1. Data Controller
The Data Controller is NGV Natural Gas Vehicles - System Italia, registered office at Via Giovanni Pascoli 3, 20129 Milan (MI), Italy, VAT no. IT11761620159, lead promoter of the Observatory for Technological Neutrality in Transport.
For any matter concerning the processing of your data or the exercise of your rights, you can write to privacy@ngvitaly.com.
2. What data we process
Navigation data
The IT systems and software procedures that operate this website acquire, during normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (for example IP addresses, browser and device type, date and time of the request). This data is processed by our hosting and CDN provider only for the time strictly necessary to deliver the service and ensure its security.
Data provided voluntarily
If you complete one of the membership or contact forms on the site, we process the data you provide (for example name, surname, email, organisation, phone and the content of your message) in order to handle your request or your support for the manifesto.
3. Purposes and legal bases
- Delivery and security of the site, including protection of the forms against spam and automated submissions via JotCAPTCHA — legal basis: legitimate interest of the Controller (Art. 6.1.f GDPR) in providing and protecting the service.
- Managing contact and information requests — legal basis: performance of pre-contractual measures or fulfilment of a specific request by the data subject (Art. 6.1.b GDPR).
- Managing membership of the "Save the Automotive" manifesto — legal basis: the data subject's explicit consent (Art. 6.1.a GDPR), given by ticking the relevant box on the form.
- Publication of signatories on the website — publication of the organisation's name or the supporter's name in the public list of the manifesto's signatories on the website — legal basis: the data subject's explicit and optional consent (Art. 6.1.a GDPR).
- Sending updates on the initiative by email — legal basis: the data subject's optional consent (Art. 6.1.a GDPR), given via the relevant box on the form and withdrawable at any time.
4. Recipients and processors
Your data is not sold to third parties. Data relating to membership of the manifesto (name / company name) will be made public on the website only if you have given specific consent. To deliver the service we rely on providers acting as Data Processors pursuant to Art. 28 GDPR:
- Cloudflare, Inc. — hosting, CDN and site security.
- JotForm Inc. — management of the membership and contact forms and their anti-spam protection (JotCAPTCHA), acting as Data Processor pursuant to Art. 28 GDPR; the service is delivered via its European instance (
eu.jotform.com, EU datacenter).
The providers indicated are based in, or also process data in, the United States. The transfer of data takes place lawfully on the basis of the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) for certified entities and, additionally, through the signing of Standard Contractual Clauses approved by the European Commission, together with technical security measures ensuring the protection of data to standards equivalent to those of the EU.
5. Retention periods
Navigation data is retained for the time technically required for security and diagnostics (as a rule, no longer than 30 days).
Data collected through the forms is retained according to the following criteria:
- Contact form data: for the time strictly necessary to handle the request and in any case for a maximum of 12 months from the closure of the matter.
- Manifesto membership data (supporters/organisations): for the entire duration of the Observatory's initiative and until any decision to discontinue the Observatory, without prejudice to the data subject's right to withdraw consent and request removal at any time.
6. Your rights
At any time you may exercise the rights granted by Articles 15-22 GDPR: access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent (the latter without affecting the lawfulness of processing based on consent given before withdrawal). To exercise them, write to privacy@ngvitaly.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
7. Cookies
This site uses technical cookies only. For details see the Cookie Policy.
8. Changes to this notice
The Controller reserves the right to update this notice to reflect regulatory changes or changes in the operation of the site. The date at the top indicates the latest revision.