Privacy Policy

INFORMATION REGARDING THE PROCESSING OF USER PERSONAL DATA AS PER ARTICLES 13-14 OF EU REGULATION 2016/679 (GDPR)

Processing of personal data
Here below is a description of the privacy policy of Eccelsa Aviation's official web site (Eccelsa.com) regarding the processing of personal data conferred for various purposes such as, but not limited to: request(s) for handling services and extra handling services (business centre reservation, security surveillance service, in-flight catering orders, laundry service, hotel transfer/accommodation, car rental, yacht charter reservation, hangarage services, aircraft washing, international newspapers orders), sending a contact form for information request, sending a feedback form for the web-site, handling and catering services.

This policy applies pursuant to articles 13 and 14 of EU Regulation 2016/679 (GDPR) to those individuals who interact with Eccelsa.com. This policy is valid only for the official website of Eccelsa Aviation and not for other sites that may be consulted by the user through links. All information originating from Eccelsa.com and received by Eccelsa Aviation email addresses (orders, requests, suggestions, ideas, information, etc.) is not be considered confidential.

Data controller of personal data
Eccelsa Aviation S.r.l. - Olbia Costa Smeralda Airport, 07026 Olbia (SS). Phone +39-0789-563480 - e-mail: handling@eccelsa.com – certified e-mail: eccelsa@pec.it

Joint data controller of personal data
Geasar S.p.A. - Olbia Costa Smeralda Airport, 07026 Olbia (SS) Phone +39 0789-563400 - e-mail: info@geasar.it – certified e-mail: geasar@pec.it

Data protection officer (DPO)
Phone +39 3459764751 - E-mail address: privacy@geasar.it – certified e-mail: privacy.geasar@pec.it

Personal data processing
The processing of personal data is limited to personal data sent by e-mail (name, e-mail) or by forms that generate an e-mail such as, but not limited to, the Contact Form for requesting handling and extra handling services (name, email, phone number, company name, VAT Number) and the Feedback Contact Form (e-mail address).

Data processing methods
The processing of personal data is carried out through manual, computer and telematic means and is strictly related to the purpose(s) requiring the provision of such personal data. In any case, these means ensure the security and confidentiality of the data transmitted/received.

The processing will be carried out electronically by Eccelsa Aviation staff, and forwarded to its accredited suppliers whenever required with the observance of every precautionary measure, which guarantees security and confidentiality.

The provision of data is essential for the execution of the service(s) requested and any refusal to provide such data will result in the non-execution of the same.

Service requests/information/feedback
The processing of personal data is carried out electronically and in paper form by Eccelsa Aviation employees, and/or by third-party accredited service suppliers with the observance of every precautionary measure, which guarantees security and confidentiality.

The provision of data is essential for the execution of the service(s) requested and any refusal to provide such data will result in the non-execution of the same.

Processing Legal basis
The data treatment is based on consent made pursuant to art. 6 par. 1 lett. a) of the GDPR 2016/679 Regulation and the fulfilment of a pre-contractual and subsequently contractual obligation.

Data recipients
The activities will be carried out through automated and computerized procedures, exclusively within company data processing systems, or by third parties tied by contractual relationships (banks, insurance institutions, express couriers, website maintenance company and public authorities) or by business partner companies who provide any of the aforementioned customer services directly.

The data collected by Eccelsa Aviation for catering orders is shared with Cortesa S.r.l. (a company owned by Geasar S.p.A.). As co-owner of the treatment of personal data, Cortesa Srl, in the person of its legal representative. may be contacted (also to exercise any rights by interested parties) at: phone +39-0789-563533, e-mail: cortesa.restaurant@geasar.it

Subjects authorized for data processing
Any personal data can be processed by Eccelsa Aviation employees – or third-party employees as laid out in the preceding point – in charge of the reservation/supply of the requested service(s), who have been expressly authorized to process such data, and who have received appropriate operating instructions.

Purpose of data processing
Any data provided will be used exclusively for meeting a service(s) request. Specifically, sending – and subsequently, evading – contact/email forms for handling and extra-handling services, information requests, orders, suggestions/complaints and feedback.

Data retention period
Any personal data provided is kept for the time necessary to achieve the purpose(s) for which it was originally collected or for any other legitimate related purpose, until revocation of consent. Any electronic data is usually kept for up to two years, all paper form data is usually kept for up to ten years then destroyed.

Rights of data subjects
Following EU Regulation 2016/679, you are entitled to:

- request the confirmation of the existence or otherwise of personal data;

- request the access to personal data and all related information;

- rectify, cancel, limit and oppose the processing of personal data;

- request the portability of personal data.

Furthermore, pursuant to art. 7, co. 3, GDPR, you can exercise your right to revoke your consent at any time, without prejudice to the lawfulness of the processing based on consent previously granted. Finally, you can lodge a complaint with the Supervisory Authority, which in Italy is the Guarantor for the protection of personal data. To exercise the above rights, report problems or request clarification on the processing of personal data, you can send a written request directly to the Data Protection Officer (DPO), to the postal address of the registered office or to the email address privacy@geasar.it