Privacy information pursuant to art. 13 of EU Regulation 679/2016 and of the Privacy Code as recently amended by Legislative Decree 101/2018
PREMISE
For the Municipality of Sellano (PG) (hereinafter, also just Sellano) your privacy and the security of your personal data are particularly important, which is why we collect and treat them with the utmost care and attention, while adopting specific technical measures and structural to guarantee full safety of the treatment.
We therefore inform you, pursuant to art. 13 of the European Regulation 2016/679 and of the Privacy Code as recently amended by Legislative Decree 101/2018 ("Regulation") that the processing of your personal data takes place according to methods suitable to guarantee security and confidentiality, and is carried out, using paper, IT and/or electronic media, as detailed in this information.
DEFINITIONS
Personal data: means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements characteristic of his or her physical identity , physiological, genetic, psychic, economic, cultural or social.
Processing: means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, l adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
Special categories of personal data: means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a person physical data, data relating to a person's health or sexual life or sexual orientation.
Data controller (titolare): means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data Controller (responsabile): means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller.
Distance selling contract: "the contract concerning goods or services stipulated between a supplier and a consumer as part of a remote sales or service provision system organized by the supplier who, for this contract, exclusively employs one or multiple distance communication techniques until the conclusion of the contract, including the conclusion of the contract itself, carried out by "any means which, without the simultaneous physical presence of the supplier and the consumer, can be used for the conclusion of the contract between the said parties" ( Legislative Decree no. 185/1999, Art. 1 cc 1).
Data Controller
The processing of your personal data is carried out by the Municipality of Sellano (PG) (hereinafter, also just Sellano), with headquarters in Sellano (PG), P.zza Vittorio Emanuele III, 7, as Data Controller pursuant to and for the purposes of the Regulations.
For any questions related to the processing of your personal data you can contact Sellano at any time by sending a request to the following references:
Company name: Municipality of Sellano (Perugia, Italy)
Registered office address: P.zza Vittorio Emanuele III, 7 - 06030 Sellano (Perugia, Italy))
Telephone contact details: +39 0743 926622
Contact details email: info@comune.sellano.pg.it
DPO contact details: info@comune.sellano.pg.it
External data controller pursuant to art. 28 EU Reg. 679/2016
1. The Company SKIDATA S.r.l. with registered office in Via J. Ressel, 2F, 39100 Bolzano C.F. and VAT number 01220250219 is appointed by Sellano as External Data Processor pursuant to art. 28 of the Regulation, and is required to carry out the activity assigned to it according to the specific instructions given by Sellano.
2. SKIDATA has in turn appointed the company Skiperformance AS, with registered office in Lommedalsveien 230 N-1354 Bærums Verk, Norway Org: 814 054 462 mva as Sub-Data Processor.
SKIDATA and Skiperformance, previously authorized and adequately selected in order to offer a suitable guarantee of compliance with the rules regarding the processing of personal data, will process your data only for the purpose of allowing you to benefit from our telematic ticket sales service, which will take place through the regulation of "distance contracts".
Furthermore, Skiperformance will assume all responsibility (invoicing, shipping, etc.) pursuant to the aforementioned Legislative Decree 185/1999 and Art. 51 et seq. of the Consumer Code (Legislative Decree 206/2015).
Furthermore, it should be noted that any transaction deriving from the stipulation of the aforementioned "distance contracts" will take place - in compliance with Art. 124 of Legislative Decree 101/2018 - on servers equipped with an SSL encryption system for secure transmission, and that credit card verification will take place only through bank payment (which will validate the payment and archive the card code, without that the latter reaches the Skiperformance server).
Type of Data and Purpose of Processing
The personal data that Sellano processes are solely those provided by users of the electronic ticket sales services.
These are transmitted solely to SKIDATA in relation to the service provided by them and their capacity as external Data Processor.
