Bandi di Gara

Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua.

CAREERS   |   CONTACTS   |   ITALIANO   |   FRANÇAIS

Image Alt

Privacy

In compliance with the obligations set forth by EU legislation (European Data Protection Regulation No. 679/2016) and national legislation (Legislative Decree No. 196 of 30 June 2003, Personal Data Protection Code including subsequent amendments)

 

Dear user,

We inform you that, pursuant to Articles 13 and 14 of EU Regulation 679/2016 on personal data protection (the “GDPR”), the information and data collected by and/or communicated to Società Autostrada Ligure Toscana p.A. (hereinafter also referred to as the “Company” and/or the “Data Controller”) will be processed in accordance with the aforementioned GDPR and Legislative Decree 196/2003 (Privacy Code), as most recently amended.

This Privacy Statement is intended for all users who interact with the Company, whether directly or through its website and/or the Complaints Platform and/or the Platform for refunds relating to roadworks and/or traffic jams (hereinafter the “Refund Platform”) and concerns all data processed as independent Data Controller. For information regarding the data processed by the Company in its capacity as Joint Holder of the Refund Platform, please refer to the specific Privacy Statement published on the aforementioned Refund Platform.

 

1. Types of data collected

The Company may collect certain personal data including (but not limited to) name, surname, date of birth, address, gender, nationality, e-mail address, motorway journey data, and other data (hereinafter referred to as “Personal Data”) that may be necessary for the management of the motorway service and other services generally provided through the Company’s website and/or Complaints Platform and/or Refund Platform (hereinafter referred to as the “Services”). This may also include photographic images of vehicle number plates (captured by cameras located at toll stations), relevant for the toll payment due and/or in cases of anomalies detected in toll station access lanes.

Please note that the images taken by the cameras (if any) do not permit the identification of the persons on board the vehicles in any way.

Please be advised that there are cameras (hereinafter referred to as the “Cameras”) installed along the motorway stretch we manage. These cameras do not allow for the identification of the vehicles’ licence plates or occupants, except in those cases where we need to handle an accident or investigate on a behaviour connected to an administrative or criminal offence or irregularity. The CCTV systems are useful to prevent and detect any unlawful and/or irregular behaviour, manage traffic flow and provide relevant information to motorway users, and oversee motorway operations.

Moreover, the Company wishes to inform you that, in order to provide quality Services and carry out all relevant assessments in case of complaints, and/or provide traffic and toll refund process information, in full compliance with the Transport Regulation Authority’s (ART) Resolution 132/2024, as amended by the ART Resolution 211/2025 (hereinafter referred to jointly as the “ART Resolutions”), and this Privacy Policy, it will record all phone calls to the users call centre.

The company also provides users a live chat with a physical operator to address their queries. This chat and the personal data it contains will be handled in full compliance with the GDPR and the Privacy Code. Any data provided through such recordings and/or in the live chat falls into the Personal Data category, as specified above.

Personal Data may be submitted voluntarily by the user while browsing the Company’s website and/or the Complaints Platform and/or the Refund Platform, or may also be collected during use of the Services if conditions exist that necessitate their collection (e.g., correct toll allocation, complaints, accidents, etc.).

The Company’s cookie and browsing data policies can be found at the following link: https://www.salt.it/en/cookies/.

The user is responsible for the accuracy and truthfulness of Personal Data, including that of third parties, provided through the website and/or the Complaints Platform and/or the Refund Platform or other means made available by the Company, relieving the Data Controller from any liability arising from inaccuracies in the data provided.

 

2. Purpose of processing

The processing of Personal Data collected – including all recordings of user phone calls to the call centre provided by the Company and the images captured by cameras – is intended for the proper management of the Services, with specific reference to the obligations arising from the user’s use of the Services and related to the functions carried out by the Company in an institutional capacity. Such purposes include:

  • Calculation and toll allocation, including the acquisition of data to manage the relationships with accredited electronic toll service providers;
  • Proper handling of toll refund claims, in accordance with the ART Resolutions, also submitted through the Refund Platform;
  • Proper handling of any reports and/or complaints and/or queries from users submitted through the Complaints Platform;
  • Communications with users concerning toll transactions and related requests (payment and recovery of tolls charged by the Company, toll refunds), managed by the Company as Concessionaire of the A15 Parma – La Spezia Stretch, with extension up to Sissa Trecasali, and exclusion of the La Spezia tollbooth, also through the users’ call centre, the Claims Platform and/or the Refunds Platform;
  • Quality assurance of the services provided to users, as referred to, inter alia, in the ART Resolutions;
  • Activities for the prevention and detection of infringements relating to the obligation to pay tolls pursuant to Article 176 of Italian Legislative Decree 285/1992, as amended;
  • User communications, including those forwarded through the relevant call centre, concerning safety, traffic, and use of the infrastructure managed by the Company;
  • Compliance with the administrative, tax, and legal obligations generally applicable to the Company;
  • Proper fulfilment of the obligations arising from the Services provided to the user;
  • Proper operation of manned live chat that provides information concerning the Service to support users;
  • Measures to ensure the proper operation of the website and/or the Complaints Platform and/or the Refund Platform.

