Privacy Policy

Naples International Airport fully complies with all the obligations pursuant to Law 196/2003 regarding the processing of personal data.
The processing of personal data, including that related to video-surveillance activities, is conducted in full respect of European and Italian regulations in such a manner that the protection of personal identity and confidentiality are fully integrated into the corporate quality management system.
In keeping with the provisions of the regulations currently in force and based upon the type of data processed, Gesac has proceeded with attributing responsibility for data processing to a group of selected personnel. A listing of personnel responsible for data processing is included in the corporate "Security Programming Document".

Those responsible for data processing guarantee compliance with privacy regulations and ensure the application of the minimum corporate security measures.
In compliance with section 13 of Law 196/2003, the following notices in relation to the different types of data to be processed have been made available, specifically:
  • Video Surveillance Activity Notice
    (Notice concerning processing of personal data pursuant to Act of Law N°196/2003)
    This is to advise that in order to safeguard public order and ensure that all services are provided in the best possible manner, many of the areas on the airport premises are monitored by means of a video surveillance system.
    The filmed footage, in digital and magnetic medium, will be completely destroyed within the timeframe indicated in the applicable regulations. This material is stored in a safe place accessible only to personnel appointed for this purpose.
    Gesac undertakes to use these recordings in full compliance with Italian regulations governing the processing of personal data.
    For further information or if you require any explanations concerning your rights, please consult Gesac's privacy policy as set forth at our web site, www.gesac.it
    Maurizio dello Russo, Attorney
    Data Processing Department
  • Corporate Complaint Management Activity Notice
    (pursuant to Article 13 of Act of Law N°196/2003)
    GESAC SpA, by virtue of its role as holder of Naples Capodichino Airport Total Management Certification and under the auspices of Customer Service, monitors the quality levels of the services offered by the various airlines operating within the Naples airport as well as those offered by other sub-concessionaires.
    Personal data provided by customers in reporting a disservice(s) on the specific complaint forms will be IT processed, and, subsequent to a written notice by Gesac, will be transferred to the airline/sub-concessionaire only if the necessary authorisation has been given.
    The processing of said is conducted exclusively by corporate employees specifically charged with this task who have been duly informed as to the obligations of confidentiality and security provided for in Law 196/2003. In the management of said data, Gesac also reserves the right to utilise third party firms or external consultants.
    Any personal data collected by the corporate complaints managements will only be used for the purposes related to this activity.
    In reference to the processing of your personal data, you have the opportunity to exercise all of the rights provided for in Section 7 of Law 196 dated 30 June 2003, which is referred to in its entirety, specifically in observation of:
    The right to be informed that personal data is being processed;
    The right to have the data processing organisation block, cancel, update, rectify or modify the data. For further information or clarifications regarding the Gesac privacy policy, please contact:
    Maurizio dello Russo (attorney) Data processing representative
  • Notice of Control Activities for Access to areas covered by the Gesac SpA concession
    (pursuant to Article 13 of Act of Law N°196/2003)
    In order to allow you access to the areas for which Gesac is responsible, in compliance with internal security regulations, you will be asked to provide some personal information and subsequently be given a badge that must always be worn in a clearly visible manner. It will enable you to access corporate areas subjected to access control and registration. This badge is strictly personal and must be handed in on leaving the areas concerned.
    We must also inform you that for reasons of security many of the areas for which Gesac is responsible are monitored by a video surveillance system. The filmed footage, recorded in magnetic/digital medium, will be completely destroyed within the timeframe indicated in the applicable regulations. This material is stored in a safe place accessible only to personnel appointed for this purpose.
    Your data, whether in IT form and/or printed, will be processed by personnel of Gesac or of other duly authorized, contracted firms. Consistently with the aims cited above, your data will not be transferred to third parties under any circumstances (barring requests on the part of Judicial Authorities), and will be used solely for the purposes of security referred to above.
    For any further information or if you require any explanations concerning Gesac's privacy policy, please consult the document provided at our web site, www.gesac.it. To exercise your rights concerning the processing of your personal data, on the other hand, you should contact the person in charge of this activity indicated below.
