CAREERS   |   CONTACTS   |   ITALIANO   |   FRANÇAIS

SAV Autostrada A4, concessionaria Gruppo ASTM, Privacy

Privacy

Privacy Policy for Motorway Users

In compliance with the obligations set forth by EU legislation (European Data Protection Regulation No. 679/2016) and national legislation (Legislative Decree No. 196 of 30 June 2003, Personal Data Protection Code including subsequent amendments)

Dear user,

We inform you that, pursuant to Articles 13 and 14 of EU Regulation 679/2016 on personal data protection (the “GDPR”), the information and data collected by and/or communicated to Società Autostrade Valdostane S.p.A. (hereinafter also referred to as the “Company” and/or the “Data Controller”) will be processed in accordance with the aforementioned GDPR and Legislative Decree 196/2003 (Privacy Code), as most recently amended.

This notice is intended for all users who interact with the Company, including via the corporate website and/or the Complaints Platform and/or the Platform for obtaining refunds due to roadworks and/or traffic congestion (the “Refunds Platform”), in relation to data processing carried out in its capacity as an independent Data Controller. For information regarding the data processed by the Company in its capacity as Joint Controller of the Refund Platform, refer to the privacy notice published on the Refunds Platform.

 

1. Types of data collected

The Company may collect certain personal data, including (but not limited to) name, surname, date of birth, address, gender, nationality, e-mail address and other data (“Personal Data”) as necessary for the management of the motorway service and other services generally provided through the Company’s website (the “Service” or the “Services”). This may also include photographic images of vehicle number plates (captured by toll plaza cameras), relevant for the toll payment due, and/or in cases of anomalies detected in the toll plaza lanes.

Please note that the images taken by the cameras (if any) do not permit the identification of the persons on board the vehicles in any way.

The Company also wishes to inform you that, in order to provide quality Services and carry out all relevant checks in case of complaints, (in full compliance with Resolution 132/2024 of the Italian Transport Regulatory Authority (ART) as amended by ART Resolution 211/2025, collectively the “ART Resolutions”, and with current laws on data protection), all phone calls to the users’ call centre will be recorded.

The company also provides users a live chat with a physical operator to address their queries. This chat and the personal data it contains will be handled in full compliance with the GDPR and the Privacy Code. Any data provided through such recordings and/or in the live chat falls into the Personal Data category, as specified above.

Personal Data may be submitted voluntarily by the user while browsing the Company’s website, the Complaints Platform and/or the Refunds Platform. They may also be collected during use of the Service, if necessary (for example where required to calculate the correct allocation of toll charges or in the event of complaints or accidents).

The Company’s cookie policy can be found at the following link: https://www.sav-a5.it/en/cookies/.

The user is responsible for the accuracy and truthfulness of the Personal Data, including data relating to third parties, provided through the website by or other means made available by the Company, and releases the Data Controller from any liability arising from inaccuracies in the data provided.

 

2. Purpose of processing

The processing of Personal Data collected – including all recordings of user phone calls to the call centre provided by the Company – is intended for the proper management of the Services, with specific reference to the obligations arising from the user’s use of the Services and related to the functions carried out by the Company in an institutional capacity. Such purposes include:

  • calculation and toll allocation, including the acquisition of data to manage the relationships with accredited electronic toll service providers;
  • the proper handling of toll refund claims in accordance with the ART Resolutions, including via the Refunds Platform;
  • the proper handling of any reports and/or complaints or queries from users made via the Complaints Platform;
  • communications with users concerning toll transactions and related requests (payment and recovery of tolls charged by the Company, toll refunds), managed by the Company as Concessionaire of the A5 Quincinetto – Aosta Ovest section of motorway and the A5-SS27 Gran San Bernardo link road, also via the users’ call centre, the Claims Platform and/or the Refunds Platform;
  • the quality assurance of the services provided to users, as referred to inter alia in the ART Resolutions;
  • activities for the prevention and detection of infringements relating to the obligation to pay tolls pursuant to Article 176 of Italian Legislative Decree 285/1992, as amended;
  • user communications, including those forwarded through the relevant call centre, concerning safety, traffic, and use of the infrastructure managed by the Company;
  • compliance with the administrative, tax, and legal obligations generally applicable to the Company;
  • the proper fulfilment of the obligations arising from the Services provided to the user;
  • the proper operation of manned live chat that provides information concerning the Service to support users;
  • measures to ensure the proper functioning of the website and/or of the Complaints Platform and/or the Refunds Platform.

 

3. Legal bases for processing

The legal bases for processing are:

  • Legal obligation: the need to follow up or execute the legal obligations of a motorway concessionaire (technical-administrative management and toll collection; requests from competent authorities; requests for refunds/complaints/reports/clarifications made by users; legal publications) under art. 6(1)(c) of the GDPR;
  • Reasons of public interest: need to properly implement the motorway service, prevention of motorway toll evasion, pursuant to Article 6(1)(e) of the GDPR Regulation;
  • Legitimate interest: the need to pursue the legitimate interest of the Company of collecting motorway tolls and using the motorway infrastructure it manages properly, pursuant to Article 6(1)(f) of the GDPR;
  • Data Subject’s consent: expressly provided pursuant to Article 6(1)(b) of the GDPR, and concerning the recording of phone calls to the call centre made available by the Company, for the purposes specified above.