Sellano may, therefore, collect personal identifying data, such as personal data such as name and surname, email, address, etc. through two distinct methods: registration on the Sellano institutional website or through the account of some social networks, e.g. Facebook and Gmail, (so-called “social login”). The personal data used to register on the Site are provided directly by the user, unless the user expressly requests registration and related login via social networks upon first access, or subsequently if already registered. In case of use of these features, Sellano will only store the information coming from the relevant profile through the relevant social network, which the user expressly authorizes to be shared. The association of the social network profile will appear on the relevant accounts on the social networks whose specific privacy policies please refer to for any further details. Sellano does not send any information concerning the user to social networks.
Your personal data, once collected, are processed for the following purposes:
A | Purpose: | Legal basis: |
B | Carry out the provision of telematic ticket sales services. | The provision of data is necessary to allow users to use the electronic sales services provided by Sellano and does not require specific consent from the interested party other than acceptance of the privacy conditions, as well as for verifying the identity of the data subject. user user. |
Categories of recipients of personal data
Your personal data is processed by Sellano systems and personnel, specifically authorized pursuant to art. 4, paragraph 10 of the EU Regulation, which processes data following precise indications from the Data Controller.
The following categories of recipients may also become aware of your data:
- external parties (such as legal consultants, suppliers of technical services who carry out, on our behalf, tasks of a technical or organizational nature instrumental to the provision of the requested services as well as any third parties in various capacities involved with the activities).
Your personal data will also be transmitted to the aforementioned SKIDATA and Skiperformance companies appointed as external data controller pursuant to art. 28 of the Regulation and Sub Manager pursuant to art. 28 c. 4, required to carry out the activity assigned to them according to the specific instructions given by Sellano.
Finally, your data may be transmitted to the police forces and to the judicial and administrative authorities, in compliance with the law, for the investigation and prosecution of crimes, the prevention and protection from threats to public security, as well as to allow in Sellano to exercise or protect their own rights or those of third parties before the competent authorities, as well as for other reasons related to the protection of the rights and freedoms of others, in compliance with the provisions of the art. 2-sexies of Legislative Decree 101/2018.
Note: The data will not be communicated to third parties for their marketing purposes.
Personal data retention period (Data Retention)
We inform you that your data will be stored for a limited period of time and aimed solely at fulfilling the obligations imposed by the telematic ticket sales contract and for the Help Desk activity which, in any case, cannot exceed the legal limits.
At the end of this period, your data will be definitively deleted by Sellano and Skiperformance (at the addresses: info@comune.sellano.pg.it; support@skiperformance.com)
The provision of data (mandatory or not)
It is mandatory to the extent that it is necessary to comply with explicit requests by the interested party or to comply with specific contractual and/or legal obligations while in other cases it is optional and does not affect the continuation of the relationship.
Profiling
No automated user profiling activity is carried out for the purpose of analyzing or predicting aspects concerning the professional performance, skills, preferences or personal interests, reliability or behaviour, location of the interested party to the extent that this allows us to outline a profile of the interested party with consequent mainly promotional and targeted actions towards him.
Transfer of your data abroad
The transfer of personal data to countries outside the European Union may involve greater risks and as such must be adequately monitored. If the Data Controller makes use of this possibility, he undertakes to collect in advance and make available to interested parties all the supporting documentation with the same methods with which the rights can be exercised.
Your rights
We inform you that you have the right to exercise the following rights in relation to the personal data covered by this information, as provided for and guaranteed by the Regulation:
- Right of access and rectification: you have the right to access your personal data and to request that they be corrected, modified or integrated. If you wish, we will provide you with a copy of the data we hold about you.
- Right to erasure of data: in the cases provided for by current legislation you can request the erasure of your personal data. Once your request has been received and analysed, we will cease processing and delete your personal data, if found legitimate.
- Right to limit processing: you have the right to request the limitation of the processing of your personal data in the event of unlawful processing or dispute of the accuracy of the personal data by the interested party.
