Privacy Policy

Lasa Air Transport S.r.l.

VAT no. and Tax code: 04965670153

Via G. da Udine n.34

20156 Milan, Italy

Phone: +39 02 6085811 Fax: +39 02 6085811

E-MAIL: lasa.air@lasaair.it;

Privacy Policy

Information on the processing of personal data pursuant to Articles 13-14 of EU Reg. 2016/679

Data subjects: visitors to the website.

Lasa Air Transport S.r.l., as Controller of the processing of your personal data pursuant to and for the purposes of EU Reg. 2016/679 (hereinafter the 'GDPR'), hereby informs you that the above legislation provides for the protection of data subjects with regard to the processing of personal data, and that such processing will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and your rights.

Your personal data will be processed in accordance with the legal provisions of the legislation referred to above and with the confidentiality obligations set out therein.

Purposes and legal basis of the processing: your data will be processed in particular for the following purposes, connected with the fulfilment of legal or contractual obligations:

• technical and functional access to the website; no data is retained after the browser is closed;
• statistical purposes and analysis of browsing behaviour and users.

Methods of processing. Your personal data may be processed in the following ways:

• by electronic devices using software systems managed by third parties;
• by electronic devices using software systems managed or programmed directly;
• temporary processing in anonymous form.

All processing takes place in compliance with the methods set out in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures provided for therein.

Your data will be processed solely by staff expressly authorised by the Controller and, in particular, by the following categories of personnel:

• programmers and analysts.

Disclosure: your data may be disclosed to external parties for the proper management of the relationship and, in particular, to the following categories of recipients, including all duly appointed Data Processors:

• Google Analytics: advertising targeting, analytics/measurement, optimisation.

Dissemination: your personal data will not be disseminated in any way.

Your personal data may also be transferred, solely for the purposes set out above, to the following countries:

• EU countries;
• United States.

Retention period. Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimisation pursuant to Article 5 of the GDPR, the retention period for your personal data is:

• set for a period of time not exceeding the completion of the services provided.

Cookie management: should you have any doubts or concerns about the use of cookies, you may always intervene to prevent them from being set and read, for example by changing the privacy settings within your browser in order to block certain types.

Since each browser - and often different versions of the same browser - differ significantly from one another, if you prefer to act independently through your browser preferences you can find detailed information on the necessary procedure in your browser's help pages. For an overview of how to proceed with the most common browsers, you can visit www.cookiepedia.co.uk.

Advertising companies also allow you to opt out of receiving targeted advertising, if you so wish. This does not prevent cookies from being set, but it does stop the use and collection of certain data by those companies.

For further information and opt-out options, please visit www.youronlinechoices.eu/.

Controller: the Data Controller, pursuant to the law, is Lasa Air Transport S.r.l. (Via G. da Udine n.34, 20156 Milan, Italy - Phone: +39 02 6085811 - email: lasa.air@lasaair.it; VAT no.: 04965670153), in the person of its legal representative pro tempore.

You have the right to obtain from the Controller the erasure (right to be forgotten), restriction, updating, rectification and portability of, and the right to object to the processing of, the personal data concerning you, as well as, in general, to exercise all the rights provided for by Articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.

Information on the processing of data collected through the "Ask a Quote" form pursuant to Article 13 of EU Reg. 2016/679

Data subjects: users who fill in the quotation request form.

Data Controller: Lasa Air Transport S.r.l., Via G. da Udine n.34, 20156 Milan, Italy - Phone: +39 02 6085811 - email: lasa.air@lasaair.it, in the person of its legal representative pro tempore. No Data Protection Officer has been appointed, as the conditions set out in Article 37 of the GDPR do not apply.

Data processed: the data you enter in the form, namely the description and quantity of the goods, the place of departure and the place of destination, the date and type of shipment, the company name, the name of the contact person, the telephone number and the email address. No data belonging to the special categories referred to in Article 9 of the GDPR is requested, and none should be entered.

