Privacy Policy for Purchasing Travel Tickets

The data controller is Arenaways – Longitude Holding S.r.l, with its legal office at Piazza Adriano 12 – 101138 Turin, contactable at privacy@arenaways.it. Arenaways – Longitude Holding S.r.l ensures compliance with personal data protection regulations by providing the following information regarding the processing of data communicated or otherwise collected during the navigation on this website.

The Data Protection Officer of Arenaways – Longitude Holding S.r.l can be reached at the following address:

• Address: DPO-Arenaways; Corso Quintino Sella, 14, 10131 Turin
• Email: dpo@arenaways.it

The personal data processed for the sale of travel tickets are:

• personal and identifying data such as name, surname, phone number, residence and/or domicile address, tax code, and any contact details;
• data derived from certificates or self-certifications that the user decides to provide in order to obtain any discounts;
• data associated with credit card or third-party payment instruments used for purchasing travel tickets

The data subject to processing are collected for the purpose of:

1. a. managing customer relationships for issuing personal cards where applicable;
2. b. managing post-sale activities (complaints, refunds, analysis, anomalies, etc.);
3. c. issuing invoices;
4. d. using email details for direct sales of similar products and services to the ones covered by the contract (Art. 130, paragraph 4, Legislative Decree 196/2003) -optional-;
5. e. commercial information, market research, direct offers of products or services aimed at promoting and encouraging the use of public transport services or sustainable mobility -optional-;

Providing data necessary for the purposes of points a), b) and c) is 'mandatory' and any refusal to provide such data will result in the inability for Arenaways – Longitude Holding S.r.l to issue the Travel Ticket and/or the nominative product or to offer discounted purchase conditions or to send you the travel ticket and/or the nominative product (in case of online purchase).

Providing the necessary data for point d) is 'mandatory' if you require the issuance of an invoice, and any refusal to provide the requested personal data may result in the inability for Arenaways – Longitude Holding S.r.l to issue the invoice.

Personal data will be processed by employees of Arenaways – Longitude Holding S.r.l and may be shared with the Piedmont Region, shipping services where applicable, and public bodies for the verification of the authenticity of self-certifications. Data may be visible to companies commissioned by Arenaways – Longitude Holding S.r.l for the provision, review, and maintenance of IT systems.

Travel ticket data is retained for 10 years from the date of travel or from the expiration date of the subscription.

EU Regulation 2016/679 (Articles 15 to 23) grants data subjects the exercise of specific rights. In particular, regarding the processing of your personal data, you have the right to request Arenaways – Longitude Holding S.r.l:

• Right of access: You can request confirmation of whether personal data processing is taking place and, if so, obtain access to your personal data;
• Right of rectification: You can obtain the rectification of inaccurate personal data concerning you;
• Right to erasure/oblivion: You may, under certain circumstances, obtain the erasure of personal data concerning you;
• Right to portability: You may, under certain circumstances, obtain your personal data in a structured, commonly used, and machine-readable format. You also have the right to transmit it to another data controller without hindrance;
• Right to restriction of processing: You may, under certain circumstances, obtain restriction of processing;
• Right to object to processing: You may object at any time, for reasons related to your particular situation, to the processing of personal data concerning you. Arenaways – Longitude Holding S.r.l will refrain from further processing your personal data unless it demonstrates the existence of compelling legitimate grounds for processing that override your interests, rights, and freedoms, or in case of legal claims, exercise, or defense of a right.

At any time, you can access your data, object to processing, or request the deletion, modification, or update of all personal information collected by Arenaways – Longitude, exercising the right to restrict processing and the right to data portability, by sending an email to dpo@arenaways.it.