- Right to data portability: you have the right to request to obtain your personal data from the Data Controller in order to transmit them to another Data Controller, in the cases provided for in the referenced article.
- Right to object: you have the right to object at any time to the processing of your personal data carried out on the basis of our legitimate interest, explaining the reasons justifying your request; before accepting it, Sellano will have to evaluate the reasons for your request.
- Right to lodge a complaint: you have the right to lodge a complaint before the competent Guarantor Authority for the protection of Personal Data if you believe that it has occurred, or is in progress, a violation of your rights in relation to the processing of your personal data.
- Right to revoke the consent given: for the processing of personal data which finds its legal basis exclusively on your consent, you have the right to revoke, at any time, the consent given by contacting the Data Controller treatment.
At any time you can exercise your rights with reference to the specific processing of your personal data by Sellano.
Further information regarding the rights of the interested party can be obtained by asking the Owner for a complete extract of the articles mentioned above.
Without prejudice to what has been expressed so far, we remind you that the above rights can also be exercised by anyone who has an interest of their own, or who acts for your protection, as your agent, or for family reasons worthy of protection, pursuant to art. 2-terdecies of Legislative Decree 101/2018.
Security measures
Sellano adopts adequate security measures to safeguard the confidentiality, integrity, completeness and availability of the interested party's personal data. Technical, logistical and organizational measures are developed which aim to prevent damage, even accidental losses, alterations, improper and unauthorized use of the data processed.
We proceed to regularly test, verify and evaluate the effectiveness of security measures, in order to guarantee continuous improvement in the safety of treatments.
Changes to this legislation
The constant evolution of our services may lead to changes in the characteristics of the processing of your personal data described above. This privacy policy may undergo changes and additions over time, as necessary due to new regulatory interventions regarding the protection of personal data, or the evolution/modification of our services.
We therefore invite you to periodically check the contents of our information: where possible, we will try to promptly inform you of the changes made and their consequences.
Privacy information pursuant to art. 13 of EU Regulation 679/2016 and of the Privacy Code as recently amended by Legislative Decree 101/2018
PREMISE
For the Municipality of Sellano (PG) (hereinafter, also just Sellano) your privacy and the security of your personal data are particularly important, which is why we collect and treat them with the utmost care and attention, while adopting specific technical measures and structural to guarantee full safety of the treatment.
We therefore inform you, pursuant to art. 13 of the European Regulation 2016/679 and of the Privacy Code as recently amended by Legislative Decree 101/2018 ("Regulation") that the processing of your personal data takes place according to methods suitable to guarantee security and confidentiality, and is carried out, using paper, IT and/or electronic media, as detailed in this information.
DEFINITIONS
Personal data: means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements characteristic of his or her physical identity , physiological, genetic, psychic, economic, cultural or social.
Processing: means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, l adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
Special categories of personal data: means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a person physical data, data relating to a person's health or sexual life or sexual orientation.
Data controller (titolare): means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
Data Controller (responsabile): means the natural or legal person, public authority, agency or other body which processes personal data on behalf of the Data Controller.
Distance selling contract: "the contract concerning goods or services stipulated between a supplier and a consumer as part of a remote sales or service provision system organized by the supplier who, for this contract, exclusively employs one or multiple distance communication techniques until the conclusion of the contract, including the conclusion of the contract itself, carried out by "any means which, without the simultaneous physical presence of the supplier and the consumer, can be used for the conclusion of the contract between the said parties" ( Legislative Decree no. 185/1999, Art. 1 cc 1).
Data Controller
The processing of your personal data is carried out by the Municipality of Sellano (PG) (hereinafter, also just Sellano), with headquarters in Sellano (PG), P.zza Vittorio Emanuele III, 7, as Data Controller pursuant to and for the purposes of the Regulations.
