En
Privacy Policy
INFORMATION PURSUANT TO ARTICLES 13-14 OF GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679 AND NATIONAL LEGISLATION
FOR SERVICE: EVENTS NEWSLETTER and INTERNAL PROCESSING OF DATA COLLECTED FROM PUBLIC SERVICES.
Applicable principles
According to the indicated legislation, the processing related to this service will be based on the principles of correctness, lawfulness, transparency and protection of your confidentiality and rights.
Therefore, in accordance with Article 13 of GDPR 2016/679, the Municipality of Chianciano Terme, as the Data Controller, provides the following information:
The personal data that in connection with the activation of this service will be collected and processed concern [barrare le categorie applicabili]:
[X] identifying data: surname and first name, residence, domicile, birth, online identifier (username, password, customer ID, other);
[_] family situation, images, characteristic elements of physical, physiological, genetic, psychic, economic, cultural, social identity;
[_] lifestyle data;
[_] economic situation;
[_] financial situation;
[_] asset situation;
[_] fiscal situation;
[_] connection data: IP address, login, other;
[_] location data: location, GPS, GSM, other.
In particular, processing of sensitive data:
[_] Data pertaining to racial or ethnic origin;
[_] political views;
[_] religious or philosophical beliefs;
[_] union membership;
[_] health, life or sexual orientation;
[_] genetic and biometric data;
[_] data on criminal convictions
The data collected will be processed as. (legal basis):
[X] the data subject has given consent to the processing of his or her personal data for one or more specific purposes (in which case consent will be acquired by separate act);
[_] processing is necessary for the performance of a contract to which the data subject is a party or the performance of pre-contractual measures taken at the request of the data subject;
[_] processing is necessary to fulfill a legal obligation to which the data controller is subject;
[_] processing is necessary to safeguard the vital interests of the data subject or another natural person;
[_] processing is necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority vested in the data controller.
In addition to the uses envisaged by the Office / Tourism Service, the collected data are also used to ensure the smooth performance of municipal functions under Art. 13 paragraph 1 of Legislative Decree 267/2000 ss.mm., and at the same time the accuracy of the data under Art. 5 paragraph 1 letter d of the GDPR.
[_] processing is necessary for the pursuit of the legitimate interests of the data controller or a third party, provided that the interests or fundamental rights and freedoms of the data subject requiring the protection of personal data are not overridden, particularly if the data subject is a child.
The personal data provided will be the subject of:
[X] collection
[X] recording
[X] organization.
[_] structuring
[X] conservation.
[_] adaptation or modification
[_] extraction
[_] consultation.
[_] use.
[_] communication by transmission
[_] dissemination or any other form of making available
[_] comparison or interconnection
[_] limitation
[_] deletion or destruction
[_] profiling
[_] pseudonymization
[_] any other operation applied to personal data
In case of communication data will be transmitted to.:
[_] Individuals
[_] Other municipal offices
[_] Third-party entities interested in the proceedings
[_] City councilors, law enforcement, etc.
Treatment:
[_] involves the activation of an automated decision-making process, including profiling, consisting of ……………..
[X] does NOT involve the activation of an automated decision-making process.
Please note that, taking into account the purposes of the processing as explained above, the provision of data is mandatory and their failure, partial or inaccurate conferment may result in the impossibility of carrying out the activity.
Where the person giving the data is of the age ofage of less than 16 years., such processing is lawful only if and to the extent that, such consent is given or authorized by the holder of parental responsibility for whom the identifying data and copies of identification documents are acquired.
The processing will be carried out either by manual and/or computerized and telematic tools with logics of organization and processing strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organizational, physical and logical measures provided for by the provisions in force.
In particular, the following have been adopted security measures:
[X] Authentication systems
[X] authorization systems
[X] protection systems (antivirus; firewall; intrusion detection; other)
[_] minimization
[_] encryption
[_] specific measures to ensure the continued confidentiality, integrity, availability, and resilience of systems and services that process personal data
[_] specific procedures for regularly testing, verifying and evaluating the effectiveness of technical and organizational measures to ensure the security of processing
[_] Procedures for regularly testing, verifying, and evaluating the effectiveness of technical and organizational measures to ensure the security of processing.
Personal data are stored:
[X] for an unlimited time in accordance with current regulations
[ ] for a period of ……….. years as ………………………..
You may, at any time, exercise rights:
– To request more information in relation to the contents of this policy;
– Of access to personal data;
– to obtain the rectification or cancellation of the same or the limitation of the processing concerning him/her (in the cases provided for in the regulations);
– To object to the processing (in cases provided for in the regulations);
– To data portability (in the cases provided for in the regulations);
– to revoke consent, where provided: revocation of consent does not affect the lawfulness of processing based on consent given before revocation;
– To file a complaint with the supervisory authority (Privacy Guarantor)
– to mandate a nonprofit body, organization or association to exercise its rights – to claim damages resulting from the violation of the regulations (Art. 82)
If the data controller intends to further process the personal data for a purpose other than the purpose for which it was collected (including ensuring the smooth performance of municipal functions under Article 13 paragraph 1 of Legislative Decree 267/2000 ss.mm. and the accuracy of the data under Article 5 paragraph 1 letter d of the GDPR), information will be provided prior to such further processing regarding this different purpose and any further relevant information.
The exercise of your rights may be done through direct contact and/or sending a request including by email to:
Subject | Data | Address |
|
Holder | Municipality of Chianciano Terme | Solferino Street, 3 53042 Chianciano Terme (SI) | comune.chianciano-terme@pec.consorzioterrecablate.it |
DPO (data protection officer) | Esseti Servizi Telematici S.r.l. | Loc. Belvedere, no. 97, 53034, Colle Val d’Elsa (SI) | rpd@consorzioterrecablate.it |
Holder’s web contact: comune.chianciano-terme@pec.consorzioterrecablate.it
We would like to inform you that you can obtain further information on data processing and the exercise of your rights as well as the relevant regulatory framework at the following links:
titular web page | http://www.comune.chianciano-terme.siena.it/ |
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance) | https://eur-lex.europa.eu/legalcontent/IT/TXT/?uri=uriserv:OJ.L_.2016.119.01.0001.01.ITA |
Italian data protection guarantor | http://www.garanteprivacy.it/web/guest/home |
THE OWNER.
MUNICIPALITY OF CHIANCIANO TERME