Piazza Almerico da Schio - 00054 Fiumicino (RM) info@adrinfrastrutture.it

Web Policy

Web Policy - ADR INFRASTRUTTURE

Pursuant to current privacy legislation (European Regulation 2016/679 "GDPR" and Legislative Decree No. 196/03 and subsequent amendments and additions) the following policy is provided in relation to navigation on the website www.adrinfrastrutture.it also in order to inform the user of the types of cookies used by the Website.

1. DATA CONTROLLER

ADR Infrastrutture S.p.A. (hereinafter also referred to as "ADR Infrastrutture" or "the Controller") with registered office in Piazza Almerico da Schio 1 - 00054 Fiumicino (RM).

2. DATA PROTECTION OFFICER

ADR Infrastrutture has appointed a Data Protection Officer. Contact information for the Data Protection Officer can be found at https://www.adr.it/web/aeroporti-di-roma-en/.

3. WHAT ARE THE COOKIES?

Cookies are text files containing information that are stored on your device (e.g., computer, tablet, smartphone) every time you browse a website through a browser.
This website uses only technical cookies that ensure its operation. In particular, session or navigation cookies are used: these are the cookies that are not stored persistently on the user's device and are deleted when the browser is closed and are strictly limited to the transmission of session identifiers necessary to enable the safe and efficient surfing of the website.
With respect to these types of Cookies, it is not necessary to acquire the user's prior and informed consent.

4. PURPOSE AND LEGAL BASIS FOR PROCESSING

This notice concerns the personal data processing activities carried out to enable the user to browse the website www.adrinfrastrutture.it. In relation to the aforementioned services, ADR Infrastrutture processes the data provided by the data subject for the pursuit of the aforementioned purpose in accordance with Article 6, letter b, GDPR, in order to ensure the performance of the service requested by the user.

5. TYPES OF DATA PROCESSED

The data processed by ADR Infrastrutture includes information which - although it does not allow ADR Infrastrutture to trace it back to an identified and/or identifiable natural person - the IT systems and procedures used to operate this website acquire in the course of their normal operation. The transmission of such data is implicit in the use of Internet communication protocols.
IP addresses, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user's operating system and IT environment may fall within this type of data.
Adr Infrastrutture uses session cookies that are automatically deleted from the device at the end of browsing the Website.
The use of technical cookies - the installation of which does not require the acquisition of consent - is intended to ensure the proper functionality of the Website, to provide users with the requested services.

6. PROCESSING METHODS

Data are processed in compliance with current regulations by means of IT and telematic tools, with logic strictly related to the stated purpose, so as to ensure the security and confidentiality of the data.

7. DATA RETENTION PERIODS

Information is retained by the systems for as long as necessary for the purposes for which it is collected in accordance with the principle of minimization pursuant to article 5.1, letter c), GDPR.
ADR Infrastrutture's website receives visitors' IPs, which are stored as browsing data for 3 months and stored for IT security logic for a period of 6 months.
Personal data collected through technical cookies are deleted 12 months after last browsing.

8. DATA RECIPIENTS

Within ADR Infrastrutture, only those individuals entrusted with the processing by the Controller and authorized to carry out processing operations on the aforementioned activities may become aware of the personal data provided. In addition, the data may be processed only by third party companies to which ADR Infrastrutture may entrust specific activities and services related to the management of the website.
In particular, the data may be processed by the individuals that the Controller uses to maintain and manage the systems used as the External Processor (i.e. ADR S.p.A.) and the Sub-Processors it uses.
In addition, ADR S.p.A. uses cloud services in order to optimize the performance of the https://www.adr.it/web/aeroporti-di-roma-en/ website. ADR has signed a special Enterprise Agreement with Amazon Web Service EMEA SARL (https://aws.amazon.com/), selecting sites available within the European Economic Area for the storage of its content. In any case, the provider in question does not access the personal data of users acquired on the ADR Infrastrutture website, limiting itself to using the essential information to deliver and and keep active cloud services.
Data may be disclosed to the relevant Public Authorities in fulfillment of legal obligations.
In any case, personal data will not be disseminated.

9. DATA TRANSFER OUTSIDE THE EU

Personal data are not subject to dissemination and/or communication to third parties located outside the European Economic Area.

10. RIGHTS OF THE DATA SUBJECTS

Finally, we would like to inform you that Articles 15-22 GDPR give data subjects the possibility to exercise specific rights when certain conditions are met; the data subject can obtain from the Data Controller: access, rectification, erasure, restriction of processing, as well as portability of the data concerning them.
The data subject also has the right to object to the processing. In the event that the right to object is exercised, the Data Controller reserves the right not to comply with the request, and thus to continue processing, if there are compelling legitimate grounds for processing that override the interests, rights and freedoms of the data subject.
The above rights may be exercised with a request addressed without formalities to the Data Protection Officer (DPO) at dpo@adr.it.
This is without prejudice to the data subject's right to to file a complaint with the Italian Data Protection Authority pursuant to Article 77, GDPR.

The Data Controller reserves the right to update this policy.
Last update, April 2024