Privacy form

Information on personal data processing in accordance to art. 13 of EU 2016/679 Regulation (GDPR)

Grandi Stazioni Retail S.p.A., i.e. the Data Controller (with registered office at Via Giovanni Giolitti, 34 – 00185 Roma; PEC: gsretailspa@legalmail.it; Tel: +39 06.94532401), will process the personal data received by users primarily by means of information systems and electronic devices and for the purposes set out in the Regulation (EU) 2016/679 (GDPR), namely to provide data subjects with the infor-mation requested through this form. When required by data subjects, the data sub-mitted will also be used for communication related to events or initiatives that are deemed of interest to them.
The submittal of such data by filling the fields of the form is required and their non-submittal will not allow Grandi Stazioni Retail S.p.A. to provide the enquirer with the requested information.

The data collected will be kept for a time period never exceeding the one necessary to the above-mentioned purpose; after that, they will be canceled.
Data will be processed exclusively by employees of Grandi Stazioni Retail S.p.A. au-thorized and trained to that effect, or by the companies that collaborate with GSR and have been expressly designated as data controllers. Apart from these cases, data will not be forwarded to third parties, nor disclosed or transferred to foreign countries.

Data subjects have right to: obtain from the Data Controller the access to their data, initiate rectification and deletion of such data or the restriction of processing and op-pose processing thereof, besides the right to data portability in the cases established by law (art. 15 and following of the GDPR). The appropriate request shall be submit-ted by contacting the Data Protection Officer at Grandi Stazioni Retail S.p.A.’s regis-tered office at Via Giovanni Giolitti n. 34 – 00185 Roma or at the PEC address dpogsretail@legalmail.it.

Data subjects, given the necessary conditions, also have right to lodge a complaint with the Italian Data Protection Authority according to the procedures established.