This information on the processing of personal data refers to the processing carried out through the Application dedicated to the E-Bike Sharing system managed by Brescia Mobilità SpA through the APPLICATION provided by EMOBY Srl

WHO PROCESS THE DATA

Data controller: BRESCIA Mobilità SPA, with registered office in via Magnolini 3 - 25135 Brescia VAT number. 02246660985 / TEL. 0303061200 / FAX 0303061004 / MAIL customercare@bresciamobilita.it

With regard to any accessory functions, the Data Controller makes use of subjects (including third parties) as data processors:

WHICH DATA ARE PROCESSED AND WHICH ARE THE INTERESTED PARTIES

The Personal Data collected by this Application, independently or through third parties, concern users of the E-bike sharing service. The collected data are: name; surname; telephone number; e-mail; geographic location; Cookie; Usage data; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); language; Permit Room; Precise location permission (continuous); Approximate location permission (continuous); Telephone Permit; SMS permission; password; Fiscal Code; physical address; country; provinces; POSTAL CODE; city;billing address; Data communicated while using the service. Complete details on each type of data collected are provided in the dedicated sections of this privacy policy and / or through specific information texts displayed before the data is collected. Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application. Unless otherwise specified, all data required by this application are mandatory. If the User refuses to communicate them, it may be impossible for this Application to provide the Service. In cases where this Application indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation. Any use of Cookies - or of other tracking tools - by this Application or by the owners of third party services used by this Application, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to further purposes described in this document and in the Cookie Policy, if available.

FOR WHAT PURPOSES ARE THE DATA PROCESSED

The User Data is collected to allow the Owner to provide the Service, fulfill legal obligations, respond to requests or executive actions, protect their rights and interests (or those of Users or third parties), identify any malicious activities. or fraudulent, as well as for the following purposes: Contacting the User, Managing payments, Location-based interactions, Managing contacts and sending messages, Permissions for accessing the Personal Data present on the User's device, Registration and authentication provided directly from this Application, Displaying content from external platforms, Platform and hosting services, Statistics and Management of support and contact requests.

WHERE THE DATA ARE PROCESSED

The Customer's personal data are processed in the Controller's office (s).

HOW THE DATA ARE PROCESSED AND STORED

Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed. Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until this interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller. When the processing is based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority. At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

PERMISSIONS FOR ACCESS TO PERSONAL DATA ON THE USER'S PERIPHERAL

Depending on the specific device used by the User, this Application may require certain permissions to access the User Data present on the device itself, as described below. Such permissions must be provided by the User before any information can be processed. Following the release, the permission can be revoked by the User at any time. In order to revoke the permissions, the User can use the system settings or contact the Owner at the addresses indicated in this document. The procedure for checking permissions may vary depending on the device and software used by the User. Please consider that the revocation of one or more permissions may have consequences on the correct functioning of this Application. In the event that the User grants the permissions indicated below, the related Personal Data may be processed (accessed, modified or removed) by this Application.

Camera permission

Used to access the camera or capture images and videos from the device.

Approximate Location Permission (continued)

Used to access the approximate location of the User's device. This Application may collect, use and share the User's location in order to provide location-based services.

Precise location permission (continued)

Used to access the precise location of the User's device. This Application may collect, use and share the User's location in order to provide location-based services

SMS permission

Used to access the User's messaging system and including the ability to send, receive and read SMS.

Telephone permission

Used to access many typical telephony functions. The authorization allows, for example, read-only access to the “telephone status”, and therefore, by way of example, to the associated telephone number, mobile network information and the status of calls in progress. Personal Data is collected for the following purposes and using the following services: Contact the user Contact form (this Application) By filling in the contact form with their data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header. Personal Data processed: surname; e-mail; first name; telephone number. Contact by phone (this Application) Users who have provided their telephone number may be contacted for commercial or promotional purposes related to this Application, as well as to satisfy requests for support. Personal Data processed: telephone number.

Manage contacts and send messages

This type of service allows you to manage a database of e-mail contacts, telephone contacts or contacts of any other type, used to communicate with the User. These services could also allow the collection of data relating to the date and time of display of the messages by the User, as well as to the User's interaction with them, such as information on clicks on the links inserted in the messages.

OneSignal (Lilomi, Inc.)

