Information request – Propose a content

INFORMATION ON THE PROCESSING OF PERSONAL DATA (Article 13 EU Regulation 27 April 2016, n. 679 regarding the protection of personal data “GDPR”)

The information is provided pursuant to articles 13 and ss. of EU Regulation 2016/679, concerning the protection of data of individuals, with regard to the processing of personal data of those who interact with the web services of the Municipality of Rocca Santa Maria, accessible from the home page of the thematic website dedicated to tourist activities at the address: https://www.visitceppo.it.

Data Controller and Personal Data Protection Officer
The Data Controller is Municipality di Rocca Santa Maria

TREATMENTS

The data processed are contact / email address to send a generic communication from the website.

Purpose: Service provision regarding a generic request for information (e.g. sending a suggestion, proposing a content or a generic request for information)
Categories of recipients: The data of the interested party will be processed by the Municipality of Rocca Santa Maria as Data Controller and its specially authorized collaborators.
Method: The data are collected online and transmitted to the recipients of those who make the request. There are no automated decision-making processes.
Retention terms: Personal data will be kept for a period of time not exceeding that necessary for the purposes for which they were collected and processed. Personal data whose processing is based on consent will be kept until the consent is revoked by the interested party, which can be freely exercised at any time. Following the withdrawal of consent, such personal data will be automatically deleted, or made anonymous in a permanent and non-reversible way.

RIGHTS AND OBLIGATIONS OF THE INTERESTED PARTIES (Articles 15 to 21 and Article 13 of the GDPR)

Right of access: The interested party has the right, in accordance with the provisions of art. 15 of the GDPR, to request the owner access to their personal data.
Right of rectification: The interested party has the right, in accordance with the provisions of art. 16 of the GDPR, to request the data controller to rectify their personal data.
Right of cancellation: The interested party has the right, in accordance with the provisions of art. 17 of the GDPR, to request the owner to delete their personal data.
Right to limitation: The interested party has the right, according to the provisions of Article 18 of the GDPR, to request the owner to limit the data concerning him .
Right to object: The interested party has the right, according to the provisions of art. 21 of the GDPR, to oppose their treatment.
Right of portability: The interested party has the right, according to the provisions of Article 20 of the GDPR, to exercise his right to data portability.
Right to revocation: The interested party has the right, according to the provisions of Article 13, paragraph 2, letter c) of the GDPR, to revoke the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation.
Right of complaint: The interested party has the right, according to the provisions of art. 13, co. 2, letter d) of the GDPR, to exercise their right to lodge a complaint with the supervisory authority.

Is the interested party obliged to provide personal data?
Data processing is not mandatory: denial of consent, however, will not allow requests to be sent and processed and to provide feedback information.