Privacy policy

This notice describes how to use the Cotral S.p.A. portal (Hereinafter referred to as “Portal” or “Web site”) in relation to the processing of personal identifiable or identified data of users who use and interact with it as well as with regional web services accessible by electronic means. The information is provided under Article 13 of Legislative Decree No. 196/2003 (on the protection of personal data, hereinafter referred to as “Code”). The information only refers to the use of this website (and to specific Cotral App) identified by domain and not to other web sites, possibly consulted by the users through links found on pages of the website.

Purpose of data processing
The processing of personal performed on this portal is aimed to the distribution of public transport services in the Lazio region (rental services, school transport, caring for people with disabilities etc.). In particular, the portal aims to provide users with all the necessary information, including through newsletters, regarding the above-mentioned suburban public transport service.

Data controller
The data controller is Cotral SpA, based in Rome, Via Bernardino Alimena, 105 (00173), provided that the processing of data of individual users can be also performed by LAZIOcrea S.p.A. (In-house companies and IT operational tool of the Lazio Region) as external data processing manager.

Place of data processing
Data processing related to web services of this website is performed at the aforementioned office of the transport company and/or at the headquarters of LAZIOcrea S.p.A.. It is performed by technical personnel in charge of the processing, or other personnel in charge of occasional maintenance operations. No data will be disclosed except as expressly required by law. Personal data provided by users are only used only to perform the service requested and expressed in the purposes of the processing. Data will be disclosed to third parties only if necessary for that purpose.


Navigation data
When operating, computer systems and software procedures used to operate this website will acquire some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with specific identified users, but by their very nature, could allow the identification of users through processing and associations with data held by third parties. This category of data includes: IP addresses or domain names of computers used by users who connect to the Website, the URI (Uniform Resource Identifier) of requested resources, time of request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply by the server (successful, error, etc..) and other parameters regarding operating system and user IT environment. This data is only used to obtain anonymous statistical information about the portal and to check its correct functioning and should not be kept longer than necessary. The data could be used to ascertain any responsibility in case of alleged crimes against the website.

Data voluntarily provided by users
The optional, explicit and voluntary sending of e-mail to other e-mail addresses listed on this website entails the subsequent acquisition of the sender’s address, necessary in order to reply to requests, and any other personal data included in the message. Specific summary information will be progressively reported or displayed on the portal pages dedicated to particular on-demand services.

Optional data: apart from what specified for navigation data, the user is free to provide personal data contained in any request form to the Company. Failing to provide them might impede the fulfilment of the request.

Modalities of data processing: personal data are processed by automated tools no longer than necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent the loss of data, illegal or incorrect use and unauthorised access.

Cotral S.p.a., as data processor, provides users of website with some information about the utilised cookies pursuant to and for the purposes of articles. 13 and 122 of Legislative Decree No. 196/2003 (“Code regarding the protection of personal data” – hereinafter referred to as “Code”) and pursuant to the provisions of the General privacy Guarantor “Identification of the simplified procedures for the information and the acquisition of consent for the use of cookies “May 8th, 2014 (Doc. web 3,118,884).

A “cookie” is a small text file created on the user’s computer as soon as he accesses a given website, with the purpose of storing and delivering information. Cookies are sent by a web server (which is the computer where the visited web site is running) to the user’s browser (e.g. Internet Explorer, Mozilla Firefox, Google Chrome and so on) and stored on his device; they are then sent back to the website at the time of subsequent visits. When surfing the web, the user might even receive on his device cookies of different sites (the so-called “third-party cookies”) set directly from operators of these web sites and used for their purposes and under their conditions.

Types of cookies used:
The “www” site uses cookies (browsing and session) and contains some services provided by third parties that generate cookie stored on users’ PC. Among them, we find:

  • GOOGLE ANALYTICS is used to monitor access to the portal and for the how to use rules. To check the features of this service and details regarding privacy, please refer to the information on Google Analytics privacy
  • AddThis is used for the sharing of portal contents on social-network. To check the technical features of this service and details regarding privacy, please refer to the information on AddThis privacy.
  • Some pages of the portal may contain videos uploaded on YOUTUBE platform. To check the technical features of this service and details regarding privacy, please refer to the information on YouTube privacy.

Data subjects’ rights
Those whose personal data refer to, have the right at any time to obtain confirmation of the existence of such data and to know the relative content and origin, as well as the right to verify its accuracy or request its integration or update, or correction (art. 7 of Legislative Decree. No. 196/2003).

Pursuant to this Article, users have the right to request cancellation, anonymization or blocking of data unlawfully processed, and to oppose their treatment in any case for legitimate reasons.

To claim the aforementioned rights, interested parties can contact the data controller to the following address:

  • by post a Cotral Spa – based in Rome, Via Bernardino Alimena, 105 – 00173
  • by e-mail, to:
  • by e-mail, to:;
  • to external managers for the processing of personal data, LAZIOcrea S.p.A. President .C.E.O. and pro-tempore Legal Representative Dott. Massimiliano Raffa – to the following address:
  • by fax to 06-51563604;
  • by post to LAZIOcrea S.p.A. – Ufficio Organo Amministrativo – via del Serafico, 107 00142 Roma