Privacy Policy
in accordance with art. 13 of European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and under the applicable Italian laws and regulations
Società per Azioni Esercizi Aeroportuali S.E.A., having its registered office in Segrate (Milan) - 20090 - at the Milan-Linate Airport, (“Company”) in the provision of services which can be used through browsing and registration on the portal www.milanomalpensacargo.com (“Service(s)”), processes the personal data provided freely by users according to art. 4, no. 7 and art. 24 of European Regulation 2016/679 dated April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “Regulation”) and in compliance with the applicable Italian laws and regulations.
The term processing shall mean any operation or set of operations, whether or not by automated means and applied to personal data or sets of personal data, including when not recorded in a data bank, such as collection, recording, organisation, structuring, storage, processing, selection, blocking, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
The Company shall, therefore, under the Regulation and in compliance with the applicable laws and regulations in force in Italy, process personal data for the purposes listed below, including manually and/or with the assistance of computer or telecommunication systems.
1. Purpose and legal basis of the processing
The data are acquired and processed in compliance with the rules set in the Regulation and under the applicable Italian laws only for the provision of the Service to the data subject (hereinafter, “Primary Purposes”), performing a contract to which the data subject is party or taking steps at the request of the data subject prior to entering into a contract.
2. Communication and disclosure of personal data for the pursuit of the Primary Purposes for processing
The data may be communicated to third parties when the communication thereof is mandatory under the law, including for the purposes of prevention/suppression of any illegal activity. With regard to Article 13, paragraph 1, letter (e) of the Regulation and the applicable Italian laws and regulations, the data may be disclosed exclusively for the pursuit of the above Primary Purposes to the staff/collaborators/consultants of the Company, and to third-party companies providing assistance to the Company in the pursuit of its Primary Purposes. An updated list of external data Processors is available at the registered offices of the Company.
The data shall not be disclosed, or personal data shall not be disclosed to the public or in any case to an undetermined number of people.
3 - Mandatory or Optional Provision of Personal Data for the Pursuit of the Purposes of Processing
The provision of data to the Company shall be optional.
A refusal to provide data which provision is not mandatory under the law, but which are strictly functional to the performance of the Service, shall have no repercussions over the agreements in place, except that it may prevent carrying out operations connected to such data or the provision of the Service.
4. Transfer of personal data to countries outside the European Union.
The data collected and processed are not transferred to companies or other parties outside the EU territory.
5. Data retention period
With reference to personal data processed for the pursuit of the Primary Purposes, they shall be retained in compliance with the principle of proportionality and as long as the purposes of the processing are being pursued, for a period of no longer than 2 years.
6. Data controller
The identification details of the data controller company are as follows:
Società per Azioni Esercizi Aeroportuali S.E.A., with registered office in Segrate (Milan) - 20054 - at Milan-Linate Airport.
7. Data Protection Officer (DPO)
You can contact the Data Protection Officer, also to exercise your rights pursuant to articles 15-22 of the Regulation, by sending an email to: privacy@seamilano.eu.
8. Rights of data subjects
As to the processing of data, data subjects may exercise the rights granted under Articles 15-22 of Regulation (EU) 2016/679, summarised in Annex A to this Privacy Policy.
The above rights are not subject to any formal restrictions and can be exercised free of charge.
Annex A
European Regulation on the protection of personal data
Articles 15 to 22
Under Articles 15 to 22 of Regulation (EU) 2016/679, Data Subjects have the right to obtain the rectification, supplementing, or erasure of their personal data (also known as “right to be forgotten); the right to limit the processing of personal data and the right to data portability, the right to object to the processing of their personal data, including for profiling purposes, and lastly the right to lodge a complaint with the Privacy Supervisory Authority.