Privacy policy

Information on the processing of personal data for the case of data collected directly from the data subject pursuant to Art. 13 Reg. (EU) 2016/679.

Pursuant to Art. 13 Reg. (EU) 2016/679 "Regulation of the European Parliament on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation)" the following information is provided in relation to the processing of personal data requested for the purposes of participation in the initiatives of the Scopri Monfalcone website.

Identity and contact details of the Data Controller and of the legal representative (Art. 13, par. 1, lett. a) Reg. (EU) 2016/679).

 

Personal data controller

 

Comune di Monfalcone
Address: Piazza della Repubblica, 8 34074 Monfalcone
PEC: as-ag@pec.cultura.gov.it

 

Purpose of processing

 

Data provided by users are processed without their express consent (art. 24, lett. a, b, c, Privacy Code and art. 6 lett. b and e GDPR) for the following purposes:

• management and maintenance of the site;
• provision of any services requested by users
• participation through on-line registration in initiatives or events organised by the Controller;
• replying to or processing a contact request;
• fulfilment of obligations required by law, regulation, EU legislation or an order or measure issued by the Authority;
• conclusion of contracts for the services offered by the Controller;
• fulfilment of pre-contractual, contractual and fiscal obligations arising from ongoing relations;
• exercise of a right of the Controller (such as, for example, the exercise of the right of defence in court).

Subject to express and specific consent (Articles 23 and 130 of the Privacy Code and Article 7 GDPR), for the following other purposes

• sending information material (newsletters, brochures, CD-ROMs, answers to queries, promotional material in general and other technical documents). The use of such data will, in any case, be for the sole purpose of performing the service or provision requested.

 

Modalities of treatment

 

The processing of the data provided by users is carried out by means of the operations indicated in Art. 4 of the Privacy Code as well as Art. 4, no. 2 GDPR, and therefore: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction. Personal data are subject to both paper-based and electronic and/or automated processing.
The Data Controller shall process personal data by automated means and exclusively for the time necessary to fulfil the above purposes and in any case for no longer than 10 years from the termination of the relationship for the purposes determined by the service rendered and for no longer than 2 years from the collection of the data for other purposes.
Specific security measures have been taken to prevent the loss of data, illicit or incorrect use of data and unauthorised access, in line with the provisions of Articles 32-34 of the Privacy Code and Article 32 GDPR.

 

Legal basis

 

The processing is based on the following legal bases:

• performance of a task carried out in the public interest or in connection with the exercise of public authority;
• consent of the data subject.

 

Data Access

 

Users' personal data may also be processed and therefore made accessible, for the sole purposes set out in Article 3 of this information notice, by the persons in charge or internal data processors, or by system administrators.
The aforesaid data may also be processed and therefore made accessible to third party companies or other subjects - such as, by way of example but not limited to - professional firms, consultants, suppliers, hardware and software support technicians, credit institutions, forwarding agents or transport companies, which perform outsourcing activities on behalf of Space, in their capacity as external data processors.

 

Data Communication

 

In the absence of express consent, pursuant to art. 6 lett. b) and c) GDPR, the Entity will disclose users' data to Supervisory Bodies, Judicial Authorities or other entities to which disclosure is required by law in order to carry out the purposes better indicated in art. 3, lett. a) above of this information notice.
No data provided by users and deriving from the web service will be disseminated.

 

Data Transfer

 

The personal data of users connected to the web services of this site are held at the premises of Space, as indicated above, and are handled exclusively by the technical staff of the office in charge of processing such data, or by any persons in charge of occasional and specific maintenance operations.

 

Type of data processed

 

Browsing data: in the course of their normal operation, the computer systems and software procedures used to operate the site acquire certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g.: personal data acquired through site access logs). This data is processed for the technical management of the website and for the collection of analytical data on related traffic. 
Data provided voluntarily by users: the optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to reply to requests, as well as any other personal data included in the message.
Cookies and other tracking systems: cookies are small text files that the website sends to the user's terminal, where they are stored and then transmitted back to the site on the next visit. This site uses technical session cookies and analytical cookies aimed at collecting information, in aggregate form, on the number of users and how they visit the site. The cookies used by the site do not allow identification or profiling of the user, who can always choose to enable or disable cookies, see the cookie policy detail page.
Data provided by the user: sending messages to the contact addresses published on the site and private messages addressed to the Agency's institutional profiles on social media entails the acquisition of all the personal data voluntarily included by the sender in the text of their communication, processed for the sole purpose of the requested response. Specific information will be published on the pages of the site that may be set up for the provision of certain services.

 

Categories of recipients of personal data

 

scoprimonfalcone.it will process the personal data autonomously through its own personnel. The recipients of the personal data are also the suppliers of technical and telematic services, designated as data processors. 
scoprimonfalcone.it does not transfer any personal data to third countries or international organisations.

 

Personal data retention period

 

Browsing data are deleted immediately after the relevant statistical processing and, in any case, are not kept for more than 15 days from the time of collection, without prejudice to any need to ascertain offences by the judicial authorities.
Personal data provided by users are kept for the time strictly necessary to manage and reply to the communication received.

 

Users' rights

 

Data subjects have the right to obtain access to, rectification or erasure of their personal data, restriction of the processing thereof, the right to object to the processing of their personal data and the right to data portability, where applicable.
Without prejudice to any other administrative or jurisdictional recourse, it is the right of data subjects to lodge a complaint with the Personal Data Protection Authority if they consider that the processing of their data violates the Regulation.
Parchium.it guarantees that there is no form of exclusively automated decision-making process involving legal effects on the data subject.

 

Updates

 

This privacy policy is updated as of 30 June 2023.