This page will describe management of ESB web site and ESB applications as regards of processing the personal data of users that visit us.
We inform you that the personal data you provide and acquired together with the registration to the services of your choice, as well as the data necessary for the provision of these services, will be processed, in compliance with the guarantees of confidentiality and security measures provided by law in force through Information Technology, telematic and manual tools, with logic strictly related to the purposes of treatment.
By using ESB website and/or apps means that you agree to this new privacy statement.
We handle personal data collected during your visits to our websites and/or while using our mobile applications confidentially and entirely in accordance with legal regulations. If you have any questions or comments, please contact our Support team.
This information is provided – in pursuance of Section 13 of Legislative Decree no. 196/2003 – to any entity dealing with the web-based services that are made available by SITAEL S.p.A. via electronic networks as from the following address: www.esb.bike which corresponds to the home page of ESB official web site.
The information provided only applies to ESB web site and ESB applications and does not concern any web sites that may be visited by a user via external links.
The concept of ESB apps and the ESB.bike platform (hereinafter referred to as “ESB Products”) is based in part on the publication of details regarding individual users; such details are accessible to other users via the ESB Products and social networks (e.g. Facebook).
The collection, administration and use of personal data through ESB by SITAEL complies with the Italian applicable data protection laws and ensures that, as a user, you can establish which of your personal details shall be made accessible to other users.
The “ESB application” and “ESB.bike platform” are concepts of SITAEL S.p.A., a company duly organized and existing under the laws of Italy.
The data controller is SITAEL S.p.A., with registered office in Mola di Bari (BA) (Italy), Via San Sabino 21 – 70043 (hereinafter referred to as “SITAEL”).
SITAEL takes security precautions to ensure that your data managed by us are protected against tampering, loss, destruction, access by unauthorized persons, or unauthorized disclosure. Our security measures are being continuously improved in accordance with the state of technological developments.
SITAEL collects and processes Personal Data within the meaning of §4.1 (B) of the PERSONAL DATA PROTECTION CODE (Legislative Decree no. 196 of 30 June 2003) and information from users upon registration on its website (hereinafter “Registration” and “Registered User”) and in connection with the use of any of the ESB Products.
When you register for our services, by logging in with your contact details, you indicate your consent to our collecting, processing and using these data and the master personal data voluntarily provided by you in the context of use of the available services, to the extent necessary for the provision of the contractually stipulated services.
You may revoke your consent hereto at any time. The revocation shall be communicated via e-mail to firstname.lastname@example.org. The revocation entails your account removal from the system.
You may also ask us to block or delete the data relating to your user account/s and your personal data, at any time. You can delate your account on our mobile application, which will have the effect of automatically deleting your personal data from our system. Data which is no longer required will be deleted after 30 days or, at the latest, upon the expiration of the statutory retention period/deadline. Only such personal data required by us for the completion of outstanding tasks or the enforcement of our rights and also any data which we are obligated to retain in accordance with statutory regulations will not be subject to deletion.
The insights gained enable us to further optimize our services and better tailor them to your needs.
2.1 Mandatory Data.
ESB Products require you to provide some Personal Data in order to register and open a user account, such as:
Mandatory data are required in order to enable us to undertake the user agreement and any other agreement. Personal data entered in the contact form are collected for the purposes of enabling us to respond appropriately to any enquiries. We will retain your master personal data as long as it is necessary for our purposes. Thereafter, it will be deleted from our system.
Other data are optional during the Registration phase and you can edit them by adding or delating information in a second moment, among them:
In order to provide our services, after the Registration phase, we collect additional data (hereinafter referred to as “Additional User Data” and, together with the Registration Data, the “User Data”), such as:
The following Personal Data: first name, last name, profile picture, bike model, route or bike shared on ESB social network, as well as the list of followers and people you follow and your address (City, Country) may be visible to all users.
ESB users can also view information shared by other users concerning their routes and their e-bikes.
SITAEL deems all user information confidential and does not disclose such information without your express informed consent. SITAEL has implemented reasonable security policies and procedures designed to protect users’ information.
As a general rule, the user will decide which personal data may be accessible to third parties. The disclosure of personal data which may be accessible to third parties will be on a voluntary basis. In order to provide our services, SITAEL will make the data voluntarily disclosed available to those users with access privileges in the designated parts of our website and/or App.
Anonymous position-related data (GPS data) will be transmitted in the context of the tracking function to routing and navigation service provider with a view to extending and improving the cartographical materials.
SITAEL may only transmit a user’s personal data to third parties if and to the extent that: (1) this is necessary in order to enable us to implement the contract concluded with the user; (2) SITAEL is legally obligated to do so as response to lawful requests from federal, state, local, or foreign law and civil enforcement agencies, as required by law; or (3) this is necessary for the enforcement of our rights and claims. In the event that one of your personal data is to be spread for purposes other than those specified herein, SITAEL will ask your consent thereto in each individual case. SITAEL will not disseminate any personal date to third parties without such consent.