 

4. Processing methods

The Personal Data may be processed in printed, computerised or digital format and stored in the relevant databases, which may be accessed by and therefore become known to the operators responsible for data processing operations under art. 29 GDPR. These operators may carry out operations such as consultation, use, processing, comparison and any other appropriate action, including automated operations, in compliance with the legal provisions necessary to guarantee, among other things, the confidentiality and security of the data as well as their accuracy, updating and relevance to the stated purposes, in accordance with the applicable data protection legislation (including the GDPR and Italian Legislative Decree 196/2003).

In accordance with Regulation 2024/1689 (AI Act) and Law No. 132/2025 on artificial intelligence, please be advised that the Complaints Platform also utilises AI systems for certain functions, designed to check the consistency of the data entered and declared by the user against the documentation provided.
AI systems are used in full compliance with the applicable legislation referred to above, and with the GDPR.

 

5. Nature of data provision

Provision of data is:

  • a) Mandatory in order to achieve the purposes related to the obligations set forth by laws, regulations or EU legislation, including the proper collection of the toll and the management of refunds;
  • b) Optional, although sometimes necessary for the correct establishment and/or continuation of the relationship with our Company, and for the correct navigation of the site.

Any refusal to provide the data or incomplete data may prevent the Data Controller from carrying out its institutional duties and fully delivering the services, as well as from complying with legal obligations.

 

6. Scope of data communication

The Data Subject’s personal data may be disclosed, where necessary for the provision of Services, with the designated and authorised personnel of our Company, with entities required to process such data on behalf of the Company for the same purposes stated above, who are appointed as “Data Processors” pursuant to Article 28 of the GDPR Regulation, with interconnected concessionary companies, with providers of the European or national electronic toll service in relation to the data of their respective customers, with third party companies, including those providing debt collection services on behalf of the Company and/or access control and/or surveillance services, and with companies providing IT and plant engineering services in relation to the activities carried out, with whom the Company has entered into special agreements on data processing, as well as to comply with requests from competent Authorities and for the protection of the Company.

The full list of entities designated as Data Processors pursuant to Article 28 of the GDPR can be requested from the Company by sending a formal request to the following email address: ufficio.privacy@a5sav.it.

These aspects of communication do not require your authorisation, as they are functional to the provision of the Services, the defence of legal rights in court, or to pursue a legitimate interest of the Data Controller. Where necessary, in the cases mentioned above, the Company will obtain the prior consent of the data subject.

All the aforementioned Personal Data shall not be disclosed or communicated to unauthorised third parties.

Personal Data shall be managed and stored on servers located in Italy or within the European Union and will not be transferred outside the European Union.

 

7. Data retention period

The Personal Data collected, also taking into account any choices made by the data subjects regarding cancellation or revocation during the course of processing, will be processed for a period corresponding to the needs for which it was collected, in compliance with the applicable legal or regulatory provisions or for a period deemed appropriate to ensure the right of defence in the event of litigation or for tax obligations, in compliance with the principle of data minimisation set out in Article 5, paragraph 1, letter c) of the GDPR Regulation.

 

8. Data Controller – DPO

The Data Controller is Società Autostrade Valdostane – SAV S.p.A., with registered office at Strada Barat 13, 11024 Châtillon (AO), tel. 0166 560411, e-mail: sav@a5sav.it.

The Data Controller has also appointed a Data Protection Officer (“DPO”), who can be contacted at the following email address: dpo@a5sav.it.

The Data Processor responsible for debt collection activities on behalf of the Company is NIVI S.p.A.

 

9. Rights of the data subject

The data subject may exercise their rights at any time, as outlined in arts. 15 et seq. of the GDPR, through the contact details mentioned in this policy.

Specifically, the Data Subject has the right to know which personal data is being used, where it came from, to check its accuracy or to request that it be supplemented or updated, or corrected or restricted. You also have the right to request the deletion, transformation into anonymous form or blocking of data processed in breach of the law, as well as to object in any case, for legitimate reasons, to its processing and to modify or revoke previously given consents, without prejudice to the lawfulness of the processing based on the consent given before the revocation.

The Data Subject has the right at any time to object to the processing of their data at any time, in accordance with art. 21 of the GDPR, by sending an email to ufficio.privacy@a5sav.it.

The data subject may also lodge a complaint with the Data Protection Authority, whose contact details can be found at the following link www.garanteprivacy.it/

Società Autostrade Valdostane – SAV S.p.A.

Last updated: May 2026

Last update: 22/06/2026
SITEMAP