Mail notification

Dear user,
E-mail messages to and from one of the Traforo del Monte Bianco - GEIE email addresses contain work-related communications and may contain data of a non-personal nature.
The address and other personal data contained in them and in any replies to the same, shall be filed and may be read by - or come to the knowledge of - other subjects belonging Traforo del Monte Bianco - GEIE organization. Limited disclosure to other subjects that may give an indispensable contribution to the topics developed within the e-mail is permitted.

Please find other information on how such personal data is processed below.


1) Data Controller
The Data Controller of the personal data is Traforo del Monte Bianco - GEIE, with registered office in Courmayeur (11013 - AO), Piazzale italiano del Traforo del Monte Bianco, tel. +39 0165 890411 fax +39 0165 890419, email [email protected] – VAT no. 01007980079.
The Data Protection Officer ( DPO) can be contacted via email, at the address [email protected], or by telephone at +39 0165 890411.
 
2) Purpose of the Processing
Any personal data submitted by the sender or recipient of e-mail messages to the Data Controller shall be processed for the following Purposes:
a) To reply to the sender’s requests or, in any case, to perform a professional assignment;
b) To receive or transmit information, materials and/or documents;
c) To fulfil with the obligations set forth by law, regulations, Community legislation or an Authority order;
d) To ascertain, exercise, or defend the Data Controller or any third-party’s rights;
e) Carry out direct marketing activities.
 
3) Legal Basis for Processing
The legal basis for Processing is as follows:
Concerning the purposes pursuant to sections 2a) and 2b): the need to fulfil a contract to which the Data Subject is a party, or, in any case, fulfil the Data Subject’s requirements (or any pre-contractual measures);
Concerning the purposes pursuant to section 2c): the need to fulfil any legal obligations or Authority requests.
Concerning the purposes pursuant to sections 2d) and 2e): the need to pursue a legitimate interest of the Data Controller or of third parties.
 
4) Mandatory or optional nature of Personal Data communication
The communication of the data is optional; however, the failure to provide them could make it impossible for the Data Controller to comply with the Data Subject’s requests.
 
5) Rights of the Data Subject
The Data Subject has the right to:
- Access their Personal Data held by the Data Controller;
- Request their modification and/or cancellation (“right to oblivion”);
- Request their limitation or object to their Processing;
- Request Data portability;
- Object to their processing, under the conditions pursuant to Art. 21;
- Lodge a complaint with the Supervisory Authority.
In the case of consent-based processing (currently not foreseen), the Data Subject may withdraw their consent at any time, without affecting the lawfulness of any processing carried out before such withdrawal.
 
6) Right to lodge a complaint with the Supervisory Authority
The Data Subject who considers that the processing of their personal data violates EU Regulation 2016/679 can lodge a Complaint with the Supervisory Authority (for Italy: Garante per la protezione dei dati personali www.garanteprivacy.it and for France: CNIL Commission Nationale de l'Informatique et des Libertés www.cnil.fr/fr).
 
7) Communications to Recipients, Transfer to Third-Party Countries, and Diffusion
Data acquired through the website shall not be diffused.
Data is disclosed to the recipients only as strictly necessary, based on the purposes outlined above.
Any possible recipients are classified as follows:
• Appointed pursuant to Article 2-quaterdecies of Legislative Decree 196/03 and other subjects authorized by the Data Controller;
• Any third parties the Data Controller resorts to, appointed by the Data Controller as Data Processors pursuant to Article 28 GDPR, with a special contract;
• Other (public and private) subjects, whose communication is required to fulfil legal obligations, to execute the contract, to fulfil the Data Subject's requests, to comply with the Authority’s order, or to defend a legal interest of the Data Controller or of Third-Parties.
The Data Controller has no intention of transferring the data processed outside the European Union, nor to an international organization.
 
8) Personal Data Retention Period
The Data Controller shall retain the data for the time necessary for the aforementioned purposes, and, in any case, for no longer 12 years (except, for the purposes set forth in section 2e above), the duration of a possible claim, or the limitation period of the respective rights are greater).
 
9) Modifications and Updates
This privacy policy could be subject to modifications and/or integrations, even as a consequence of the applicable regulation being updated.
The Data Controller will publish the updated version of this document on the Website and it will be binding from that moment on; therefore, the Data Subject is prompted to visit this section regularly.