This privacy notice is provided pursuant to Article 13 of Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR) – to users interacting with virtual assistants located at welcome points.
Type and Source of Data
The data processed include:
- Images (video and audio);
- Any data provided during the conversation with the virtual assistant (e.g., answers, preferences, choices made during interactive games).
Purpose and Legal Basis of Processing
The personal data of the data subject are processed to provide virtual assistance and allow access to games and interactive content.
Legal basis: consent (Art. 6(1)(a) GDPR).
Nature of Data Provision
Providing personal data is voluntary and optional. Failure to provide data will only result in the inability to receive virtual assistance and/or participate in interactive games.
Data Retention
Conversations with the virtual assistant occur in real-time, like a live interaction. Therefore, audio/video images and interactions with the virtual assistant will not be stored.
Data Recipients
Personal data will not be disclosed or made accessible to unauthorized parties. They will be communicated to the interactive system provider, appointed as Data Processor pursuant to Article 28 GDPR.
Data Transfers
The Data Controller does not transfer personal data to third countries or international organizations.
Data Subject Rights
The data subject may exercise the rights provided by Articles 15 to 22 of Regulation (EU) 2016/679, insofar as compatible with the processing described, by contacting the Data Controller at the addresses indicated.
Furthermore, the data subject has the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali).
Automated Decision-Making Processes
The processed data will be subject to automated decision-making, as the responses given during the conversation will be automatically processed by the artificial intelligence system embedded within the interactive kiosk. This processing does not entail significant consequences as the images and interactions are not stored.