INFORMATION ON THE PROCESSING OF PERSONAL DATA
ai sensi dell’articolo 13 del Regolamento (UE) 2016/679
d-flight Spa, with registered office in Rome, via Salaria 716, for the purpose of providing the services assigned to it by the Civil Aviation Authority (ENAC), is sub responsible for the processing of personal data of which Enav Spa is responsible and ENAC is Holder.
d-flight, in the person of its Legal Representative, informs that personal data will be processed in compliance with Italian and European legislation regarding the protection of personal data - EU Regulation 2016/679 - (GDPR) for the purposes it fulfills.
Identity and contact details of the data controller
The owner of the data processing Enac is the pro tempore President as Legal Representative of this Body, with registered office in Italy, viale del Castro Pretorio 118, traceable to the following contact points:
- e-mail: (segreteria.presidente@enac.gov.it)
Purpose of the processing
Personal data will be processed in relation to services related to the registration of users of the platform and the services provided through it, to the registration of operators of Remote Piloting Systems (SAPR) and to the electronic identification service of SAPR, where required by current regulations issued by ENAC. Therefore the processing of personal data is necessary to fulfill legal and contractual obligations.
The data provided by users will be transmitted to ENAC for the formalities required by current legislation, will be processed by computer and will be kept for the time strictly necessary to achieve the purposes for which they were collected, including for the duration of the requested service.
The aforementioned data will be published only with the explicit consent of the user who may at any time revoke the consent to the publication.
In cases where the provision of Personal Data (in particular personal data, e-mail address) is necessary, any refusal to indicate Personal Data makes it impossible to comply with the requests of the party concerned or to provide the services available or, again, to correctly fulfill the obligations imposed on the data controller in accordance with the applicable legislation.
The Personal Data subject to the Treatment will not be disclosed and will not be transferred abroad to countries outside the EU that do not ensure adequate levels of protection for people.
In any case, the disclosure of your data to all subjects recognized by the law with the right to access said data is reserved.
Consent to the processing of data for marketing purposes
In agreement with the Owner, d-flight has the right to use the personal data of users who give their explicit consent for the following marketing purposes: invitations to events, presentation of new products and / or services, periodic sending of newsletters, degree satisfaction with the quality of the services via e-mail, post and / or text message or telephone contacts. Acceptance of the data processing indicated above is optional, however, in the absence of consent, it will not be possible to send commercial communications or allow the download of promotional material from the site. Consent can be withdrawn at any time without prejudice to the usability of the d-flight services.
The d-flight Data Protection Officer (DPO) is available at the following email address: dpo@enav.it
Processing methods
The data is processed with electronic and computer tools, stored on computer media in compliance with the security measures. Personal data is processed by automated tools for the time strictly necessary to achieve the purposes for which it was collected.
The management and storage of Personal Data takes place on servers located within ENAV GROUP and / or on external servers of suppliers of some services necessary for technical-administrative management which, for the sole purpose of the requested service, could become aware of the Personal Data of the interested parties and who will be duly appointed as Data Processors.
The data is processed with electronic and computer tools, stored on computer media in compliance with the security measures. Personal data is processed by automated tools for the time strictly necessary to achieve the purposes for which it was collected. The Personal Data are processed exclusively by subjects authorized to carry out these tasks, previously identified, appropriately trained and in charge of the processing of personal data relating to the personnel of d-flight or assigned to it within the scope of the processing, with the use of security measures designed to guarantee the confidentiality of the data subject to which the data relate, and to avoid improper access by third parties or unauthorized personnel, as well as by companies expressly appointed by d-flight as data processors and specifically approved by the Data Controller.
Processing of data provided through online d-flight services
This information is also provided for the possible collection of individual personal data (name, e-mail, etc.) through computerized procedures implemented through the use of mailboxes and online services made available to d-flight.
The optional, explicit and voluntary sending of electronic mail or online forms involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.
Rights of the interested party
The interested party to the processing of personal data may exercise the rights provided by articles 15 to 22 of the EU Regulation n. 2016/679, where applicable (right of access, right of rectification, right to cancellation, right to limitation of treatment, right to data portability, right to object). Pursuant to the same article, one has the right to request the deletion, transformation into anonymous form or blocking of data processed in violation of the law, and to oppose in any case, for legitimate reasons, to their treatment.
Furthermore, pursuant to art. 7, par. 3, GDPR, the interested party can exercise his right to withdraw consent at any time, without prejudice to the lawfulness of the treatment based on the consent given previously.
Requests relating to the exercise of the aforementioned faculties must be reported, in the first instance, through the same channels (PEC, online services, etc.) originally used to transmit personal data; in the second instance the aforementioned reports may be sent to the box:
- a) Reports
Evidence and reports on discrepancies and criticalities, where they can bring useful and constructive elements, can be communicated to the Data Protection Officer (Data Protection Manager) at the certified e-mail address:
- b) Complaint to the supervisory authority:
The interested party has the right to lodge a complaint with the Guarantor for the protection of personal data at the following contract points:
Address: Piazza di Monte Citorio n. 121, 00186 ROMA
● Phone: (+39) 06.696771
● Registered mail: protocollo@pec.gpdp.it
● E-mail: garante@gpdp.it
● Fax: (+39) 06.69677.3785
Ultimo aggiornamento al 28/09/2020