Purpose of Recording License Plate Numbers

Vehicle license plates are recorded and processed by automated systems upon entry to and exit from the parking lot in order to: (i) determine the duration of parking within the parking lot; (ii) identify any exceeding of the permitted parking duration or other violations of the General Terms and Conditions for the purpose of collecting the contractual penalty; (iii) verify the existence of any temporary or permanent parking authorization; (iv) in the event of violations of the General Terms and Conditions, identify the vehicle owner in order to assert any claims regarding payments due, compensation for damages incurred, and any measures related to debt collection, protection of property, and injunctive relief.

This information is provided in accordance with Legislative Decree No. 196 of June 30, 2003, and Regulation (EU) No. 2016/679.

Information on the Protection of Personal Data

1. Name and Contact Information

The data controller, as defined by applicable data protection regulations, is: Mobility Hub Parkservice Italia S.r.l., Piazza della Mostra 2, I - 39100 Bolzano (BZ), VAT ID and Tax ID: 03201260217, Tel. +39 0471 1430502, Email: support@mh-parkservice.it, www.mh-parkservice.it.

2. Contact Information for the Data Protection Officer (RPD/DPO)

The Data Protection Officer at Mobility Hub Parkservice Italia S.r.l. can be reached at the following phone number: +39 0471 1430502, email: dataprotection@mh-parkservice.it.

3. Categories of Processed Data / Purposes and Legal Basis for Data Processing

The use of the parking spaces involves the automated collection of the following data: the license plate number, including the front and/or rear of the vehicle; the time of entry and exit; the date; the location; and the vehicle’s height. The processing of the collected data is essential to safeguard the controller’s legitimate interests (Art. 6(1)(f) GDPR) in operating the parking lot and performing the associated administrative tasks customary in the industry, as well as to provide services in accordance with the contractual agreements and in compliance with the General Terms and Conditions (e.g., verifying that the data matches the stored parking authorizations, verifying compliance with the maximum permitted parking duration, identifying and investigating unauthorized use of the parking lot and violations of the terms of the contract, and compiling statistics). The processing of personal data is carried out in accordance with the provisions of Legislative Decree No. 196 of June 30, 2003, and Regulation (EU) No. 2016/679; the relevant legal basis is derived in particular from Article 6(1)(b) and (f) of Regulation (EU) 2016/679.

4. Recipients or Categories of Recipients

In general, in the event of a violation of the General Terms and Conditions, in addition to the foregoing, all personal data of the vehicle owner and driver that is relevant to the prosecution of the violations will also be processed, in particular for the collection of a contractual penalty and/or the assertion of rights in connection with measures to protect property and possession. The vehicle owner’s data (in particular, name and address) is obtained by submitting the recorded license plate number to the Public Register of Motor Vehicles (PRA) and is also disclosed to third parties (e.g., attorneys, courts) for the purposes mentioned above.

In addition to the cases mentioned above, personal data may also be processed by companies within the controller’s group and by third parties—acting, as the case may be, as data processors within the meaning of Article 28 of the GDPR or as independent controllers—for the purposes of the technical operation of the parking management systems and software, as well as for carrying out activities related to the detection and prosecution of violations of the General Terms and Conditions, in each case to the extent necessary to achieve the purposes set forth in this notice. The data controller and these external data processors may use technological tools, platforms, and services, such as AWS, Google, Freshdesk, OpenAI, Anthropic, or comparable providers. In connection with these services, personal data may be transferred, made accessible, or accessible directly or indirectly by the respective providers or subprocessors, even outside the European Economic Area. In such cases, the data controller undertakes—and also requires its external data processors to do so— to use leading, reliable services and providers that meet appropriate security standards and ensure that any transfer of personal data to third countries complies with applicable data protection regulations and is based on appropriate safeguards, such as—where necessary—the Standard Contractual Clauses adopted by the European Commission pursuant to Article 46 of the GDPR.

5. Legal Basis for Data Processing

The legal basis for data processing is as follows:

• Performance of the contract to which the data subject is a party in connection with the use of the parking space in the parking lot (Art. 6(1)(b) of Regulation (EU) No. 2016/679);
• Protection of the data controller’s legitimate interest in ensuring the proper operation of the parking lots (Art. 6(1)(f) of Regulation (EU) No. 2016/679).

6. Storage and Deletion

The processed personal data will be deleted once all claims arising from the use of the parking lot have been settled and all legally prescribed retention and/or statute of limitations periods have expired. In particular, in the event of legal action to enforce the rights of Mobility Hub Parkservice Italia S.r.l., personal data will be processed until the conclusion of the proceedings and thereafter for a limitation period of 10 years from the conclusion of the proceedings. If there are no violations of the General Terms and Conditions, or if the user exits the parking lot within the free parking period—which begins at the time of entry into the parking lot, as specified in the General Terms and Conditions—the data concerning the user will be automatically deleted immediately upon exiting the parking lot, provided this does not conflict with statutory retention obligations.

7. Information on the Rights of Data Subjects

We hereby wish to inform users that they have the right to request information about their personal data that has been processed and stored (and to receive a copy thereof), as well as to request the correction, deletion, or blocking of such data, to object to its processing, and to request its portability. If you believe that we have not complied with applicable data protection regulations in the processing of your personal data, you may file a complaint with the competent Italian data protection authority (Garante per la protezione dei dati personali): https://www.garanteprivacy.it/i-miei-diritti.

By using the parking lot, the user expressly agrees to comply with all data protection provisions.