OneSignal is a messaging service provided by Lilomi, Inc. OneSignal allows the Owner to send messages and notifications to Users on platforms such as Android, iOS and on the web. Messages can be sent to single devices, to groups of devices, or based on topics or specific segments of Users. Depending on the permissions assigned to this Application, the Data collected may concern and include information on the precise location (for example, through GPS data), on the Wi- Fi network and on the applications installed and activated by the User. To allow the OneSignal service to work, this Application uses identifiers for mobile devices (including Android Advertising ID or Advertising Identifier for OS) or technologies similar to cookies. The data collected could be used by the service provider for promotional purposes (based on Users' interests), statistics and market analysis. For further details regarding OneSignal's use of Data, please consult the relevant privacy policy .

Opt-out from push notifications

In most cases, Users will be able to disable notifications through the settings of their device (for example the section on Push Notifications), making the relative changes in relation to all or some of the applications present.

Opt-out from interest-based promotional activity

Users will be able to opt-out from OneSignal's promotional functions through the settings of their device (for example those relating to advertising management). Different configurations of some devices, or the installation of any updates, may affect the operation of the mentioned settings. Personal Data processed: Cookies; Usage data; e-mail; unique device identifiers for advertising (Google Advertiser ID or IDFA identifier, for example); language; geographic location; various types of data as specified in the privacy policy of the service. Place of processing: United States - Privacy Policy - Opt out .

Payment management

Unless otherwise specified, this Application processes all payments by credit card, bank transfer or other means through external payment service providers. In general, and unless otherwise stated, Users are requested to provide payment details and personal information directly to such payment service providers. This Application is not involved in the collection and processing of such information: instead it will only receive a notification from the payment service provider in question that the payment has been made.

Stripe (Stripe Inc)

Stripe is a payment service provided by Stripe Inc. Personal Data processed: various types of Data as specified in the privacy policy of the service. Place of processing: United States - Privacy Policy .

Management of support and contact requests

This type of service allows this Application to manage support and contact requests received via e-mail or through other tools, such as the contact form. The Personal Data processed depend on the information provided by the User in the messages and on the tool used for communication (for example the e-mail address).

Location-based interactions

Geolocation (this Application) This Application may collect, use and share data relating to the geographical location of the User, in order to provide services based on the location itself. Most browsers and devices provide tools by default to deny geo-tracking. If the User has expressly authorized this possibility, this Application may receive information on its actual geographical position. Personal data processed: geographical position.

Permissions for accessing the Personal Data present on the User's device

This Application requires the release of certain permissions by the User who, in this way, authorizes access to the Data present on his / her device, in the terms indicated below.

Permissions for access to Personal Data present on the User's device (this Application)

This Application requires the release of certain permissions by the User who, in this way, authorizes access to the Data present on his / her device, as summarized here as well as in the terms indicated in this document. Personal Data processed: Camera Permit; Approximate location permission (continuous); Precise location permission (continuous); SMS permission; Telephone permission.

Registration and authentication provided directly by this Application

By registering or authenticating, the User allows this Application to identify him and give him access to dedicated services. Personal Data is collected and stored solely for registration or identification purposes. The data collected are only those necessary to provide the service requested by the user.

Direct registration (this Application)

The User registers by filling out the registration form and providing his Personal Data directly to this Application. Personal Data processed: CAP; city; Fiscal Code; surname; e-mail; billing address; physical address; country; first name; telephone number; password; provinces.

Platform and hosting services

These services are intended to host and operate key components of this Application, making it possible to deliver this Application from a single platform. These platforms provide the Owner with a wide range of tools such as, for example, analytical tools, for managing user registration, for managing comments and the database, for e-commerce, for processing payments etc. The use of these tools involves the collection and processing of Personal Data. Some of these services work through servers geographically located in different places, making it difficult to determine the exact place where Personal Data is stored.

OVH

Provider OVH Srl (Sole Shareholder) Registered office: Largo Volontari del Sangue, 10 - 20097 San Donato Milanese (MI) Purpose Hosting and backend infrastructure Personal data collected Various types of data as specified by the privacy policy of the service

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

Google Analytics (Google Ireland Limited)

Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected for the purpose of tracing and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network. Personal Data processed: Cookies; Usage data. Place of processing: Ireland - Privacy Policy - Opt Out .

Viewing content from external platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Application and interact with them. This type of service may still collect data on web traffic relating to the pages where the service is installed, even when users do not use it.

