PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 ("GDPR") concerning the protection of personal data.
This Privacy Policy applies to the processing of personal data by the App Airport4All (hereinafter also \"Application\" or \"App\"), and not to other user-accessible content through links or external content recalled by the App and is intended to all users of the App. Further information about the processing of personal data may be contained in separate sections of the Application.
Treatment holder
The treatment holder is CRS4 S.r.l. based in Pula (CA), loc. Piscina Manna, Edificio 1, e-mail INFO@CRS4.IT PEC, CRS4@LEGALMAIL.IT (hereinafter also "CRS4").
Data Protection Officer
The data protection officer (RPD or DPO) of the CRS4 can be contacted via email (dpo@crs4.it), or at +390709250457.
Types of data processed and purpose of treatment
The App submits some technical data and information to allow the User to access the previous mentioned services. In particular, the following information, necessary for services provisioning to the user, is stored on the servers of the DigitalOcean Company, located in Amsterdam, and in the CRS4 servers located in Pula: a) the language chosen by the User (English, Italian, French, German, Spanish or Russian); b) the airport of the flights currently showed; c) the manufacturer of the smartphone / tablet; d) the smartphone / tablet model; e) smartphone / tablet platform (Android, iOS); f) the version of the smartphone / tablet operating system; g) the flights to which they wish to receive notifications; h) a 150-152 character token that the smartphone / tablet provides to identify and send notifications (this token changes if the app is uninstalled and then re-installed); i) the theme of the user interfaces (default font of the smartphone-tablet and the basic icon set ( EasyReading font and the basic icon set / default font of the smartphone-tablet and the complete icon set). Instead, phone number, User name are not stored in any way. The IP address used is stored only as necessary for the use of the App.
User data may also be used to fulfill statutory obligations and to respond to specific requests by the administrative or judicial authority. Once fully anonymised, data may be disseminated for statistical, scientific, or statistical analysis purposes in order to improve the services of reference airports.
Method of treatment
The processing of personal data of the Users of the Application takes place mainly through IT tools but, at times, can be processed even without the use of IT tools for the time strictly necessary to achieve the purposes for which they were collected.
Place of treatment.
The treatments are carried out by automatic storage on servers located in both Amsterdam and Pula and are managed by CRS4 staff at the Pula office ( and can be loaded, stored and processed on cloud systems whose servers are located in the territory of European Union ).
Legal basis of the processing
The personal data processed regarding the use of the App are processed by the CRS4 on the basis of the express consent of the interested party, for the purposes indicated above, or based on the legitimate interest of the CRS4 to the proper functioning of the IT systems connected to the functionality of the App.
Facilitation of the conferment
The User is free to provide the personal data required when she/he activates the Services by installing the App, however, a part of the processing of navigation data, the failure to provide certain data as intended to be used of the App, implies the impossibility of using the Services.
Recipients or categories of recipients of personal data
The recipients of your personal data are:
- Digital Ocean Company with servers located in Amsterdam [External manager];
- CRS4 employees and collaborators, expressly designated and authorized to whom specific instructions have been provided. The authorized have different levels of access, depending on the specific tasks.
The collected data will not be disclosed and are not subject to transfer outside the European Union.
Data management and retention period
The data will be stored for a period of 15 days. Such data could however be kept for a longer period, in order to ascertain responsibility in case of crimes.
Rights of the interested party.
As an interested subject, according to current regulations, you can exercise the following rights:
• request access to your personal data and information relating to them, the correction of inaccurate data or the integration of incomplete data, the deletion of personal data concerning you (upon the occurrence of one of the conditions indicated in Article 17 , paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article, for example if your data are unlawfully processed), the limitation of the processing of your personal data (at the instance of one of the hypotheses indicated in Article 18 Paragraph 1 of the GDPR, for example, your data are processed unlawfully);
• oppose at any time the processing of your personal data to the occurrence of particular situations that affect it;
• exercise the right to data portability, that is to say the right to receive personal data in a structured, commonly used and automatically readable format and to transmit such data to another data controller, only for cases where treatment is based on consent and only for data processed by electronic means.
These requests may be sent to the Data Controller or the Data Protection Officer (RDP / DPO) at the above addresses. The form for exercising rights is available at http://www.airport4all.com/rdp_en.docx.
You also have the right, if you believe that the processing of personal data reported to you, made through this site, is in violation of the provisions of the European Regulation, to propose a complaint to a supervisory authority (Authority for the protection of personal data - www.garanteprivacy.it), or to take appropriate judicial offices.
Automated decision-making process, including profiling
Your personal data will not be subject to any automated decision making process, including profiling