Information on the Processing of Personal Data pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”) regarding the use of the APP

This Information Notice supplements the “GDPR Privacy Notice for Citizen Users Using Paid Parking” available on the website www.cittadilucca.it, privacy policy section, to which reference is made for content not expressly provided herein. It aims to illustrate the personal data processing activities carried out by the Data Controller (Città di Lucca Soc. Coop., hereinafter the “Company”) in relation to the use of the Mobipar Application (hereinafter the “APP”).

Information on Data Processing

Launching the APP results in the automatic detection and collection of certain personal data by the Company, in particular:

• Device-related data: information about the operating system used, device model, IP address;
• Network connection data: public IP address;
• Location data: information about the location from which access or operations are performed;
• Session data: technical cookie to identify that the user is logged in.

Purpose of Processing

The personal data collected through the APP is processed for the following purposes:

1. To prevent fraudulent use and monitor the proper functioning of the APP through a logging system.
2. To enable proper use of the application, including all related activities and services such as, for example, the ability to request a subscription. During the use of the APP, the Company may process additional categories of personal data necessary to ensure the proper provision of the Services expressly requested by you.

Legal Basis

Your data will be processed in accordance with current legislation:

• Article 6, Paragraph 1, Letter f) of the GDPR (Legitimate Interest of the Company to prevent fraud).
• Article 6, Paragraph 1, Letter b) GDPR (Execution of the Service).

Retention Period

Data will be retained for the strictly necessary time, in compliance with the prescribed terms. Logs will be stored for a maximum of one year from the time of creation.

Data Communication and Disclosure

Your data may be disclosed to:

• The IT company providing the hosting service.
• Other IT companies providing auxiliary services for the App.
• The email service provider.
• The payment service provider.
• Entities required by law, such as public authorities, law enforcement agencies, regulatory authorities.

Your data will not be disclosed in any way.

Data Transfer and Access

Data processing will primarily take place within the European Union. If technical and organizational needs arise, data may be transferred to non-EU countries in compliance with current regulations.

Identity and Contact Details of the Data Controller

The Data Controller is Città di Lucca Soc. Coop., with its registered office at Via Pisana Trav. II n. 82 – 55100 Lucca, C.F. and VAT No. 01585490467. Tel. 0583 1720072, email privacy@mobipar.it

Data Subject Rights

To exercise your rights under Articles 15 to 22 of the GDPR, you may contact privacy@mobipar.it or the Company’s registered office.

Changes and Updates to the Information Notice

This notice may be updated based on future regulatory or technological changes. Any modifications will be communicated in accordance with current regulations.

Rev 1 of 26/07/2024