Data processing policy (Website)
This section of the site aims to indicate the policies of this Municipality pursuant to the European Regulation No. 679/2016 and Legislative Decree No. 196/2003, regarding the processing of personal data collected while browsing the official website of the Institution, and other websites for which it is responsible.
It also contains legal notices regarding the responsibilities for the processing of personal data owned by the Institution.
Why this policy
This policy describes the way in which the official website of the Municipality is managed, and the management of other websites managed by the Institution in terms of the processing of the personal data of the persons, identified or identifiable, who use or interact with the site, and with the web services available online.
The information is provided pursuant to Article 13 of EU Regulation No. 2016/679 and Article 13 of Legislative Decree No. 196/2003.
In particular, this policy is intended to provide information about the methods, times and nature of the information that data controllers are required to provide to users when they connect to web pages, regardless of the purpose of the connection. The information is provided only for the official website of the Municipality and the sites managed by the same Institution, and not for any other external websites consulted by the user through links.
Data Controller
The Data Controller of personal data is the MUNICIPALITY.
Data Protection Officer
Place of Data Processing
The data processing operations connected with the web services offered by this site take place at the office indicated above. The data is only handled by the technical staff entrusted for this purpose, or by other persons appointed to carry out occasional maintenance. No data deriving from the web service are communicated or disclosed unless expressly provided for by law. The personal data provided by users are used only to perform the requested service as expressed in the reasons for the data processing. They are communicated to third parties only where necessary for that purpose.
Types of data processed
Navigation data. The computer systems and software procedures used to operate this website acquire, during normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected for the purposes of matching it to the identified data subjects. However, given its nature, it may allow the identification of users following further processing and association with other data held by third parties.
This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc.) and other parameters related to the operating system and the IT environment of the user.
These data are used for the sole purpose of obtaining anonymous statistical information about the use of the site and to check its correct functioning, and is kept for the time strictly necessary. The data may be used to ascertain responsibility in the event of cyber attacks against the site.
Data voluntarily provided by the user. The optional, explicit and voluntary sending of email to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, which is needed in order to respond to the requests, as well as any other personal data included in the message.
Specific summary information will be subsequently made available on the website pages provided for the requesting of certain services.
Lawfulness of the processing
The processing is carried out for and within the institutional functions of the Institution, to provide a service of public interest, pursuant to Article 6 of EU Regulation No. 2016/679.
Optional provision of the data
Apart from the information given in relation to navigation data, the provision of the user's personal data on the request forms sent to the Institution is at the user's discretion. Failure to provide such data may make it impossible to obtain what is requested.
Processing methods
Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are adopted to prevent data loss, possible illegal or improper uses, and unauthorised access.
Rights of the data subjects
The subjects to whom the personal data refers may at any time obtain confirmation of the existence or non-existence of such data and to know the content and origin, verify their accuracy or request their integration, updating or correction (Article 15 et seq. of Regulation EU 2016/679 and Articles 7 et seq. of Legislative Decree 196/2003, Article 7 of Legislative Decree 196/2003).
The same article grants the data subject the right to request the deletion, transformation into anonymous form or blocking of data processed in violation of the law, as well as to object in all cases, for legitimate reasons, to the processing of the data.
The requests referred to in the previous paragraph must be submitted to the Municipality.
The requests referred to in Articles 15 et seq. of Regulation EU 2016/679 and Article 7 of the Code paragraphs 1 and 2 may also be made orally.