REPORTING SERVICE DISRUPTIONS AND COMPLAINTS – Information on the protection of personal data (Pursuant to Article 13 of European Regulation No. 679/2016)
Before collecting your personal data for the purpose of managing reports and complaints, Grandi Stazioni Rail S.p.A. invites you to carefully read the information notice on personal data protection.
In this section, we provide our contact details:
Grandi Stazioni Rail S.p.A., the Data Controller, represented by the current CEO, can be contacted via email at titolaretrattamento@grandistazioni.it, with its registered office at Via Giovanni Giolitti No. 34, 00185 Rome.
The Data Protection Officer (DPO) can be contacted via email at protezionedati@grandistazioni.it.
In this section, we outline the types of data we request from you:
The personal data subject to processing fall into the following categories:
Personal data acquired directly from the data subject:
Common data: personal details (first name, last name, address, date of birth/death, nationality, marital status, profession), contact data (email, phone contacts).
Special data: not requested / not necessary for the management of the report or complaint.
In this section, we explain why we ask for your data:
The data we request you to provide, either by completing the specific online form, through direct contact with the dedicated call center, or via email, are collected solely for the management of your report or complaint.
In particular, your data will be processed for the following purpose:
Regarding the management of the report or complaint, the provision of data is mandatory, and the legal basis is contractual.
The provision of data necessary to pursue the aforementioned purpose is "mandatory," and any refusal to provide this data could result in Grandi Stazioni Rail S.p.A. being unable to process your report or complaint.
In this section, we explain who will process your data and to whom it will be communicated:
For the pursuit of the aforementioned purpose, the personal data you provide will be processed by the following parties:
Scope related to Grandi Stazioni Rail S.p.A. (RFI, Ferservizi, Metropark, etc.):
Your data will only be processed by individuals expressly authorized by Grandi Stazioni Rail S.p.A. or by companies acting as Data Processors on behalf of Grandi Stazioni Rail S.p.A., who have signed a specific agreement that regulates the processing entrusted to them and their obligations regarding data protection. Your data will never be disclosed.
Your personal data will only be accessible to those within the company who need it for the tasks they perform or due to their hierarchical position. These individuals will be properly trained to prevent data loss, unauthorized access, or unauthorized processing of the data.
Scope not related to Grandi Stazioni Rail S.p.A.:
Your personal data may also be transmitted to other autonomous data controllers for matters within their competence (Public Authorities, Public Administrations, Judicial and Public Security Authorities, etc.).
The updated list of recipients of the data is available upon request by emailing protezionedati@grandistazioni.it.
In this section, we assure you that your data will not be disclosed:
Your personal data will never be published, displayed, or made available for consultation to unspecified individuals.
In this section, we explain how long we will retain your data:
The personal data you have provided will be kept for the period necessary to manage the report or complaint and, in any case, no longer than 10 (ten) years. This is without prejudice to further retention for the following purposes:
Archiving in the public interest, scientific or historical research, statistical purposes, or technical reasons (e.g., operational continuity).
In this section, we explain the rights we guarantee you:
Regulation (EU) 2016/679 (Articles 15 to 23) grants data subjects specific rights. In particular, in relation to the processing of your personal data, you have the right to request from Grandi Stazioni Rail S.p.A. access, rectification, erasure, restriction, objection, and data portability. Additionally, you may file a complaint with the Supervisory Authority, which in Italy is the Garante for the Protection of Personal Data.
At any time, you may request to exercise your rights by contacting Grandi Stazioni Rail S.p.A. at the email address protezionedati@grandistazioni.it.