some situations, this information may be necessary to report an occurrence (such as the replacement of the taxi or its early or delayed arrival) or, with specific reference to the collection of the name, to ensure that the service is provided only to those who actually have it. required (instead of a different person). The journeys made by customers cannot be registered, as this is irrelevant information. Without prejudice to:
Autobooking consent and additional information
Any other purpose of the processing that involves the acquisition of further information or a broader retention period of personal data is legitimized by the collection of the customer's consent. As in the cases of:
The Radiotaxi Central can collect data relating to races, as well as through its own switchboard, also through the other technological tools that the Cooperative has equipped itself with. Click on the links below for more information or visit ittaxi.it to learn more about our services.
itTaxi Club Premium (ittaxi.it prepaid ride purchase)
The processing of data is carried out only by persons trained in the field of data protection and takes place through computer tools configured, already originally, in order to minimize the use of customer identification data and comply with the cancellation terms; We will provide only the information necessary for the execution of the service to taxi drivers, members or users of the Cooperative. Any telephone number and his name may be communicated to the taxi driver only with his informed consent in order to simplify the provision of the service if the same provides for special conditions. Upon formal request we may provide data to the police forces to facilitate the successful outcome of the investigation and prevention activities.
Geolocation systems are installed on the vehicles in the fleet to fulfill organizational and production purposes (identification of the taxi closest to the place of the request in order to reduce waiting times and costs for the customer) and safety systems (for taxis that install the system anti-theft). The geolocation data are not stored by the system for identifying the routes made by the customer or the taxi driver.
Video surveillance (anti-theft systems)
A video surveillance system is installed on some cars of the 3570 fleet with a brief information note on the taxi window sticker. The system is configured to delete the recorded images by overwriting, within the terms provided by the specific provision of the Guarantor Authority. Only in the event that the connected anti-theft system comes into operation, the images (frames and not videos) can be sent to the radiotaxi center to ascertain any criminal activities in place. The images may be communicated to the police and kept for the entire period necessary for the execution of any defensive investigations and judicial proceedings.
Personal data will not be disseminated and will not be transferred to any non-EU country; the Data Controller uses Cloud services through the Microtek provider and authorized sub-suppliers and guarantees that the data centers are located in Italy.
Personal data that no longer need to be kept in relation to the execution of the service offered to the customer are deleted or transformed into anonymous form (which can be used in evaluations to be carried out in aggregate form aimed at improving the management of the service), once the specific purposes for which they were requested, without prejudice to the observance of specific legal obligations that legitimize their further storage. The extension of the storage times is allowed to pursue only the purposes compatible with the purposes described (such as, for example, the return of lost objects by the customer or the management of any disputes related to the performance of the service). Storage for these purposes cannot exceed thirty (30) days.
Rights of the interested party
Pursuant to articles 15 to 21 of the GDPR, the interested party has the right to request, at any time, access to his personal data, rectification or cancellation of the same or to oppose their treatment. He also has the right to request the revocation of any consent given, and the limitation of processing in the cases provided for by art. 18 of the GDPR, as well as to obtain the data concerning him in a structured format, commonly used and readable by an automatic device, in the cases provided for by art. 20 of the GDPR.
Requests should be sent to us in writing to the following email address: firstname.lastname@example.org or by post to the Public Relations - Via del Casale Lumbroso 197 | 00166 Rome.
In any case, the interested party always has the right to lodge a complaint with the competent Supervisory Authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 of the Regulation, if you believe that the processing of your Personal Data is contrary to current legislation.
Policy updated on 06/05/2021