    Maurizio dello Russo, Attorney
    Data Processing Department
  • Corporate Administrative Activities Notice (pursuant to Article 13 of Act of Law N°196/2003)
    GESAC SpA processes administrative data related to the company and individuals in fulfilment of legal obligations or pursuant to contractual execution.
    This data is IT processed: the processing is conducted exclusively by corporate employees specifically charged with this task who have been duly informed as to the obligations of confidentiality and security provided for in Law 196/2003. In the management of said data, Gesac also reserves the right to utilise third party firms or external consultants.
    In reference to the processing of your personal data, you have the opportunity to exercise all of the rights provided for in Section 7 of Law 196 dated 30 June 2003, which is referred to in its entirety, specifically in observation of:
    The right to be informed that personal data is being processed;
    The right to have the data processing organisation block, cancel, update, rectify or modify the data.
    For further information or clarifications regarding the Gesac privacy policy, please contact
    Maurizio dello Russo (attorney)
    Data processing representative
  • Corporate Management and Resource Development Notice
    (pursuant to Article 13 of Act of Law N°196/2003)
    GESAC SpA conducts personnel recruitment and selection activities aimed exclusively at satisfying the company's internal personnel needs. The personal data provided on your curriculum or in completing the Gesac website form will only be used for the above cited activity.
    For purposes related to personnel selection activities, Gesac reserves the right to transfer your data to subsidiaries, affiliated companies or other companies operating within the Capodichino airport complex.
    This data is IT processed: the processing is conducted exclusively by corporate employees specifically charged with this task who have been duly informed as to the obligations of confidentiality and security provided for in Law 196/2003. In the management of said data for personnel selection activities, Gesac also reserves the right to utilise third party firms or external consultants.
    Your data will be stored for two years and if, during this period, you would like to update or modify the data you have provided, you may exercise your right to do so by sending a new c.v. or completing a new form on the Gesac website.
    In conclusion, we would like to remind you, that in reference to the processing of your personal data, you have the opportunity to exercise all of the rights provided for in Section 7 of Law 196 dated 30 June 2003, which is referred to in its entirety, specifically in observation of:
    • The right to be informed that personal data is being processed;
    • The right to have the data processing organisation block, cancel, update, rectify or modify the data.
    For further information or clarifications regarding the Gesac privacy policy, please contact Maurizio dello Russo (attorney) Data processing representative.
    A Data processing representative
    Avv. Maurizio dello Russo
  • Corporate Personnel Recruitment and Selection Activity Notice (pursuant to Article 13 of Act of Law N°196/2003)
    GESAC SpA conducts personnel recruitment and selection activities aimed exclusively at satisfying the company's internal personnel needs. The personal data provided on your curriculum or in completing the Gesac website form will only be used for the above cited activity.
    For purposes related to personnel selection activities, Gesac reserves the right to transfer your data to subsidiaries, affiliated companies or other companies operating within the Capodichino airport complex.
    This data is IT processed: the processing is conducted exclusively by corporate employees specifically charged with this task who have been duly informed as to the obligations of confidentiality and security provided for in Law 196/2003. In the management of said data for personnel selection activities, Gesac also reserves the right to utilise third party firms or external consultants.
    Your data will be stored for two years and if, during this period, you would like to update or modify the data you have provided, you may exercise your right to do so by sending a new c.v. or completing a new form on the Gesac website.
    In conclusion, we would like to remind you, that in reference to the processing of your personal data, you have the opportunity to exercise all of the rights provided for in Section 7 of Law 196 dated 30 June 2003, which is referred to in its entirety, specifically in observation of:
    • The right to be informed that personal data is being processed;
    • The right to have the data processing organisation block, cancel, update, rectify or modify the data.
    For further information or clarifications regarding the Gesac privacy policy, please contact Maurizio dello Russo (attorney) Data processing representative.
