ATB portal - web

Users' personal data will be processed to give rise to the services offered by the ATB Group's portal, exclusively for the purposes that fall within the execution of its institutional tasks and public interest, including those of promoting and offering Local Public Transport services and initiatives referable to the acronym “Smart Mobility”, including the fulfilments required by laws or regulations.

The legal bases attributable to the purposes outlined are summarised in Article 6 paragraph 1 of the Regulation:

    letter b) processing necessary for the performance of a contract to which the data subject is party;
    letter c) processing necessary for compliance with a legal obligation to which ATB is subject;
    letter e) processing necessary for the performance of a task carried out in the public interest.

Data provided by the data subject

The optional, explicit and voluntary sending of messages to the ATB Group's contact addresses, as well as the completion and forwarding of the forms on the portal, entail the acquisition of the sender's contact details, which are necessary in order to reply, as well as all the personal data included in the communications.

Enrollment and registration to ATB Group portal

Personal data such as surname and first name, e-mail address and telephone numbers, sent by users for subscription to the basic services provided by the ATB Group portal (e.g. newsletters) may be made available to the user for subscription to other services compatible with the purposes of collection, subject to the ‘granular’ provision of additional personal data strictly related to the service specifically requested, such as, for example, personal and billing data.

Specific information may be provided on the pages in the case of particular services.

Digital payment services provided by the portal

Browsing data

The computer systems and software procedures used to operate this site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment.

These data, necessary for the use of web services, suitably anonymised, are also processed in order to

• obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.)
• check the proper functioning of the services offered.

Cookies are not used for user profiling, nor are any other tracking methods employed.

Instead, session (non-persistent) cookies are used strictly limited to what is necessary for the safe and efficient navigation of the portal.

The storage of session cookies in terminals or browsers is under the user's control, whereas on the servers, at the end of HTTPS sessions, information relating to cookies remains recorded in the service logs, with retention times described in detail in the table below.

The only persistent cookie that is used makes it possible to personalise the user's navigation of the portal, so that the user does not have to make this choice every time the portal is accessed.

Apart from what is specified for browsing data, users are free to provide their personal data for registration or subscription to services provided by the ATB Group, or for sending communications or documents. Failure to provide certain data required for registration or subscription to the portal, usually marked with (*), may preclude the possibility of providing the requested service. The release of the other data, on the other hand, remains optional but important for the effective management of relations and communications.

Apart from what has already been specified for browsing data and cookies, the ATB Group guarantees that the data provided by the user when sending requests or notifications or when registering on the portal will be stored for a period of time that does not exceed the achievement of the purposes for which they are processed. On the forms and registration forms, the user is informed of the storage period or the criteria used to determine this period.

The data conferred may be communicated to public or private entities contracted to provide the requested service, to non-commercial public or private entities, or to the Judicial Authority.

Data processing is carried out by persons authorised and committed to confidentiality and assigned to the relevant activities in relation to the purposes pursued. Data processing carried out by third party companies takes place only after appointment as Data Processor pursuant to Art. 28 of the Regulation.

Data are not transferred to non-EU countries.

Data subjects may exercise their rights at any time and, in particular, the right to access their personal data, to request their rectification or restriction, their updating if incomplete or erroneous, and their deletion if collected in breach of the law, as well as to object to their processing, subject to the existence of legitimate reasons on the part of the Data Controller.

To this end, it is possible to contact the Data Controller designated as contact point for the data subjects, or the Data Protection Officer.

Finally, please note that you may lodge a complaint with the Italian Data Protection Authority - Garante per la protezione dei dati personali - Piazza Venezia n. 11 - 00187 Roma.

The services made accessible to the user through the ATB Group's portal are co-owned by:

    ATB Mobility SpA;
    ATB Servizi SpA.

• ATB Mobilità SpA – via Monte Gleno, 13 - BERGAMO - https://www.atb.bergamo.it

rpd@atb.bergamo.it

Ultimo aggiornamento: 30.01.2025