Privacy policy app Visit Sabbioneta
Privacy policy
Information on the processing of personal data when using the Visit Sabbioneta App pursuant to Article 13 of EU Regulation 2016/679 (GDPR)
The Visit Sabbioneta website, which is also accessible via APP, sees the Municipality of Sabbioneta as Data Controller, which intends to ensure compliance with the principles enshrined in EU Regulation 2016/679 and the Privacy Code, as amended by Legislative Decree no. 101/2018, relating to the protection of individuals with particular regard to the Processing of Personal Data as well as the free movement of the same also in the public interest consistent with the right to transparency.
This information is provided exclusively for navigation on the Visit Sabbioneta website and not for other websites that may be consulted by the user through links present on the website itself.
Data controller
The data controller of personal data is the Municipality of Sabbioneta, in the person of the pro tempore Mayor, with headquarters in Piazza Ducale 2, 46018 Sabbioneta (Mn) - Telephone: +39 0375 223011 - Pec: comune.sabbioneta@pec.regione.lombardia.it
Data Protection Officer (DPO)
The Data Protection Officer is Empathia Srl
e-mail: dpo@empathia.it – PEC empathia@legalmail.it
Purpose of processing and legal basis
Personal data are processed in compliance with EU Regulation 2016/679, in particular art. 6 - par. 1 letter e) for purposes of public interest, consistent with the accessibility of services and information and the implementation of the Digital Agenda resulting from the application of the Digital Administration Code with Legislative Decree 82/2005.
Therefore the Visit Sabbioneta website intends to guarantee the user, also through the additional navigation service via APP, wide availability of information, news and notices on the territory, to broaden knowledge and facilitate the possibility of visiting every cultural aspect offered by Sabbioneta, a UNESCO heritage site.
Treatment modalities
The data are processed by personnel who have been instructed, trained and authorised to lawfully process the data in accordance with the principles of correctness, lawfulness, transparency, relevance and not excessive in relation to the purposes of collection and subsequent processing.
The personal data of users requesting information are used exclusively to follow up the request and are not transferred or disseminated.
The use of automated processing or decision-making processes or processes aimed at profiling the user of the institutional website of the Municipality of Sabbioneta is not envisaged.
Type of data processed
The computer systems and software procedures used to operate the website acquire for normal operation, some personal data whose transmission is implicit in the use of communication protocols.
In particular with the use of the APP the following data are processed: identification, ID device, telephone number and username, geolocation.
Data recipients
Processing is carried out by authorised persons on the basis of specific appointments, committed to confidentiality and in charge of the relevant activities in relation to the purposes pursued.
Communication and dissemination
Personal data are not subject to dissemination or communication, except in the cases and manner provided for by law.
Conservation period
Data will be retained for a period of time not exceeding the achievement of the specified, explicit and legitimate purposes for which they are collected ("principle of limitation of storage", Art. 5 of the EU Regulation) and in accordance with the deadlines stipulated by legal regulations.
Personal data, the transmission of which is implicit in the use of internet communication protocols, are stored for the duration of the browsing session. Personal data communicated voluntarily by the user in order to receive information are stored for the time necessary for the successful outcome of the request.
Data processed for the use of the APP are retained until they are deleted from the service.
Data transfer abroad
Data are not transferred to third countries outside the European Economic Area.
Rights of the data subject
The data subject's rights (Articles 15÷21 of EU Regulation 2016/679) may be exercised at any time by contacting the Data Controller or the Data Protection Officer at the contact details above and are:
- the right to obtain confirmation as to whether or not personal data concerning him/her are being processed, and access to the same;
- the right to obtain the rectification of data without undue delay, including the integration of data
- the right to obtain erasure of data
- the right to obtain the restriction of the processing and communication of any revocation thereof; and
- the right to data portability;
- the right to object.
The data subject also has the right to lodge a complaint with the supervisory authority (www.garanteprivacy.it).