For any questions related to the processing of your personal data you can contact Sellano at any time by sending a request to the following references:
Company name: Municipality of Sellano (Perugia, Italy)
Registered office address: P.zza Vittorio Emanuele III, 7 - 06030 Sellano (Perugia, Italy))
Telephone contact details: +39 0743 926622
Contact details email: info@comune.sellano.pg.it
DPO contact details: info@comune.sellano.pg.it
External data controller pursuant to art. 28 EU Reg. 679/2016
1. The Company SKIDATA S.r.l. with registered office in Via J. Ressel, 2F, 39100 Bolzano C.F. and VAT number 01220250219 is appointed by Sellano as External Data Processor pursuant to art. 28 of the Regulation, and is required to carry out the activity assigned to it according to the specific instructions given by Sellano.
2. SKIDATA has in turn appointed the company Skiperformance AS, with registered office in Lommedalsveien 230 N-1354 Bærums Verk, Norway Org: 814 054 462 mva as Sub-Data Processor.
SKIDATA and Skiperformance, previously authorized and adequately selected in order to offer a suitable guarantee of compliance with the rules regarding the processing of personal data, will process your data only for the purpose of allowing you to benefit from our telematic ticket sales service, which will take place through the regulation of "distance contracts".
Furthermore, Skiperformance will assume all responsibility (invoicing, shipping, etc.) pursuant to the aforementioned Legislative Decree 185/1999 and Art. 51 et seq. of the Consumer Code (Legislative Decree 206/2015).
Furthermore, it should be noted that any transaction deriving from the stipulation of the aforementioned "distance contracts" will take place - in compliance with Art. 124 of Legislative Decree 101/2018 - on servers equipped with an SSL encryption system for secure transmission, and that credit card verification will take place only through bank payment (which will validate the payment and archive the card code, without that the latter reaches the Skiperformance server).
Type of Data and Purpose of Processing
The personal data that Sellano processes are solely those provided by users of the electronic ticket sales services.
These are transmitted solely to SKIDATA in relation to the service provided by them and their capacity as external Data Processor.
Sellano may, therefore, collect personal identifying data, such as personal data such as name and surname, email, address, etc. through two distinct methods: registration on the Sellano institutional website or through the account of some social networks, e.g. Facebook and Gmail, (so-called “social login”). The personal data used to register on the Site are provided directly by the user, unless the user expressly requests registration and related login via social networks upon first access, or subsequently if already registered. In case of use of these features, Sellano will only store the information coming from the relevant profile through the relevant social network, which the user expressly authorizes to be shared. The association of the social network profile will appear on the relevant accounts on the social networks whose specific privacy policies please refer to for any further details. Sellano does not send any information concerning the user to social networks.
Your personal data, once collected, are processed for the following purposes:
A | Purpose: | Legal basis: |
B | Carry out the provision of telematic ticket sales services. | The provision of data is necessary to allow users to use the electronic sales services provided by Sellano and does not require specific consent from the interested party other than acceptance of the privacy conditions, as well as for verifying the identity of the data subject. user user. |
Categories of recipients of personal data
Your personal data is processed by Sellano systems and personnel, specifically authorized pursuant to art. 4, paragraph 10 of the EU Regulation, which processes data following precise indications from the Data Controller.
The following categories of recipients may also become aware of your data:
- external parties (such as legal consultants, suppliers of technical services who carry out, on our behalf, tasks of a technical or organizational nature instrumental to the provision of the requested services as well as any third parties in various capacities involved with the activities).
Your personal data will also be transmitted to the aforementioned SKIDATA and Skiperformance companies appointed as external data controller pursuant to art. 28 of the Regulation and Sub Manager pursuant to art. 28 c. 4, required to carry out the activity assigned to them according to the specific instructions given by Sellano.
Finally, your data may be transmitted to the police forces and to the judicial and administrative authorities, in compliance with the law, for the investigation and prosecution of crimes, the prevention and protection from threats to public security, as well as to allow in Sellano to exercise or protect their own rights or those of third parties before the competent authorities, as well as for other reasons related to the protection of the rights and freedoms of others, in compliance with the provisions of the art. 2-sexies of Legislative Decree 101/2018.
