Generic privacy policy

PROCESSING OF PERSONAL DATA
Here below is a description of the privacy policy of the Olbia Costa Smeralda Airport's official web site regarding the processing of personal data conferred for various purposes such as: registration to the newsletter, sending a contact form for information request, buying products / services online in e-commerce section, application for search and selection of staff, for current and future open positions in Geasar Spa.
Interested parties may also use the Chat by Zendesk service, in online mode, by communicating their name / in anonymous form, and in offline mode with a text message, communicating the name and email address. This is a circular that is provided pursuant to articles 13 and 14 of EU Reg. 2016/679 (GDPR) to those who interact with this website. The circular is valid only for the official website of Olbia Airport and not for other sites that may be consulted by the user through links.
Anything will arrive at our email addresses (orders, requests, suggestions, ideas, information, etc.) will not be considered information or confidential data.

DATA CONTROLLER OF PERSONAL DATA
Geasar S.p.A. - Olbia Costa Smeralda Airport, 07026 Olbia (SS)
Ph. +39 0789 563400 - Fax +39 0789 563401 - e-mail: info@geasar.it - e-mail certificated: geasar@pec.it

DATA PROTECTION OFFICER (DPO)
Ph. +39 3459764751 - E-mail Address: privacy@geasar.it – e-mail certificated: privacy.geasar@pec.it

PERSONAL DATA PROCESSED
The processing is on personal data of a common nature and will be limited to personal data sent via the Contact Form or by e-mail (name, e-mail), through the newsletter subscription form (name, surname, email, phone, country of residence), contact forms contained in the electronic form relating to online purchases (name, company, address, location, province, country, e-mail, CF / VAT) or through registration forms for registration to the events or to the reserved area "operators" (name, company, type of company, age, telephone, province, location, e-mail).

DATA PROCESSING METHODS
The processing of Personal Data is done through manual, computer and telematic tools with logic strictly related to the purpose of providing personal data and, in any case, to ensure the security and confidentiality of the data themselves.
- SIGN YOU UP TO THE NEWSLETTER AND TRASMISSION OF THE CONTACT FORM FOR INFORMATION / COMPLAINTS / REQUEST OF LOST OBJECTS, REGISTRATION TO THE RESERVED AREA:
The processing will be done electronically and in paper form by Geasar staff, and/or by companies that provide the newsletter (MailUp) and chat (Zendesk) service with the observance of every precautionary measure, which guarantees security and confidentiality.
The provision of data is essential for the execution of the service requested and any refusal to provide such data will result in the non-execution of the same.
Geasar, once received the express consent, separate and completely optional of the interested party, collects data in a database, and created a mailing list, provides for the sending of newsletters containing commercial and promotional information.
The person concerned is free to give consent to the further communication of his/her data to third parties who wish to proceed to the processing for marketing and data collection purposes related to user profiling. Where the person concerned does not intend to give consent to the disclosure of his data to third parties, for the aforementioned purposes the consequence will be that Geasar will not be notified and the data will be processed solely and exclusively by Geasar, where the interested party has provided to this the explicit consent to the treatment for marketing and profiling purposes.
- ONLINE PURCHASES IN THE E-COMMERCE SECTION:
The processing of Personal Data is done through manual, computer and telematic tools with logic strictly related to the purpose of providing personal data and, in any case, to ensure the security and confidentiality of the data themselves.
Customers can enter the website and purchase without being registered users by accessing freely to the information, information texts, and all those services that, for their use, do not require the inclusion of personal data. The section marked in red are mandatory and essential for the purchase of services; failure to provide such personal data will make it impossible to provide the requested service.
These activities are necessary to satisfy your purchase requests, suggestions and for all commercial, fiscal, administrative and informational purposes related to our business.
The data entered at the time of the order (name, company, address, location, province, country, e-mail, tax code / VAT, phone) will be used exclusively for the management of the purchase order and any invoicing .
In no case will they be transferred to third parties or used for sending commercial communication and advertising material (Newsletter) except in the presence of your consent to be provided when completing the electronic form.
The data collected, either as a result of mandatory transfer or as a result of optional conferment, may be disclosed to specifically authorized internal persons or subsidiaries or affiliated companies, affiliated to Geasar SpA, carriers and shippers and banking institutions that the company uses, always in compliance with the purposes of the treatment already indicated.
The provision of data is essential for the execution of the service requested and any refusal to provide such data will result in the non-execution of the same.
- SIGN IN AND REGISTRATION TO EVENTS:
The processing of Personal Data is done through computer and telematic tools, with the compiling of the contact form or with the registration to scheduled events at Olbia Costa Smeralda Airport. Received the consent of the interested party, Geasar collects data in a database, and created a mailing list provides for the creation of a shared network of contacts with other partners of scheduled events. Moreover, Geasar sends newsletters on commercial and promotional information related to events scheduled at the Costa Smeralda Airport in Olbia.
The person concerned is free to give consent to the further communication to third parties who want to proceed with the processing for marketing and data collection purposes related to user profiling. Where the interested party does not intend to give consent to the disclosure of his data to third parties for the aforementioned purposes, the consequence will be that Geasar will not be notified and the data will be processed solely and exclusively by Geasar, where the data subject has given this consent to the processing for marketing and profiling purposes.

