Pursuant to and for the purposes of Regulation (EU) 2016/679 (“
GDPR”), Italian Legislative Decree 196/2003 and the Italian and European legislation applicable from time to time on the processing of personal data (jointly, the “
Privacy Law”) we inform you on the following points:
- Your Company has purchased a wide and complete range of products and services to support its helicopter fleets, including but not limited to technical assistance, technical publications, training, maintenance services, logistics, spares, repair and overhaul and customized solutions (collectively, the “Services” ), from the company Leonardo S.p.A. (hereinafter referred to as “LDO”).
- LDO and Your Company will exchange and use data for statistical analysis performed by LDO, related to the improvement of products and services provided by LDO.
- In the context of the provision of Services, personal data are collected (by way of example: contact data, data relating to geographical location and data relating to performance (the “Personal Data”) relating to various categories of people, including pilots, technicians, who work for Your Company (the “Data Subjects”).
- In order to benefit from the Services, Your Company must process the Personal Data of the Data Subjects and communicate them to LDO: this will be made only on the basis of the express and specific consent of the Data Subjects.
- LDO and Your Company act as joint controllers of the processing activities (the “Joint Controllers”) carried out on the Personal Data of the Data Subjects for the purposes of providing the Services.
- Personal Data will be processed in both paper and electronic and/or automated form, i.e. both manually and electronically. In any case, all appropriate procedures will be adopted to protect their confidentiality, in compliance with current regulations and professional secrecy.
- Appropriate security measures will be used to ensure the protection, security, integrity and accessibility of Personal Data, in accordance with the provisions of Article 32 of the GDPR.
- Personal Data may be transferred outside the territory of the European Union, but only on the basis of the appropriate guarantees provided by the Privacy Law.
- Personal Data will be kept only for the time strictly necessary to achieve the purposes for which they are collected, unless provisions of law and/or regulation and/or by other authorities legitimated by law do not require or admit longer retention periods. Personal Data that are no longer necessary, or for which there is no longer a legal basis for their storage, will be irreversibly anonymized or destroyed in a secure manner.
- Any list of data processors and other subjects to whom the data are communicated may be viewed at the request of the Data Subjects.
- Data Subjects may exercise their rights under Articles 15 to 22 of the GDPR (e.g. access to Personal Data as well as their rectification, erasure, restriction of processing, copying of Personal Data in a commonly used and readable structured format by automatic means and transmission of such data to another data controller), including the right to withdraw their consent to the processing of their Personal Data, without prejudice to the lawfulness of processing prior to such withdrawal. It will be the responsibility of the Joint Controllers to verify the legitimacy of the Data Subjects’ requests by providing feedback, as a rule, within 30 days.
- To exercise the rights referred to in the previous point, as well as in case of any complaints or reports on how to process data, the Data Subjects may send an email to the internal function of Your Company in charge of data protection matters. It is also possible to file a complaint before the competent data protection authority.
Having understood all of the above,
and having received specific information on the processing of my Personal Data pursuant to Article 13 of the GDPR, by ticking the box below
I GIVE MY CONSENT to the processing of my Personal Data and to their communication to LDO for the purposes of carrying out the Services.
