Information for the processing of personal data
Pursuant to Article 13 of the EUROPEAN REGULATION 2016/679 on the protection of personal data.
On January 24, 2014, the Union of Municipalities of the Savio Valley was formed to which the Municipalities of Cesena, Bagno di Romagna, Mercato Saraceno, Montiano, Sarsina, Verghereto belong;
Pursuant to art. 6, paragraph 6 letter d), of the Constitutive Act of the Valle Savio Union, the Municipalities have conferred on the Union the functions and management services of computer systems and information technologies for associated management; this consent the application of identical rules for the management of the aforementioned services to all municipalities that are part of the Union.
Owner, Co-owner
The Union of Valle del Savio Municipalities is the Data Controller, pursuant to articles 4, paragraph 1, point 7) and art. 24 European Regulation n. 679/2016.
The Valle del Savio Union has adopted the S.A.A.S “UNIO-GDPR” software platform, created by the company E.T.I. S.r.l. (Enterprise Technology Innovation), based in Pomezia, Via Campobello n. 24; company holding the position of Manager, pursuant to art. 28 Regulations; all the databases, managers and treatments of the owner body are registered with this platform.
The Valle del Savio Union, in compliance with the principles sanctioned in the EUROPEAN REGULATION 2016/679 relating to the protection of individuals with regard to the processing of personal data as well as the free circulation of such data, offers users the opportunity to interact with their respective thematic portals to consult or use the related services accessible through the institutional websites accessible at www.unionevallesavio.it and ipercorsidelsavio.it.
This page, in addition to describing the site management methods pursuant to article 13 of the aforementioned “REGULATION”, has the purpose of informing users who connect to the Union portals regarding the processing of personal data and the related guarantees recognized by law. This information is provided exclusively to the Valle Savio Union website and not for other sites that can be consulted by the user via links.
Purpose of the processing and legal basis
Personal data will be processed in relation to the services offered by the Valle Savio Union through its portals exclusively for the purposes that fall within the institutional tasks of the Administrations and of public interest or for the obligations required by law or regulation.
The processing also concerns the data relating to registrations and registrations to the portal necessary for the management of relations with the Valle Savio Union as well as to allow effective institutional communication and to fulfill any regulatory or contractual legal obligations.
Place and method of data processing
The processing of data related to web services provided through the Valle Savio Union takes place at the institutional offices of the Union. The treatments are carried out through specifically designated managers.
Data processing takes place for the time strictly necessary to achieve the purposes, including through the use of automated tools, observing the security measures aimed at preventing data loss, illicit or incorrect use and unauthorized access.
The data is processed exclusively by staff mainly within the Union, with an agreement with the Union for drafting and communication services; said personnel are authorized to process as well as any external subjects, for occasional updating and maintenance operations, according to the principles of correctness, lawfulness, transparency, relevance and not excess with respect to the purposes of collection and subsequent processing.
The personal data provided by users who register or use the services of the Unione Valle Savio site provide references such as:
– First name
– Last name
– Residence
– Telephone
– Email address
– Mobile number
These data can be used for other processing operations compatible with the purposes of the collection (for example the sending by e-mail or sms of institutional and public utility communications).
The personal data of users who request documents or information material (deeds, measures, newsletters, answers to questions, etc.) are used only to perform the service or provision requested and are disclosed to third parties only if it is necessary (shipping service or other similar hypotheses).
Type and nature of the data processed
Navigation data
Access to the Valle Savio Union site involves recording the data used in order to ensure its functioning.
The collected data includes:
- the IP addresses and / or domain names of the computer used by users who connect to the site
- the addresses in URL notation (UNIFORM RESOURCE IDENTIFIER) of the requested resources
- the time of the request
- the method used in submitting the request to the server
- the size of the file obtained in response
- the numerical code indicating the status of the response given by the server and other parameters relating to the operating system and the user’s IT environment.
These data are not collected for the purpose of associating them with identified subjects, but for their nature they could allow users to be identified through processing and association with data held by third parties, especially where it is ever necessary to ascertain responsibility in case of hypothetical computer crimes against the site.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses identified in the different access channels to the site and the compilation of the formats (masks) entail the subsequent acquisition of the sender’s address necessary to respond to requests as well as any other personal data entered in the letter.
In this case the acquired data will be processed for:
- respond to user requests, for example for the use of a service, problems connecting to the site, problems navigating the site, problems accessing the services of the site or problems accessing your account
- sending newsletters and communications of public utility
In relation to the data provided voluntarily, the user acts as an independent data controller, assuming all legal obligations and responsibilities. In this sense, it confers on this point the widest indemnity with respect to any dispute, claim, request for compensation for damage from treatment, etc. that should be transmitted to the Administration by third parties whose personal data have been processed through the use of the site in violation of the applicable law.
Obligation or right to provide data
In addition to what is specified for navigation data, the user is free to provide personal data contained in the application forms or, in any case, indicated in contacts for sending communications or any documentation. Failure to provide the data (for example personal data, telephone numbers, email address) necessary to make the service may make it impossible to obtain what is requested.
Retention period
The data will be kept for a period of time not exceeding the achievement of the purposes, according to the conservation limitation principle, provided for in Article 5 of the EU Regulation or according to the deadlines set by law.
Dats recipients
The data relating to the online service are not intended for third parties, except for Union personnel specifically designated for the administrative investigation; such data are not subject to communication or dissemination, unless provisions of law or regulation provide otherwise.
Transfer of data abroad
The data is not transferred to third countries and outside the European Economic Area.
Rights of the interested parties
According to Article 15 and following of the EU REGULATION, the interested parties or the natural persons to whom the data refer, can exercise their rights towards the Data Controller and the Joint Data Controller at any time; in particular, the right to access one’s personal data, to ask an rectification or limitation, an updating if it is incomplete or incorrect and its cancellation if it has been collected in violation of the law, as well as to oppose its treatment, without prejudice to the existence of legitimate reasons on the part of the CONTROLLER AND THE CO-CONTROLLER.
For these reasons, it is possible to contact the Data Controller, the Joint Controller or the Data Protection Officer (DPO-RPD) at this email address: privacy@unionevallesavio.it
The interested person may lodge a complaint with the Italian Supervisory Authority, Guarantor for the protection of personal data (Privacy Guarantor) based in ROME, Piazza Venezia, 11, CAP 00187, website: www.garanteprivacy.it.
Changes
This Notice is effective from 4 July 2018.
The Valle Savio Union reserves the right to modify or simply update its content, in part or completely, also due to changes in the legislation and which will be published on the sites and will become binding.
The Union of Valle Savio Municipalities invites the user to regularly visit the website so that it can always be updated and be aware of the most recent and updated version of this Privacy Policy.
Data Protection Officer contacts
Email: privacy@unionevallesavio.it
Last updated: February 14, 2022.