PRIVACY POLICY
Information on data processing

This page describes how the website is managed with regard to the processing of the personal data of the users who consult it. This information is provided pursuant to Article 13 of the EU Regulation 2016/679, European Regulation on the Protection of Personal Data (hereinafter, "Regulation" or "GDPR") to those who interact with the web services of the site https://www.tignale.org/.

In particular, this statement is intended to provide information on the methods, timing and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection. This information is provided only for the official website of the Special Agency and not for other external websites that may be consulted by the user through links.

1. DATA CONTROLLER
The Data Controller, pursuant to Articles 4 and 24 of EU Reg. 2016/679, is Azienda Speciale Tignale Servizi Manlio Bonincontri, with registered office in Via San Pietro n° 8, 25080 Tignale (BS), tel. 0365 - 761035

2. DATA PROTECTION OFFICER (RPD/DPO)
The Data Protection Officer (DPO/DPO), pursuant to art. 37 of the Regulation, can be contacted at the following email address: ufficioprivacy@casadiriposotignale.it

3. WHAT KIND OF PERSONAL DATA WE COLLECT
"Personal data" means any information relating to an identified or identifiable natural person ("data subject"); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

When you visit our site for information purposes only, we automatically collect certain information relating to your browsing in particular in order to verify the smooth operation of the Site, to guarantee you the best navigation and to increase the quality of our services.

a) Navigation data
The computer systems and software procedures used for the proper functioning of the Site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the browsing of the web sites. This information is not collected in order to be associated with identified interested parties; however, by its very nature it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
b) Data provided voluntarily
Apart from what is specified for navigation data, the user is free to provide the personal data indicated in the request forms to Ente. Failure to provide them may make it impossible to obtain what has been requested..
c) Cookies
For more information on the cookies used by this website, see the cookies policy.

Specific summary information will be published on the pages of the site set up for the provision of certain services.

4. PURPOSE AND LEGAL BASIS OF PROCESSING. DATA RETENTION PERIOD
The data of a personal nature supplied will be processed for the following PURPOSES:

a) navigation of our website: to make it possible and functional to navigate the site, as well as to guarantee an adequate level of security, integrity and availability.
LEGAL BASIS: the processing is necessary for the pursuit of the legitimate interest of the data controller, as set out in Article 6(1)(f) of the GDPR.
PERIOD OF DATA STORAGE: until the duration of the browsing session.

b) Filling in special forms on the site to follow up specific requests made to the Data Controller by the User via the Website and its communication tools; or if the User wishes to contact the tourist office.
LEGAL BASIS: The processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject's request as provided for in Article 6(1)(b) of the GDPR.
DATA STORAGE PERIOD: Until the request is processed and in any case no longer than 6 months.

c) Accommodation availability request. Using the form on the "contact us" page, personal data will be collected in order to provide an accommodation search service in the area. This data will be sent by the Special Agency to the accommodation facilities that will respond directly to the interested party, in their capacity as autonomous data controllers.
LEGAL BASIS: the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject's request as provided for in Article 6(1)(b) of the GDPR.
DATA STORAGE PERIOD: Until the request is processed and in any case no longer than 6 months

d) Defence of a right in court To ascertain, exercise or defend a right in judicial proceedings.
LEGAL BASIS: Processing necessary for the pursuit of the legitimate interest of the data controller, as provided for in Article 6(1)(f) of the GDPR.
PERIOD OF STORAGE OF PERSONAL DATA: until the time limit for appeals is exhausted.

e) Newsletter. Subject to your consent and until your objection, sending of newsletters and promotional material, concerning events and initiatives promoted in the territory of the Municipality of Tignale, by automated means of e-mail, SMS-type messages, or by paper mail and other informative material.
LEGAL BASIS: consent to the processing of one's personal data, as provided for by art. 6 par. 1 lett. a) of the GDPR.
PERIOD OF DATA STORAGE: Until you object (opt-out/revocation of consent) Consent to the processing of your data and communication to the subjects listed below for the aforementioned purposes is optional. You have the right to object to direct marketing activities by contacting the Data Controller or by sending an email to: ufficioprivacy@casadiriposotignale.it

5. NATURE OF PROCESSING
Apart from what is specified for navigation data, the user is free to provide personal data in dedicated areas on the site. The optional, explicit and voluntary sending of messages to the addresses indicated on this site, as well as the filling in and forwarding of the forms on the site, entails by its very nature the subsequent acquisition of the sender's contact data, necessary to reply to requests, as well as any other personal data included in the message. The user is free to provide personal data to subscribe to the newsletter, request information material or other types of services offered by the Special Agency.

6. PROCESSING METHODS
The processing will be carried out using manual and/or computerised and telematic instruments with organisational and processing logics strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organisational, physical and logical measures provided for by the provisions in force.

7. RECIPIENTS OF PERSONAL DATA
Personal data may be processed by the personnel of the company, who will act on the basis of specific instructions provided as to the purposes and methods of processing pursuant to Article 29 of the Regulation. Furthermore, they may be communicated to subjects designated, pursuant to Article 28 of the Regulation, as Data Processors, such as, by way of example, suppliers of IT and logistical services functional to the operation of the Site and/or Newsletter Services, suppliers of outsourcing or cloud computing services, professionals and consultants.
In the pursuit of the purposes indicated above, the data may be communicated to other subjects acting as autonomous Data Controllers.
The complete and updated list of Data Processors is available at the offices of the Special Agency.

8. TRANSFER OF DATA ABROAD
Personal Data collected by us for the purposes described in this Policy will be disclosed and transferred to companies and entities within the European Economic Area (EEA). Should the data be transferred to a third country, in the absence of an adequacy decision by the European Commission, the requirements of the applicable legislation on the transfer of Personal Data to third countries, such as the Standard Contractual Clauses provided by the European Commission, will still be respected.

LINKS TO EXTERNAL WEBSITES
This website contains hypertext links to so-called "links" (i.e., tools that allow a connection to a web page of another site): the external sites that can be reached through links through the Special Agency's Portal are developed and managed by subjects over which the Agency has no ownership or control and is in no way responsible for their contents, quality, accuracy and services offered. The visit and use of the sites consulted by the user from this site via links, therefore, is left exclusively to the total discretion and responsibility of the user. This notice, therefore, is provided only for this website and not for any other websites that may be consulted by the user via links.

9. RIGHTS OF THE DATA SUBJECT
You may assert your rights as expressed in Articles 15, 16, 17, 18, 19, 20, 21 of the EU Regulation 2016/679, by requesting at any time, from the Data Controller, access to your personal data, rectification, erasure, restriction of processing and portability of your data, where applicable. In addition, you have the right to object or revoke your consent, at any time, without affecting the lawfulness of the processing based on the consent given before revocation. In order to stop receiving automated direct marketing communications (e.g. e-mails, text messages), it will be sufficient to write an e-mail at any time with the subject "unsubscribe" or to use our automatic unsubscription systems provided for e-mails only. To exercise the above rights, the interested party may contact the Data Controller at the addresses indicated in this information notice or send an e-mail: ufficioprivacy@casadiriposotignale.it

Complaint
In any case, you always have the right to lodge a complaint with the Garante per la Protezione dei Dati Personali, www.garanteprivacy.it, pursuant to Art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force, or to take appropriate legal action.

10. UPDATES
This privacy policy may be amended and/or supplemented as a result of any subsequent regulatory changes and/or additions, the updating or provision of new services or technological innovations.

Rev. 04/04/2023