DATA PROTECTION
Information for APP IBSAGO
Pursuant to current legislation on the protection of personal data, in particular art. 19 of the Federal Data Protection Law (NLPd) and art. 13 of EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation so-called “GDPR”) (hereinafter the “Privacy Policy”), IBSA Institut Biochimique SA (hereinafter “IBSA”), as the “Data Controller” of the processing, whose identification elements are indicated below, is required to provide certain information regarding the processing use of Your personal data.
The processing of your personal data is necessary for the following purposes:
a) Registration to the IBSAGO APP and use of the services provided by the IBSAGO APP. b) Analysis activities in aggregated and anonymous form for statistical purposes in order to analyze the demand, supply and use of mobility infrastructures.
During the registration phase, the following data will be collected:
e-mail address, home/residence, place of work address, hours worked, commonly used means of transport, usual route from home to work, first and last name, pseudonyms or avatars, date of birth and gender.
Data collected automatically: mobile phone brand and model, operating system and version of the app, IP address and user name.
For the purpose of activating specific forms, the data listed below will also be processed.
We inform you that the processing of your personal data for the purposes referred to in Point 1a and 1b of this information is carried out pursuant to art. 6.1 letter b) of EU Regulation 2016/679, therefore in execution of a contractual agreement. The provision of data is optional but necessary for the use of the IBSAGO App. Any refusal makes it impossible to use the IBSAGO App.
The data are processed using IT procedures or in any case with automated means or in paper format by subjects, internal or external, specifically appointed and held with logic strictly related to the purposes for which the data were collected and in any case suitable to guarantee security and confidentiality. The data is protected by the security measures required by law, designed to prevent unauthorized access, loss or destruction.
The Data will be kept for the period strictly necessary to achieve the purposes for which they were collected. In any case, the criterion used to determine this period is based on compliance with the terms allowed by applicable laws and the principles of minimization of treatment and rational management of archives. In particular, personal data for the purposes set out in Points 1 and 1b will be anonymized within 90 days of cancellation from the IBSAGO App.
The data can be used by Company personnel who have been given appropriate operating instructions with confidentiality restrictions, as well as by third parties who carry out instrumental and ancillary activities on behalf of the Data Controller, the latter acting as external data processors and under the direction and control of the Data Controller.
The updated list of Data Processors is available by submitting a request to privacy@ibsa.ch.
In accordance with the regulatory and regulatory provisions to which we are subject, we may have to communicate data to legitimate recipients in accordance with the law and regulation. These subjects will act as independent Data Controllers.
In accordance with the laws and regulations to which we are subject, your personal data may also be communicated and/or transferred to organizations located in other countries, both in EU countries and outside the EU, including countries that may not provide the same level of protection as provided by applicable legislation, in which case the transfer of data abroad is subject to specific guarantees for the protection of personal data through the adoption of standard contractual clauses.
You have the right to know, at any time, what your data are at the Data Controller and how they are used; you also have the right to have them updated, integrated, rectified or deleted, to request portability or restriction of processing, in the cases provided for by law, and to object to their processing. For the exercise of your rights, as well as for more detailed information about the subjects or categories of subjects to whom the data is communicated or who become aware of it as managers or agents, you can contact us at: - email privacy@ibsa.ch;
- IBSA Institut Biochimique SA, Privacy Office, via del Piano 29, 6926 Collina d'Oro, Switzerland.
Finally, we remind you that, limited to the cases in which the GDPR applies, you have the right to lodge a complaint with the competent authorities for the protection of personal data if you believe that your rights have not been respected or that you have not received a response to your requests according to law.
The data controller is IBSA Institut Biochimique SA with registered office in Via Pian Scairolo 49, 6912 Pazzallo, Switzerland.
The Data Controller employs a data protection consultant/personal data protection officer (also known as Data Protection Officer “DPO”). The DPO can be contacted through the following communication channel: dpo@ibsa.it