Privacy

Privacy notice on the processing of personal data

Viafast S.r.l. – pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)

1. Data controller and contact details

The data controller is Viafast S.r.l., with its registered office at Via Fermi 19, 62010 Pollenza (MC).

For any request concerning personal data, including the exercise of data subject rights, please write to: info@viafast.net.

2. Context, categories of data and their sources

When providing charging services and protecting parking bays reserved for electric vehicle charging, Viafast may process:

• Occasional photographs of the vehicle and its number plate, together with the location, date, time and technical data associated with the photograph.
• Identification and contact details of the registered vehicle owner, obtained by consulting the Italian Public Vehicle Register (PRA), and any additional information in the documents obtained that is relevant to the case.
• Information contained in correspondence and documents relating to the claim for damages.

Images are acquired through photographs taken by an authorised person in an area accessible to the public. Vehicle ownership details come from the PRA, which can be consulted in accordance with the procedures applicable to that register.

3. Purposes of processing

The data is used to document a specific occupation of a charging bay, identify the registered vehicle owner, submit and manage a claim for damages believed to have been suffered, examine any objections and protect Viafast’s rights out of court and, where necessary, in court. Viafast does not use these images to impose administrative penalties or to conduct traffic enforcement investigations.

4. Legal basis

Processing for the purposes described is based on Viafast’s legitimate interest in protecting its rights and financial interests (Article 6(1)(f) GDPR), following an assessment of necessity and a balancing of interests against the data subject’s rights and freedoms. Consent is not required for activities based on this legal ground.

Any additional processing necessary to comply with specific legal obligations is based on the applicable provisions (Article 6(1)(c) GDPR).

5. Processing methods, safeguards and access

Photographs are taken occasionally using devices owned by Viafast, without using automatic traffic offence detection systems or video surveillance systems for the individual incident. The original photograph is stored in the company device’s memory, and access is restricted to Viafast staff authorised to manage claims for damages. The company adopts appropriate organisational and technical measures to prevent unauthorised access or use. Correspondence and other case documents are managed using company procedures subject to access controls.

6. Recipients and transfers of data

Data may be processed by authorised company staff and, to the extent actually necessary, disclosed to appointed legal professionals or other advisers, service providers supporting case management, and authorities and courts where required or permitted by law. Data is not disclosed to the public. No transfers of data outside the EEA are envisaged within the activities described, except for any specific transfers that are notified and covered by the safeguards required by the GDPR.

7. Retention period

Photographs and data strictly related to the case are retained for as long as necessary to manage the claim: until payment and the resulting closure of the matter or, in the event of litigation, until the final resolution of the proceedings and any enforcement stage. In the absence of payment or litigation, the need for retention is reviewed periodically and data is deleted when the claim can no longer usefully be pursued or processing is no longer necessary, taking account of the applicable limitation periods. Any additional retention periods required by law or by specific needs to defend legal rights remain unaffected.

8. Data subject rights

In the circumstances and within the limits provided by the GDPR, data subjects may request access to and a copy of their personal data, rectification, erasure, restriction of processing and, where applicable, data portability. Requests may be sent to the contact address in section 1. A response is provided within the time limits set out in Article 12 GDPR, normally within one month. Data subjects may also lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Right to object – Article 21 GDPR. Data subjects have the right to object at any time, on grounds relating to their particular situation, to processing based on legitimate interests. If an objection is raised, Viafast will stop processing unless it demonstrates compelling legitimate grounds that override those interests or the need for processing for the establishment, exercise or defence of legal claims.

9. Provision of data and automated decision-making

Viafast obtains data through occasional observation of the vehicle and consultation of the PRA; data subjects are not required to provide data directly for the purpose of documenting the incident. No decisions based solely on automated processing are made, and no profiling within the meaning of Article 22 GDPR is carried out for the purposes described.