Privacy Policy

INFORMATION FOR THE PROCESSING OF PERSONAL DATA – Art. 13 GDPR 2016/679 – VISITCEPPO WEBSITE

This information is provided pursuant to art. 13 of EU Regulation 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (the so-called “General Regulation on the processing of personal data” or “GDPR”) and of Legislative Decree 30.06.2003, n. 196, as amended and supplemented by Legislative Decree 10.08.2018, n. 101 (“Code regarding personal data” or “Privacy Code”) to those who interact with the web services of the Municipality of Rocca Santa Maria, accessible on the home page of the official site at the address: https://www.visitceppo.it

Holder of the treatment
The Data Controller is the Municipality of Rocca Santa Maria, in the person of the pro-tempore Mayor, who is based in Frazione Imposte, 64010 Rocca Santa Maria (TE) Tel 0861 63122
The Owner, aware of the importance of ensuring the security of private information, in accordance with applicable European and Italian legislation, in compliance with the principle of transparency pursuant to art. 12, GDPR, below provides the following information in order to make the user aware of the characteristics and methods of processing personal data.

Type of data processed
The Data Controller processes the user’s personal data that are provided when using the website. In particular, the following are processed: a) navigation data not directly provided – and in any case acquired within the limits of the provisions of Article 14, paragraph 5, GDPR – whose transmission is connected to the use of Internet communication protocols (to by way of example, access to the page, amount of data transferred, session ID numbers, IP addresses, URL addresses, etc.) and for which reference is also made to the Cookies policy available on the site; b) personal identification and / or contact data (name, surname, e-mail address) directly provided by the interested party with the possible sending of emails to request information through the e-mail address available on the site.

Purpose, legal basis and methods of data processing
User data is collected to allow the Owner to provide its services, as well as for the following purposes:

1. 1. make the website features usable as a result of user access (legitimate interest);
   2. carry out statistical research / analysis on aggregated or anonymous data, therefore without the possibility of identifying the user, aimed at measuring the functioning of the site and its operational functions, including the resolution of any technical problem;
   3. perform tasks of public interest or related to the exercise of public authority vested in the Data Controller;
   4. fulfillment of legal obligations to which one is subject;
   5. exercise the rights of the Data Controller (by way of example only, ascertain, exercise or defend a right in court or whenever the judicial authorities exercise their judicial functions).

The legal basis of the processing is to be found in the legitimate interest of the Data Controller to offer an administrative – social service to citizens and to each user who intends to use it, since the website is primarily an information function.
The Data Controller processes the personal data of users and interested parties by adopting appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The processing is based on principles of correctness, lawfulness and transparency and is carried out using IT and paper tools with organizational methods strictly related to the purposes indicated above.
In addition to the Data Controller, in some cases, external subjects (such as IT companies) and employees of the same, appropriately trained and authorized, may have access to the data: these subjects ensure levels of experience, ability and reliability such as to guarantee compliance with the current provisions on the subject. of data protection and security.

Data retention
The Data Controller will process personal data for the time strictly necessary to fulfill the aforementioned purposes, in compliance with the principles of minimization and limitation of conservation pursuant to art. 5, paragraph 1, letters c), e), GDPR. With regard to navigation data, they are deleted immediately after processing (except for any need to ascertain crimes by the judicial authorities).

Categories of data recipients
As already specified, the processing is carried out by the Data Controller and further recipients of the data are persons authorized, instructed, committed to confidentiality and responsible for the related activities in relation to the purposes pursued. The updated list of subjects can always be requested from the Data Controller. The data collected are not communicated to third parties, without prejudice to the possibility for the Data Controller to communicate the data to subjects entitled to access it by virtue of the provisions of law, regulations, community regulations, the judicial authority, as well as to all other subjects. to whom the communication is mandatory by law.

Transfer of data to third countries
The data provided for the aforementioned purposes are not transferred to third countries or international organizations outside the European Union.

Rights of interested parties
The interested party can exercise the rights provided for in Articles 15 and following of Regulation (EU) 2016/679 and in particular the right to access personal data (Article 15), to request its correction (Article 16), to update it if incomplete or incorrect, to request its limitation (Article 18), and cancellation (Article 17) if the conditions exist, as well as to oppose their treatment (Article 21). These rights can be exercised by addressing the request to the Municipality of Rocca Santa Maria and to the Data Protection Officer (“DPO”). Always remember the possibility to lodge a complaint with the competent personal data protection supervisory authority (Privacy Guarantor).

Contact details of the Data Controller and the DPO
The Data Controller is the Municipality of Rocca Santa Maria based in Frazione Imposte, 64010 Rocca Santa Maria (TE), reachable through the email addresses roccasm@roccasm.it l roccasm@pec.it  and Tel: 0861.63122

Data last updated: 30/06/2021