OpenStreetMap Widget (OpenStreetMap Foundation)

Widget OpenStreetMap is a map visualization service managed by the OpenStreetMap Foundation that allows this Application to integrate such contents within its pages. Personal Data processed: Cookies; Usage data. Place of processing: United Kingdom - Privacy Policy . Further information on Personal Data

Analysis of User Data and forecasts ("profiling")

The Owner may process the usage data collected through this Application to create or update user profiles. This type of treatment allows the Owner to evaluate the choices, preferences and behavior of the User for the purposes specified in the respective sections of this document. User profiles can also be created thanks to automated tools, such as algorithms, which can also be offered by third parties. To obtain further information on the profiling activity, the User can refer to the respective sections of this document. The User has the right to object to this profiling activity at any time. To find out more about the User's rights and how to exercise them, the User can refer to the section of this document relating to Users' rights. The Service is not aimed at children under the age of 14 Users declare to be of age according to the legislation applicable to them. Minors may use this Application only with the assistance of a parent or guardian. Under no circumstances may children under the age of 14 use this Application.

Unique identification of the device

This Application can track Users by saving a unique identification code of their device, for statistical purposes or to keep Users' preferences. In addition to the applicable device settings, the User can also exercise the rights described in the relevant section of this privacy policy.

USER RIGHTS

Users can exercise certain rights with reference to the Data processed by the Data Controller. In particular, the User has the right to:

Details on the right to object When Personal Data is processed in the public interest, in the exercise of public authority vested in the Data Controller or to pursue a legitimate interest of the Data Controller, Users have the right to oppose the processing for reasons connected to their particular situation. Users are reminded that, if their Data are processed for direct marketing purposes, they can oppose the processing without providing any reasons. To find out if the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document. How to exercise your rights To exercise the User's rights, Users can direct a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month. Defense in court The User's Personal Data may be used by the Owner in court or in the preparatory stages for its eventual establishment for the defense against abuse in the use of this Application or related Services by the User. The User declares to be aware that the Owner may be obliged to disclose the Data by order of the public authorities.

Specific information

At the request of the User, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

System log and maintenance

For needs related to operation and maintenance, this Application and any third party services used by it may collect system logs, ie files that record the interactions and which may also contain Personal Data, such as the User IP address.

Information not contained in this policy

Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

Response to "Do Not Track" requests

This Application does not support "Do Not Track" requests. To find out if any third-party services used support them, the User is invited to consult the respective privacy policies.

Changes to this privacy policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Application as well as, if technically and legally feasible, by sending a notification to Users through one of the extremes of contact he has. Please therefore consult this page frequently, referring to the date of the last modification indicated at the bottom. If the changes concern treatments whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.

DEFINITIONS AND LEGAL REFERENCES

Personal Data (or Data)

Any information that, directly or indirectly, also in connection with any other information, including a personal identification number, makes a natural person identified or identifiable constitutes personal data.

Usage Data

This is information collected automatically through this Application (including from third-party applications integrated into this Application), including: IP addresses or domain names of the computers used by the User who connects with this Application, addresses in URI notation (Uniform Resource Identifier) , the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) country of origin , the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details of the itinerary followed within the Application, with particular reference the sequence of the pages consulted, the parameters relating to the operating system and the IT environment of the User.

User

The individual using this Application who, unless otherwise specified, coincides with the Data Subject.

Interested

The natural person to whom the Personal Data refers.

Data Processor (or Manager)

The natural person, legal person, public administration and any other body that processes personal data on behalf of the Data Controller, as set out in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of the processing of personal data and the tools adopted, including the security measures relating to the operation and use of this Application . The Data Controller, unless otherwise specified, is the owner of this Application.

This Application

The hardware or software tool through which the Personal Data of Users are collected and processed.

Service

The service provided by this application as defined in the relative terms (if available) on this site / application.

European Union (or EU)

Unless otherwise specified, any reference to the European Union contained in this document is intended to be extended to all current member states of the European Union and the European Economic Area.

Cookies

Cookies are Tracking Tools which consist of small pieces of data stored in the User's browser.

Tracking Tool

By Tracking Tool we mean any technology - eg. Cookies, unique identifiers, web beacons, integrated scripts, e-tags and fingerprinting - which allow users to be traced, for example by collecting or saving information on the User's device.