Purposes and legal basis of the processing. The data collected through the form is processed for the following purposes:

• to prepare the requested quotation and to contact you again in order to provide the information you asked for: legal basis Article 6(1)(b) of the GDPR, performance of pre-contractual measures taken at your request;
• to send a summary copy to the email address you provided, confirming that the request has been received: legal basis Article 6(1)(b) of the GDPR;
• to comply with obligations laid down by law, including transport and shipping regulations: legal basis Article 6(1)(c) of the GDPR;
• to establish, exercise or defend a legal claim: legal basis Article 6(1)(f) of the GDPR, legitimate interest of the Controller.

Nature of the provision of data. Providing the data marked with an asterisk is necessary in order to act on the request: without it the quotation cannot be prepared. The box confirming that you have read this privacy policy is mandatory and documents compliance with the duty to inform laid down in Article 13 of the GDPR.

Methods of processing. The data entered in the form is sent by email to the Controller's company mailbox and processed by electronic means and, where necessary, on paper, in compliance with the security measures set out in Article 32 of the GDPR. The website does not store the form data in a database of its own. No automated decision-making or profiling within the meaning of Article 22 of the GDPR is carried out.

Recipients. The data is processed by the Controller's expressly authorised staff and may be disclosed to the following categories of recipients:

• the provider of the website hosting and email services, appointed as Data Processor pursuant to Article 28 of the GDPR;
• carriers, correspondents, agents, warehouse keepers and customs operators involved in preparing the quotation or carrying out the shipment;
• consultants, professionals and public authorities, within the limits of legal obligations.

Dissemination and transfer. The data is not disseminated in any way. Where the place of departure or destination you indicate so requires, the necessary data may be transferred to correspondents located in countries outside the European Economic Area: in that case the transfer takes place on the basis of an adequacy decision of the European Commission, or of the appropriate safeguards provided for in Article 46 of the GDPR such as standard contractual clauses, or else, where the transfer is necessary for the performance of the contract, pursuant to Article 49(1)(b) and (c) of the GDPR.

Retention period. The request data is kept for as long as needed to handle it and, where no follow-up takes place, for a maximum of 24 months from the last contact. Where the request is followed by a contractual relationship, the data is kept for the duration of that relationship and for the following 10 years, in compliance with civil law and tax obligations.

Rights of the data subject. In relation to the data provided through the form you may exercise at any time the rights of access, rectification, erasure, restriction, portability and objection provided for by Articles 15-22 of the GDPR, by writing to lasa.air@lasaair.it or to the registered office address indicated above. You also have the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia n.11, 00187 Rome, www.garanteprivacy.it, pursuant to Article 77 of the GDPR.

EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 - Rights of the data subject

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning them exists, even if not yet recorded, to have it communicated in intelligible form, and to lodge a complaint with the supervisory authority.

2. The data subject has the right to be informed of:

1. the source of the personal data;
2. the purposes and methods of the processing;
3. the logic applied where the processing is carried out with the aid of electronic instruments;
4. the identifying details of the controller, of the processors and of the representative designated pursuant to Article 5(2);
5. the parties or categories of parties to whom the personal data may be disclosed, or who may become aware of it acting as designated representative in the territory of the State, as processors or as persons in charge of the processing.

3. The data subject has the right to obtain:

1. the updating, rectification or, where they have an interest in it, the integration of the data;
2. the erasure, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed;
3. confirmation that the operations referred to in points (a) and (b) have been notified, including as regards their content, to those to whom the data was communicated or disseminated, except where doing so proves impossible or involves a manifestly disproportionate effort compared with the right protected;
4. the portability of the data.

4. The data subject has the right to object, in whole or in part:

1. on legitimate grounds, to the processing of personal data concerning them, even where it is relevant to the purpose of the collection;
2. to the processing of personal data concerning them for the purpose of sending advertising material or direct selling, or for carrying out market research or commercial communication.