Note: The data will not be communicated to third parties for their marketing purposes.
Personal data retention period (Data Retention)
We inform you that your data will be stored for a limited period of time and aimed solely at fulfilling the obligations imposed by the telematic ticket sales contract and for the Help Desk activity which, in any case, cannot exceed the legal limits.
At the end of this period, your data will be definitively deleted by Sellano and Skiperformance (at the addresses: info@comune.sellano.pg.it; support@skiperformance.com)
The provision of data (mandatory or not)
It is mandatory to the extent that it is necessary to comply with explicit requests by the interested party or to comply with specific contractual and/or legal obligations while in other cases it is optional and does not affect the continuation of the relationship.
Profiling
No automated user profiling activity is carried out for the purpose of analyzing or predicting aspects concerning the professional performance, skills, preferences or personal interests, reliability or behaviour, location of the interested party to the extent that this allows us to outline a profile of the interested party with consequent mainly promotional and targeted actions towards him.
Transfer of your data abroad
The transfer of personal data to countries outside the European Union may involve greater risks and as such must be adequately monitored. If the Data Controller makes use of this possibility, he undertakes to collect in advance and make available to interested parties all the supporting documentation with the same methods with which the rights can be exercised.
Your rights
We inform you that you have the right to exercise the following rights in relation to the personal data covered by this information, as provided for and guaranteed by the Regulation:
- Right of access and rectification: you have the right to access your personal data and to request that they be corrected, modified or integrated. If you wish, we will provide you with a copy of the data we hold about you.
- Right to erasure of data: in the cases provided for by current legislation you can request the erasure of your personal data. Once your request has been received and analysed, we will cease processing and delete your personal data, if found legitimate.
- Right to limit processing: you have the right to request the limitation of the processing of your personal data in the event of unlawful processing or dispute of the accuracy of the personal data by the interested party.
- Right to data portability: you have the right to request to obtain your personal data from the Data Controller in order to transmit them to another Data Controller, in the cases provided for in the referenced article.
- Right to object: you have the right to object at any time to the processing of your personal data carried out on the basis of our legitimate interest, explaining the reasons justifying your request; before accepting it, Sellano will have to evaluate the reasons for your request.
- Right to lodge a complaint: you have the right to lodge a complaint before the competent Guarantor Authority for the protection of Personal Data if you believe that it has occurred, or is in progress, a violation of your rights in relation to the processing of your personal data.
- Right to revoke the consent given: for the processing of personal data which finds its legal basis exclusively on your consent, you have the right to revoke, at any time, the consent given by contacting the Data Controller treatment.
At any time you can exercise your rights with reference to the specific processing of your personal data by Sellano.
Further information regarding the rights of the interested party can be obtained by asking the Owner for a complete extract of the articles mentioned above.
Without prejudice to what has been expressed so far, we remind you that the above rights can also be exercised by anyone who has an interest of their own, or who acts for your protection, as your agent, or for family reasons worthy of protection, pursuant to art. 2-terdecies of Legislative Decree 101/2018.
Security measures
Sellano adopts adequate security measures to safeguard the confidentiality, integrity, completeness and availability of the interested party's personal data. Technical, logistical and organizational measures are developed which aim to prevent damage, even accidental losses, alterations, improper and unauthorized use of the data processed.
We proceed to regularly test, verify and evaluate the effectiveness of security measures, in order to guarantee continuous improvement in the safety of treatments.
Changes to this legislation
The constant evolution of our services may lead to changes in the characteristics of the processing of your personal data described above. This privacy policy may undergo changes and additions over time, as necessary due to new regulatory interventions regarding the protection of personal data, or the evolution/modification of our services.
We therefore invite you to periodically check the contents of our information: where possible, we will try to promptly inform you of the changes made and their consequences.