Information on the processing of personal data – Privacy Policy

PRIVACY POLICY IN COMPLIANCE WITH ARTICLE 13 OF EU REG, 2016/679 – GDPR –

WHY THIS INFORMATION?

In accordance with Regulation (EU) 2016/679 (hereinafter “GDPR”), this page describes the methods of processing personal data. This information is provided pursuant to art. 13 GDPR. The information is not to be considered valid for other third-party websites, which may be consulted via links on this website, for which no responsibility is assumed.

Processable personal data

Personal data: any information relating to an identified or identifiable natural person («interested»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (C26, C27, C30 GDPR).

Contractor/user data.

Browsing data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.

Data communicated voluntarily

The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site and/or the completion of data collection forms entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data entered.

Information about the processing of personal data carried out through Social Media platforms

Regarding the processing of personal data carried out by the managers of the Social Media platforms used by the Data Controller, please refer to the information provided by them through their respective privacy policies. The Data Controller processes the personal data provided by users through the pages of the dedicated Social Media platforms, to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.

Specific information

Specific information may be present on the pages of the Site in relation to particular services or processing of the data provided.

 Cookies and other tracking systems. What are they? What are they for?

For Cookies and other tracking systems, see the cookies policy reported in the footer of the site and in the following link.

  1. WHO IS THE DATA CONTROLLER? HOW TO CONTACT HIM?

The Data Controller is CONSORTIUM FOR THE PROTECTION OF PROVOLONE VAL PADANA, with registered office in Piazza Marconi n. 3, 26100 Cremona, in the person of the President pro-tempore, who can be contacted for any information by telephone +39.0372.30598, e-mail segreteria@provolonevalpadana.it

  1. PURPOSE OF THE PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD AND NATURE OF THE PROVISION

PURPOSE OF THE PROCESSING

 

LEGAL BASIS

RETENTION PERIOD

NATURE OF THE PROVISION

Browsing this website.

The data necessary for the use of web services are also processed for the purpose of:

•obtain statistical information on the use of services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);

•check the correct functioning of the services offered.

The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject and the activities strictly necessary for the functioning of the site and navigation itself.

(Art. 6, par. 1 letter f and C47 of the GDPR)

 

The storage of browsing data will be for the duration of the browsing session.

 

 

 

 

 

Providing data is necessary for browsing the website.

 

 

 

 

 

 

 

 

 

 

 

 

Use of cookies and similar technologies.

See the cookies policy in the footer of the site

For cookies and similar non-technical technologies, the processing is based on consent to the processing of personal data (art. 6 par. 1 lett. ae C42, C43 of the GDPR).

Consent is given through the banner and the site's cookie policy

See the cookies policy in the footer of the site

See the cookies policy in the footer of the site

In addition to navigation, personal data will be processed for:

PURPOSE OF THE PROCESSING

LEGAL BASIS

RETENTION PERIOD

NATURE OF THE PROVISION

A) CONTACTS, sending contact requests, information

 

 

The processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract; (C44)

art. 6 par. 1 lett. b) of the GDPR

Maximum 12 months

The transfer is necessary.

Failure to provide the necessary data will make it impossible to be contacted and receive information.

B) DIRECT MARKETING, for sending advertising or direct sales material or for carrying out market research, commercial and promotional communications, newsletters, via automated means (email).

The communications may contain promotional activities and/or logos of third-party partners. There will be no transfer of personal data.

The Owner uses reporting systems to compare and possibly improve the results of automated communications. Thanks to the reports, the Owner will be able to know, for example: the number of readers, openings, unique "clickers" and "clicks"; the devices and operating systems used to read the communication; the details of the activity of individual users; the details of the emails sent, emails delivered and not, of those forwarded; All this data is used for the purpose of comparing, and possibly improving, the results of communications.

the processing is based on consent to the processing of personal data (C42, C43)

art. 6 par. 1 letter a) of the GDPR

Until consent is revoked

(or opt-out)

The provision is optional.

 

Failure to provide the necessary data will make it impossible to receive direct marketing communications.

C) MANAGEMENT OF YOUR REQUESTS and requests from other interested parties, pursuant to art. 15 et seq. of the GDPR (rights of the interested party)

Processing is necessary for compliance with a legal obligation to which the data controller is subject (C45)

Article 6 par. 1 letter c) of the GDPR

5 years from the closure of the request, barring disputes

 

The provision of personal data is mandatory, as it is essential to be able to fulfill legal obligations.

 

  1. TO WHOM WILL THE PERSONAL DATA BE COMMUNICATED? DATA RECIPIENTS

Personal data will be communicated, also based on the purposes set out in specific areas, to subjects who will process the data as independent Data Controllers, or Data Processors (art. 28 GDPR) and processed by natural persons (art. 29 GDPR) who act under the authority of the Data Controller and the Processors on the basis of specific instructions provided in order to the purposes and methods of processing, for specific purposes based on the reference area. The data will be communicated to recipients belonging to the following categories:

  • Entities that provide services for the website and communication networks, including email, hosting and website management;
  • Entities based in Italy, with whom the Data Controller has signed agreements and with prior consent, where applicable;
  • For direct marketing, subject to consent to subjects for the management of direct marketing activities;
  • Competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request

The list of Data Controllers is available by writing to segreteria@provolonevalpadana.it or to the other contact details indicated above.

  1. WILL THE DATA BE TRANSFERRED TO NON-EEA COUNTRIES?

Personal data will not be transferred to non-EEA countries. In case of subscription to the newsletter, data will be transferred to countries outside the European Economic Area in compliance with the applicable regulations, in particular, the transfer will take place in compliance with the appropriate and suitable guarantees for the purposes of the transfer itself, pursuant to articles 44 et seq. of Regulation (EU) 2016/679. For more information regarding the transfer of personal data, you can contact the Data Controller at the contacts indicated above 

  1. IS THERE AN AUTOMATED PROCESS?

Personal data will be subjected to traditional manual, electronic and automated processing. It is specified that no fully automated decision-making processes are carried out.

  1. WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?

You may assert your rights as expressed in articles 15 et seq. of the GDPR by contacting the Data Controller at the email address segreteria@provolonevalpadana.it, or to the contacts indicated above. You have the right, at any time, to request access to your personal data (art. 15), rectification (art. 16), erasure (art. 17), and restriction of processing (art. 18). The data controller shall communicate (art. 19) to each of the recipients to whom the personal data have been transmitted any rectifications or erasures or limitations of processing carried out. The data controller shall communicate to the interested party such recipients if the interested party requests it. In the cases provided for, you have the right to the portability of your data (art. 20) and in this case they will be provided to you in a structured, commonly used and machine-readable format. You have the right to object (art. 21), at any time, to data processing based on legitimate interest, and in cases where the legal basis is consent, you have the right to withdraw the consent given without prejudice to the lawfulness of the processing based on consent before the withdrawal.

To stop receiving automated direct marketing communications (email) please write an email to segreteria@provolonevalpadana.it with the subject “unsubscribe from automated” or use our automatic unsubscribe systems provided for emails only (opt-out). 

In the event that you believe that the processing of your personal data by the Data Controller violates the provisions of Regulation (EU) 2016/679, you have the right to lodge a complaint with the Supervisory Authority, in particular in the Member State in which you habitually reside or work or in the place where the alleged violation of the regulation occurred (Data Protection Authority https://www.garanteprivacy.it/), or to take appropriate legal action.

  1. CHANGES TO THE INFORMATION NOTICE

The Owner reserves the right to modify, update, add or remove parts of this information. In order to facilitate the verification and modification of the text, the information will contain the date of update.

Update date: 03/15/2023