ESB website may contain links to third-party websites operated by providers that are not associated with us. After you click the link, SITAEL has no longer influence over the collection, storage, or processing of any personal data transmitted to third parties upon your clicking on the link (such as the IP address or URL of the page that contains the link), as SITAEL naturally does not have any control over the behavior of third parties.
Therefore, SITAEL cannot assume any responsibility for the processing of such personal data by third parties.
SITAEL implements all reasonable measures to prevent the unauthorized access by third parties to saved data.
SITAEL transfers information of Registered Users to vendors, service providers, and other partners such as Amazon Web Services (AWS), Fabric Answers for analytics (https://fabric.io/kits/android/answers) and Fabric Crashlytics for crash reporting (https://fabric.io/kits/android/crashlytics). In this way, SITAEL can provide and improve its services, such as technical infrastructure services or analysis concerning how the services perform or how they are used.
ESB Products use the so-called double opt-in procedure for the distribution of our newsletter (i.e. you will only receive a newsletter once you have confirmed, by clicking on a link contained in our e-mail alert, that the newsletter service can be activated). The user explicitly consents to the storage and use of non-personally identifiable information for purposes of newsletter marketing or on www.esb.bike by SITAEL or its partners. In case you do no longer want to receive newsletters or any other advertising materials from us, you may decline this service at any time. Written notification (e.g. via e-mail) of this revocation will be sufficient. Every newsletter will also contain a link enabling you to cancel your subscription.
SITAEL uses data received to help, operate, provide, improve, understand, customize, support, and market all services.
The ESB Products include and use social media plug-ins, such as (i) Facebook.com, which is operated by Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA, and (ii) Twitter, 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.
Users may recognize the respective plug-ins, e.g. by the respective logo or other respective characteristic typical for the respective social media-platform on our pages. You can find an overview of Facebook plug-ins here: https://developers.facebook.com/docs/plugins. You can find an overview of Twitter plug-ins here: https://dev.twitter.com/web/overview
If you do not want to have the respective social media platform associate your visits on our website with your social media accounts, you shall log out from your social media account.
The ESB Products use ‘cookies’ ─ small text files that are placed on the user’s computer and stored by the browser. They are used by SITAEL to provide a more user-friendly, effective and secure service. Cookies also enable SITAEL to identify a user’s browser and offer services to such user. Cookies do not contain any personally identifiable information.
You can prevent the installation of cookies by entering the corresponding settings in your browser software. However, please note that in this case you may not be able to use the complete range of functions of the ESB.bike platform to its full extent. If you want it, you can delete the cookies at any time. However, this can result in some functions no longer being available. For information on deleting the cookies, please consult your browser’s help function.
The ESB Products use Google Analytics, a web analysis service provided by Google Inc. (“Google”). Google Analytics uses ‘cookies’ (see the Section above). The information about your use of this website collected by the cookies, including your IP address, is generally transferred to a Google server in the USA where is stored. To the extent that the ESB Products have activated IP anonymization, Google first abbreviates your IP address within member states of the European Union or in other signatory states of the Agreement on the European Economic Area before this transmission occurs. Only in exceptional cases, will the full IP address be transferred to a Google server in the USA or Asia and abbreviated there. Google will use the information collected on behalf of the website operator in order to evaluate your use of the ESB Products, to compile reports about your activities within the ESB Products, and to provide further services connected with the use of the ESB Products and Internet use to the website operator. Google will under no circumstances associate the IP address transmitted by your browser within the operations of Google Analytics with other Google data.
However, we wish to point out that, if you do so, you may not be able to fully use all of the functions of this website.
You can prevent the data related to your use of the ESB platform, including your IP address, generated by the cookies from being recorded by Google and Google’s processing of this data by selecting corresponding settings of your browser’s software.
You are entitled at any time to obtain confirmation of the existence of personal data concerning them and be informed of their contents and origin, verify their accuracy, or else request that such data be supplemented, updated or rectified (Section 7 of Legislative Decree no. 196/2003).
You can also revoke the consent to the collection, processing, and use of your personal data for the future. In case of a termination of the Registered User’s account, all personal data provided by the user upon Registration shall be deleted. Any details made public by the user (e.g. routes, notes on other Registered Users’ walls) will be (i) anonymized within thirty days (i.e. it will be made clear that such details were provided by a deleted user), and (ii) deleted irrevocably, at the end of the period;
Upon the Registered User’s request to revoke their consent to the retention of all data and Information where knowledge thereof is no longer required for ESB’s performance of contractual obligations or compliance with statutory retention obligations, they shall be irrevocably deleted. This will not affect data which are required for billing and accounting purposes or which are subject to statutory retention obligations. You shall request such deletion by sending an e-mail to email@example.com, which shall include the e-mail address provided to the ESB platform during your registration, or via the website. SITAEL will comply with such requests within ten days and maintain a record of the deletion for one year after the deletion.
All requests should be emailed to firstname.lastname@example.org .
To obtain more information or to submit suggestions or complaints regarding the processing of your personal data, please contact us at email@example.com. If incorrect information has been stored despite our efforts to maintain correct and up-to-date data, we will correct this upon your request.
Thank you for being part of the ESB community.