LEGAL BASIS OF THE PROCESSING
The treatment is based on consent made pursuant to art. 6 par. 1 lett. a) of the GDPR 2016/679 Regulation and the fulfillment of a pre-contractual and subsequently contractual obligation.
DATA RECIPIENTS
The activities will be carried out through automated and computerized procedures, exclusively at our data processing systems or other subjects linked by contractual relationships (banks, insurance institutions, express couriers, institutions and institutions).
The data concerning to the credit card holder inserted after the order confirmation in a secure and protected manner are sent and processed exclusively by Banca di Sassari S.p.A. or PayPal (Europe) S.à r.l. & Cie, S.C.A. for the following purposes: completion and access support; execution of the transaction that the user is making; execution of legal obligations; operational needs; management of receipts and payments.
The data collected by Geasar for the online sale of the car parks will be transmitted to the subsidiary Cortesa Srl (to which Geasar has entrusted the management and execution of the service), as co-owner of the treatment in the person of its legal representative, who may be contacted (also to assert the exercise of the rights of the interested parties) to the following addresses: ph. 0789/563400, Fax: 0789/563401, e-mail: parking@geasar.it.
The data collected by Geasar may be transmitted, with prior consent, to third parties, institutions or companies for marketing and profiling activities.

SUBJECTS AUTHORIZED FOR PROCESSING
The data can be processed by employees of the corporate functions responsible for the pursuit of the aforementioned purposes, who have been expressly authorized to process, and who have received appropriate operating instructions.

PURPOSE OF THE PROCESSING
In the following it is described privacy policy is indicated with reference to the processing of personal data provided for the various purposes:
- SIGN UP TO THE NEWSLETTER AND SEND CONTACT FORM FOR INFORMATION/COMPLAINTS/REQUEST LOST OBJECTS, RESERVED AREA REGISTRATION:
The data provided will be used exclusively for processing and sending the newsletter, for sending and subsequent evasion of contact/email forms for requests for information, lost items, suggestions/complaints (through the various forms in the site geasar.it / mail address servizioclienti@geasar.it), and in general for business elaborations for statistical purposes.
The data communicated through the use of the chat service will be used for the purpose of requesting the information transmitted.
- ONLINE PURCHASES IN THE E-COMMERCE SECTION:
The processing of personal data will be done for the purposes related to the purchase requests and to give full execution to all contractual obligations.
The acquired data will be used for the insertion of the customer's personal data in the company data base in order to provide the services purchased.
- SIGN IN AND REGISTRATION TO EVENTS:
The collected data will be used for the following activities: advertising, statistics, social functions, interaction with social networks (through the creation of hashtags, invitations to participation in thematic groups, etc) and external platforms, live chat, support and feedback

DATA RETENTION PERIOD
Following is indicated the privacy policy in reference to the retention period of personal data provided for the different purposes:
- SIGN UP TO THE NEWSLETTER AND SEND CONTACT FORM FOR INFORMATION:
Personal data is kept for the time necessary to achieve the purposes for which it was collected or for any other legitimate related purpose, until revocation of consent
- ONLINE PURCHASES IN THE E-COMMERCE SECTION:
Until withdrawal of consent, except for the contact data that will be kept for the entire duration of the contract, and after the termination for the 10-year ordinary prescription period, in addition to any additional deadlines for filing the related tax documentation. Once the storage terms described above have elapsed, the data will be destroyed, deleted or made anonymous, consistent with the technical procedures for cancellation and backup.
- SIGN IN AND REGISTRATION TO EVENTS:
With reference to the personal data being processed, the same will be kept in compliance with the proportionality principle and in any case until the individual purposes of the scheduled events have been pursued.
Personal data that is no longer necessary or for which there is no longer a legal requirement for its conservation, will be permanently deleted.

RIGHTS OF DATA SUBJECTS
We inform you that the Reg. 2016/679 EU recognizes you the practise of specific rights. In particular:
- to request the confirmation of the existence or otherwise of personal data;
- to request the access to personal data and all related information;
- rectification, cancellation, limitation and opposition to the processing of personal data;
- to request the portability of personal data.
Furthermore, pursuant to art. 7, co. 3, GDPR, we inform you that you can exercise your right to revoke your consent at any time, without prejudice to the lawfulness of the processing based on consent previously granted. Finally, we inform you that you can lodge a complaint with the Supervisory Authority, which in Italy is the Guarantor for the protection of personal data.
To exercise the above rights, report problems or request clarification on the processing of personal data can send a written request directly to the "Data Protection Officer (DPO)", to the postal address of the registered office or to the email address privacy@geasar.it