    A Data processing representative
    Avv. Maurizio dello Russo
  • Corporate activities related to the role of airport management company (in accordance with article 13 of Law 196/2003)
    Gesac Spa gathers and processes data regarding companies and persons as related to all the public and private parties who, for various reasons, operate within the airport complex exclusively for purposes associated with its role in total management of the airport.
    The processing of these data is computer based and conducted exclusively by specifically trained company personnel who have been duly informed of the obligations of confidentiality and security as provided for in Law 196/2003. In managing said data, Gesac reserves the right to also utilise the services of external companies and/or consultants.
    In relation to the above cited personal data, Gesac guarantees the free exercise of all rights provided for in Law 196/2003 dated 30 June 2003, which is intended as referred to in its entirety, specifically
    To know of the existence of data processing
    To obtain, at the expense of the data processing owner, the erasure, up-dating, amendment and integration of personal data.
    For any additional information or clarification regarding Gesac's privacy policy, please contact the undersigned person responsible for data processing.
    Data processing representative
    Maurizio dello Russo (Attorney)
  • Activities related to Management of the Purchasing Portal and Supplier register
    ACTIVITIES RELATED TO MANAGEMENT OF THE PURCHASING PORTAL AND SUPPLIERS REGISTER
    (circular regarding the processing of personal data pursuant to Legislative Decree n.196/2003)
    In compliance with the directive stipulated in article 13 of Legislative Decree 196 of 2003 regarding the protection of personal data, GE.S.A.C. S.p.A. hereby informs you that:
    1) the required information provided for registration at the Purchasing Portal and in the Suppliers Register as well as in subsequent participation in electronic tenders and invitations for bids shall be subject to processing on the part of GE.S.AC. S.p.A. for the exclusive purpose of supplier selection or with the objective of executing tenders, and invitations for bids and/or the stipulation of contracts/orders. The amount of time these data shall be kept on the premises is in compliance with the time limits set forth in civil and fiscal regulations in force;
    2) processing shall be prevalently conducted by electronic means or, at any rate, by automated devices and may consist in any operation or set of operations indicated in article 4, paragraph 1, letter A of the above-cited Legislative Decree by designated GE.S.A.C. personnel pursuant to regulations in force.
    3) In relation to the processing of the above-cited personal data, Gesac ensures data subjects the possibility to exercise all rights as provided for in article 7 of Law n. 196 dated 30 June, 2003, which is understood to be referred to in its entirety, and in particular:
    • the right to know that his or her data are in the possession of, and being processed by a third party;
    • the right to exact data, that is, to obtain up-dating, rectification and integration of the processed data;
    • the right to oblivion, that is to obtain the anonymization, or blocking of data that have been processed unlawfully;
    • the right to object to processing, that is to protect themselves against data processing for illegitimate motives;
    • the right to object data us, to oppose the use of data for purposes of evaluation of the data subject.
    4) For any information or requests related to the exercise of your rights, please contact the Corporate Privacy Office by phone, by e-mail (ufficio_privacy@gesac.it) or by post.
    On of the persons in charge of data processing
    Maurizio dello Russo (Attorney at law)
This guarantees that all Naples International Airport customers/passengers may fully exercise all the rights provided for in articles 7, 8 and 9 of Law196/2003:
  • the right to know that one's own data is being held and processed by a third party;
  • the right to data integrity, that is to be able to update, rectify and integrate the processed data;
  • the right to erasure, to cancel, transform or block any processed data in violation of the law;
  • the right to deny consent to processing, that is to protect oneself against the processing of data for illegitimate purposes;
  • the right to contest the use of data, that is to contest the use of data in terms of evaluations regarding your person.
For any information - including the updated list of personnel responsible for data processing - or requests regarding the exercise of your rights, you may contact the Gesac Privacy Office via telephone at 081.7896.311, email at ufficio_privacy@gesac.it or by mail at: Naples International Airport, Naples – Gesac Head Quarter – 80144 Naples

Contacts:
e-mail: ufficio_privacy@gesac.it
tel. 081/7896.311