Personal Data Protection Policy (Pursuant to Art. 13 of European Regulation no. 679/2016)
Before acquiring your personal data for requests for assistance online, Trenitalia S.p.A. asks you to carefully read the policy regarding personal data protection. I. Data Controller and DPO In this section, we indicate our points of reference • Data Controller: Trenitalia S.p.A., with registered office in Piazza della Croce Rossa 1, 00161 Rome and represented by the Chief Executive Officer, pro-tempore, can be contacted at titolaretrattamento@trenitalia.it. • DPO: Contact information of the Data Protection Officer (DPO): protezionedati@trenitalia.it. II. Types of personal data In this section, we indicate the types of data we request • Data acquired directly from the interested party: first and last name, e-mail, telephone. The aforementioned data will be processed using computer and paper media in order to guarantee suitable measures of security and privacy. III. Purpose of Data Processing In this section, we indicate the purpose of processing carried out on your data a. Sending of request for assistance online; Provision of data (Mandatory); Legal basis; (Contractual) b. Identification of travel type and habits and sending of questionnaires for the purpose of planning a suitable offer of its services; Provision of data (Optional); Legal basis (Consent) c. Improving claim handling in the case of communication difficulties and/or for speeding up response times; Provision of data (Optional); Legal basis (Consent) Provision of the data necessary for pursuit of the purposes referred to in point a) is “mandatory” and any refusal could make it impossible for Trenitalia S.p.A. to provide the assistance requested. Provision of the data necessary for pursuing the purposes referred to in point b) is "optional”, therefore non-provision will not lead to restrictions on the services provided but will not allow Trenitalia S.p.A. to identify your travel habits and consumer choices for the purpose of offering services in line with your preferences Provision of the data necessary for pursuing the purposes referred to in point c) is “optional”, therefore non-provision will not lead to restrictions on the services provided but will not allow Trenitalia S.p.A. to improve claim handling and response times. Any consent given may be freely withdrawn at any time, without prejudice to the lawfulness of the processing carried out before withdrawal. Consent can be withdrawn by using the relevant online function or by contacting the Data Manager at gestionedatcartafreccia@trenitalia.it, or by contacting the Data Protection Officer at protezionedati@trenitalia.it IV. Recipients of data In this section, we indicate who will process your data and to whom they will be communicated For pursuit of the aforementioned purposes, personal data will be processed by the following: Parties attributable to Trenitalia S.p.A.: • Long Haul Passenger Division • Direzione Sistemi Informativi (Information Systems Management) • Almaviva S.p.A. Parties not directly attributable toTrenitalia S.p.A.: • Judicial Authorities • Police Authorities Your data will only be processed by parties expressly authorised by Trenitalia S.p.A. Or by companies acting as Data Processors, on behalf of Trenitalia S.p.A., and which have signed a specific contract that specifically regulates the processing entrusted to them and the obligations regarding data protection; your data will never be disseminated. The updated list of the recipients of data is available by contacting the Data Manager at areaclienti@trenitalia.it, or by contacting the Data Protection Officer at protezionedati@trenitalia.it. V. Data retention In this section we indicate how long we will retain your data The personal data that you have provided us will be retained for: Purposes that make its provision mandatory: 12 months from acquisition of data Purposes that make its provision optional: 24 months from acquisition of data. Except in the case of further retention for the following purposes: archival in the public interest, scientific or historical research, statistical purposes of for technical reasons (e.g. operational continuity). VI. Rights of the interested parties In this section, we indicate the rights we guarantee EU Regulation 2016/679 (Articles 15 to 23) grants the interested parties the exercise of specific rights. In particular, in relation to the processing of your personal data, you have the right to ask Trenitalia S.p.A. for access, correction, rectification, limitation, opposition and portability. In addition, you may lodge a complaint to the Supervisory Authority, which in Italy is the Data Protection Authority. At any time, you may request exercise of your rights from Trenitalia S.p.A. by contacting the Data Manager at areaclienti@trenitalia.it, or by contacting the Data Protection Officer at protezionedati@trenitalia.it.

Personal data required

First Name*		Last Name*
Email*		Email confirmation*

Phone number* (required if you do not enter mobile phone)
Mobile phone* (required if you do not enter phone number)

Optional data

User-Id

Declaration of consent

For the data processing indicated in Section III – "Purposes of data processing":

I express consent to the use of my e-mail address and/or telephone number for identifying the travel types and habits of the customer and the sending of questionnaires to allow Trenitalia to plan a suitable offer of its services

 I consent   I do not consent

I express consent to the use of my telephone number for improving claim handling in the case of communication difficulties and/or for speeding up response times

 I consent   I do not consent