Privacy Policy

Privacy Policy

Pursuant to Article 13 of the European Regulation (EU) 679/2016 (“GDPR”), we provide you with the following information regarding the processing of your personal data.

Data Controller and Authorized Processing Entities
The Data Controller, pursuant to Articles 4 and 24 of the GDPR, is Ivana Panizza (hereinafter referred to as the “Data Controller”), C.F. CMPMSM74T30L424W, who can be contacted by writing to ivana.panizza@outlook.it.

Types of Data Processed
Personal Data: Any information concerning an identified or identifiable natural person (“data subject”), meaning a natural person who can be identified, directly or indirectly, with particular reference to an identifier such as a name, identification number, location data, an online identifier, or one or more elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity (Recitals 26, 27, and 30).

Browsing Data: The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified users, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and computing environment.

Voluntarily Provided Data: The voluntary, explicit, and optional sending of messages to the contact addresses indicated on this site and/or the completion of data collection forms involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included.

Cookies: For cookies and similar technologies, please refer to the cookie policy in the website footer.

Social Media: Regarding the processing of personal data carried out by social media operators when users click on the relevant link, please refer to the information provided by these operators through their respective privacy policies.

Purposes, Legal Basis, and Data Retention Period

Purpose A): Website Browsing

LEGAL BASIS: Legitimate interest, pursuant to Article 6(1)(f) GDPR and Recital 47 GDPR. Processing is necessary for pursuing the legitimate interest of the Data Controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject requiring personal data protection do not prevail, considering the reasonable expectations of the data subject based on their relationship with the Data Controller. This includes activities strictly necessary for website operation and providing navigation services on the platform. For non-technical cookies and equivalent technologies, the legal basis is consent, pursuant to Article 6(1)(a) GDPR (see the cookie policy in the website footer).

DATA RETENTION PERIOD: Until the end of the browsing session (except where data is required for the identification of crimes by judicial authorities). For cookies and equivalent technologies, see the cookie policy in the website footer.

NATURE OF PROVISION: Browsing data is necessary for website navigation. For cookies and equivalent technologies, refer to the cookie policy in the website footer.

Purpose B): Use of Cookies Other than Technical Ones and Equivalent Technologies

LEGAL BASIS: Processing is based on the data subject’s consent, pursuant to Article 6(1)(a) GDPR and Recitals 42 and 43 GDPR.

DATA RETENTION PERIOD: See the cookie policy in the website footer.

NATURE OF PROVISION: See the cookie policy in the website footer.

Purpose C): Managing Requests to Exercise Data Subject Rights, Pursuant to Articles 15 et seq. of Regulation (EU) 2016/679

LEGAL BASIS: Legal obligation, pursuant to Article 6(1)(c) GDPR. Processing is necessary to comply with a legal obligation to which the Data Controller is subject.

DATA RETENTION PERIOD: Data is retained for 5 years from the closure of the request, unless litigation arises.

NATURE OF PROVISION: Providing personal data is necessary to comply with legal obligations.

Processing Methods
Your data will not be disseminated and will be processed manually and electronically. It should be noted that no fully automated decision-making processes, including profiling, are conducted.

Data Storage Location
Personal data collected for the purposes described in this policy will not be communicated or transferred to companies and/or entities located in non-EEA countries, except for Purpose B) – use of cookies other than technical ones and equivalent technologies, for which a transfer to the United States may occur based on a European Commission adequacy decision, pursuant to Article 45 GDPR.

Data Communication
Your personal data may be communicated to:

  • Employees and collaborators of the Municipality of Tuglie, acting as authorized data processors (Article 29 GDPR);
  • Independent data controllers;
  • Third parties performing activities on behalf of the Data Controller, classified as data processors (Article 28 GDPR), processing data for the above-mentioned purposes in compliance with GDPR and given instructions.

Data may be communicated to recipients belonging to the following categories, acting as data processors or independently as separate data controllers:

  • Companies or entities managing the information system used and telecommunication networks, including email and website management;
  • Professionals, firms, or companies providing assistance and consulting services;
  • Authorities or entities to whom the Data Controller is legally obligated to communicate personal data.

Data Subject Rights
The data subject may exercise the following rights at any time, as provided by Articles 15 et seq. of the GDPR, by contacting the Data Controller at ivana.panizza@outlook.it:

  • Right to access personal data (Article 15);
  • Right to rectification (Article 16) if data is incorrect or incomplete;
  • Right to erasure (Article 17);
  • Right to restriction of processing (Article 18).

The Data Controller will inform each recipient to whom personal data has been disclosed of any rectification, deletion, or restriction carried out (Article 19). The Data Controller will provide the data subject with details of such recipients upon request.

Where applicable, the data subject has the right to data portability (Article 20), in which case the data will be provided in a structured, commonly used, and machine-readable format. They also have the right to object (Article 21) at any time to processing based on legitimate interest and, when processing is based on consent, the right to withdraw consent without affecting the lawfulness of processing based on consent before its withdrawal. Additionally, the data subject has the right to file a complaint with the Data Protection Authority using the procedure and form indicated on the Authority’s website.

Updates to Our Privacy Policy
Updates to the Privacy Policy may be necessary due to subsequent legislative modifications and/or additions.