PERSONAL DATA COLLETTING INFORMATION
(GDPR, Article 13)
Dear User,
Targa Telematics S.p.A., as the data controller (hereinafter referred to as “Controller”), provides this policy for data subjects in compliance with European and Italian legislation on the protection of personal data.
The Controller has appointed a Data Protection Officer (DPO), who data subjects may contact by writing to the following address: dpoTarga@targatelematics.com.
Purpose and legal basis of processing
Through the “Bastion” PAM software, used by the Controller to direct access to the servers as the administrator of the same in the server farms, in order to guarantee its security and also ensure traceability of the actions performed therein, the Controller will process the personal data of the user, specifically consisting of:
- connection IP,
- personal domain login of his/her company,
- log of the actions performed on servers managed by Bastion software.
The legal basis is the legitimate interest of the Controller (Article 6.1(f)) in ensuring continuous monitoring and improvement of the IT processes applied to the facility. For such processing, if there is the collection of data from the controller’s employees, prior authorization has been finalized by the I.T.L. with territorial jurisdiction over Targa Telematics offices. If there is the collection of data of employees of companies appointed by the Company to direct access to the servers as administrators, please be informed that Targa Telematics will under no circumstances share such data with such companies or their group companies for the purpose of work control of its employees, and that no consultation of logs without a negative event or “profiling” will be automatically carried out.
Data retention period
Your personal data will be processed, including in automated form, for the time necessary to fulfill the above purposes and no longer than six (6) months from the date of the event.
Nature of data provision and consequences in case of refusal
The provision of data is inherent in accessing the systems. Any refusal to provide it in whole or in part may make it impossible for the Controller to pursue the purposes indicated above.
Categories of recipients
The Controller will not disseminate the data, but intends to communicate it to internal persons authorized to process it by virtue of their respective duties, as well as to public and private entities, including as a result of inspections and audits.
Should the recipients process data on behalf of the Controller, the same will be appointed as data processors with a specific contract or other legal document.
Data transfer to a third country and/or an international organization
The personal data will not be transferred to non-European third countries or to international organizations.
Rights of data subjects
Data subjects have the right to ask the Controller to access their personal data and to rectify it if inaccurate, erase it or restrict its processing under certain conditions, object to its processing for legitimate interests pursued by the Controller.
In order to exercise their rights, data subjects can use the form available at the link https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and forward it to the following address: dpoTarga@targatelematics.com. Data subjects also have the right to lodge a complaint with the competent supervisory authority, i.e. the Personal Data Protection Authority (www.garanteprivacy.it).