 

3. Legal bases for processing

The legal bases for processing are:

  • Legal obligation: the need to follow up/execute legal obligations the Company is subject to as a motorway company (technical-administrative management and toll collection; requests from competent authorities; user refund requests/complaints; legal publications); pursuant to Article 6(1)(c) of the GDPR Regulation;
  • Reasons of public interest: need to properly implement the motorway service, prevention of motorway toll evasion, pursuant to Article 6(1)(e) of the GDPR Regulation;
  • Legitimate interest: the need to pursue the legitimate interest of the Company of collecting motorway tolls and using the motorway infrastructure it manages properly, pursuant to Article 6(1)(f) of the GDPR;
  • Data Subject’s consent: expressly provided pursuant to Article 6(1)(b) of the GDPR, and concerning the recording of phone calls to the call centre made available by the Company, for the purposes specified above.

 

4. Processing methods

Personal Data may be processed in a hard-copy, computerised and digital format and entered in the relevant databases that may be accessed and therefore become known by data processing operators, pursuant to Article 29/GDPR, who may carry out consultation, use, processing, comparison and any other appropriate operation, including automated operations, in compliance with the provisions of the law necessary to guarantee, among other things, the confidentiality and security of the data as well as their accuracy, updating and relevance to the stated purposes, in accordance with the applicable data protection legislation (including the GDPR Regulation and Legislative Decree 196/2003).

In accordance with the provisions of Regulation 2024/1689 (AI Act) and Law 132/2025 on artificial intelligence, it should be noted that the Refund Platform also utilises artificial intelligence systems for certain functions, designed to better verify the consistency of the data entered and declared by the user against the documentation provided.
Artificial intelligence systems are used in full compliance with the applicable regulations specified above and with the GDPR.

 

5. Nature of data provision

The provision of data is:

  1. a) Mandatory for achieving the purposes related to the obligations set forth by laws, regulations, or EU regulations, including proper toll collection and refund management.
  2. b) Optional, although sometimes necessary for the correct establishment and/or continuation of the relationship with our Company, and for the correct navigation of the site.

Any refusal to provide the data or incomplete data may prevent the Data Controller from carrying out its institutional duties and fully delivering the services, as well as from complying with legal obligations.

 

6. Scope of data communication

The Data Subject’s personal data may be disclosed, where necessary for the provision of Services, with the designated and authorised personnel of our Company, with entities required to process such data on behalf of the Company for the same purposes stated above, who are appointed as “Data Processors” pursuant to Article 28 of the GDPR Regulation, with interconnected concessionary companies, with providers of the European or national electronic toll service in relation to the data of their respective customers, with third party companies, including those providing debt collection services on behalf of the Company and/or access control and/or surveillance services, and with companies providing IT and plant engineering services in relation to the activities carried out, with whom the Company has entered into special agreements on data processing, as well as to comply with requests from competent Authorities and for the protection of the Company.

The full list of entities designated as Data Processors pursuant to Article 28 of the GDPR can be requested from the Company by sending a formal request to the following email address: privacy@salt.it.

The aforementioned areas of communication do not require your authorisation as Data Subject, as they are functional to the provision of the Services, to defend a right in court or to pursue a legitimate interest of the Data Controller. Where necessary, in the cases referred to above, the Company shall request your prior consent, as Data Subject.

All the aforementioned Personal Data shall not be disclosed or communicated to unauthorised third parties.

Personal Data shall be managed and stored on servers located in Italy or within the European Union and will not be transferred outside the European Union.

 

7. Data retention period

The Personal Data collected, also taking into account any choices made by the data subjects regarding cancellation or revocation during the course of processing, will be processed for a period corresponding to the needs for which it was collected, in compliance with the applicable legal or regulatory provisions or for a period deemed appropriate to ensure the right of defence in the event of litigation or for tax obligations, in compliance with the principle of data minimisation set out in Article 5, paragraph 1, letter c) of the GDPR.

 

8. Data Controller – DPO

The Data Controller is SALT Società Autostrada Ligure Toscana p.a., with registered office at Via Don Enrico Tazzoli 9, 55041 Lido di Camaiore (LU), which can be contacted at: privacy@salt.it

The Data Controller has also appointed a Data Protection Officer (“DPO”), who can be contacted at the following email address: dpo@salt.it

The Data Processors responsible for debt collection activities on behalf of the Company are NIVI S.p.A. and lawyer Mr. Alessandro Tedesco.

 

9. Rights of the Data Subject

As Data Subject, you may exercise your rights at any time as outlined by Articles 15 et seq. of the GDPR by reaching out to the contact details provided in this privacy policy.

Specifically, the Data Subject has the right to know which personal data is being used, where it came from, to check its accuracy or to request that it be supplemented or updated, or corrected or restricted. You also have the right to request the deletion, transformation into anonymous form or blocking of data processed in breach of the law, as well as to object in any case, for legitimate reasons, to its processing and to modify or revoke previously given consents, without prejudice to the lawfulness of the processing based on the consent given before the revocation.

Furthermore, the Company would like to inform you that, as Data Subject, you have the right to object to the processing of your data at any time, in accordance with Article 21 of the GDPR, by sending an email to privacy@salt.it.

Furthermore, you are entitled to lodge a complaint with the Data Protection Authority, whose contact details you will find at the following link www.garanteprivacy.it/

 

Società Autostrada Ligure Toscana p.A.

Last updated: 28 May 2026

Last update: 01/07/2026
SITEMAP