INFORMATION ON THE PROCESSING OF PERSONAL DATA (pursuant to Article 13 of Regulation (EU) 2016/679)
This statement describes the methods for managing the official tourist information web portal of the Calabria Region with reference to the processing of the personal data of users, whether identified or identifiable, who consult it and interact with it and with the regional web services accessible by electronic means. The information is provided pursuant to Article 13 of EU Regulation 2016/679 'General Data Protection Regulation' (hereinafter referred to as the GDPR) and the Italian legislation in force for the protection of personal data of users in relation to the address www.calabriastraordinaria.it and not for other external websites that may be linked to this one.
Processing of personal data shall mean any operation or set of operations which is performed upon personal data or sets of personal data, whether or not recorded in a database, whether or not by automatic means, such as collection, recording, organisation, structuring storage, processing, selection, blocking, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.
Following consultation of the above-mentioned site and the associated telematic services, data relating to identified or identifiable natural persons may be processed.
The data controller is the Region of Calabria, in accordance with the powers outlined in the Regional Council resolution n. 626 of 2018, with registered office in Viale Europa, Cittadella Regionale, Località Germaneto 88100 - Catanzaro- telephone switchboard: 0961/8511.
The persons responsible for data processing are the General Affairs Managers of each department and of the structures of the Regional Council appointed under DPGR 41/2019.
DATA PROTECTION OFFICER
The personal data protection officer, as regulated by Article 37 of the GDPR, is a person appointed to perform support and control, advisory, training and information functions in relation to the application of the Regulation. He cooperates with the Data Protection Authority and he is the point of contact, including with respect to data subjects, for matters related to the processing of personal data (Articles 38 and 39 of the GDPR), as well as coordinating the implementation and keeping of records of processing activities (Article 30 of the GDPR). Below are the contact details of the Data Protection Officer:
Name of the Data Protection Officer (DPO)
Lawyer Angela STELLATO | email: firstname.lastname@example.org | CEM: email@example.com
LEGAL BASIS OF PROCESSING
The personal data indicated on this page are processed by the Regione Calabria in the performance of its tasks in the public interest or in any case related to the exercise of its public powers, including the task of promoting awareness and fostering public understanding of the risks, rules, safeguards and rights in relation to the processing and, also, of promoting awareness among data controllers and data processors of the obligations imposed on them by the GDPR (Art. 57, 1, b and d).
Following consultation of this site, data relating to identified or identifiable persons may be processed. The data provided freely and voluntarily by users are acquired and processed in compliance with the rules laid down by the RGPD for the following purposes:
- performance of its public interest tasks or in any case connected with the exercise of its public powers, including the purposes of archiving, historical research and analysis for statistical purposes;
- fulfilment of obligations under laws, regulations, national and European legislation.
Regione Calabria undertakes to respect and to protect confidentiality by processing the personal data provided in compliance with the provisions of the law to ensure the security, accuracy, updating and relevance of the data to the stated purposes. The personal data provided by users forwarding requests are used solely for the purpose of executing the request made from time to time, and they are communicated to third parties only if strictly necessary and functional for this purpose, in compliance with European and national regulations. The data is processed by staff specifically assigned to data processing, only if the processing is necessary for the performance of the assigned tasks.
FURTHER PROCESSING PURPOSES FOLLOWING SPECIFIC AND EXPRESS CONSENT OF THE USERS
In addition to the above-mentioned purposes, the data provided may also be processed, subject to express consent, to communicate events or other initiatives of information or particular interest, as well as for any invitations to participate in initiatives to survey customer satisfaction promoted by Regione Calabria. Consent for these "Further processing purposes" is optional.
OPTION TO PROVIDE DATA
Apart from that specified below for navigation data, the user is free to voluntarily provide personal data contained in the registration forms or interface to the various services of the official website of tourist information of the Calabria Region. The provision of data in the fields marked with an asterisk is compulsory only in order to be able to provide the services or information requested. Failure to provide certain personal data, in the forms and communications requesting information, suggestions or reports to the editorial staff of the site or in any case provided during telephone contacts with the structures of the Region, may only result in the impossibility of obtaining a response to what has been reported or requested.
The processing operations connected to the web services of this site take place at the above-mentioned premises of the Organisation and they are carried out only by technical personnel in charge of processing, or by persons in charge of occasional maintenance operations. No data deriving from the web service is communicated or disseminated, except in cases expressly provided for by law. The personal data provided by users are used for the sole purpose of performing the service or provision requested and expressed in the purposes of processing and they are communicated to third parties only if this is necessary for that purpose.
In relation to the different purposes and the purposes for which they have been collected, the data will be kept for the time provided for by the reference legislation or for the time strictly necessary to pursue the purposes.
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
Personal data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request. Optional provision of data: apart from that specified for navigation data, the user is free to provide the personal data contained in the request forms to Ente. Failure to provide such data may make it impossible to obtain what has been requested.
The computer systems and software procedures used to operate this site acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data, necessary for the use of web services, are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are kept for the time strictly necessary. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
What are cookies?
A "cookie" is a small text file created on the user's computer when the user accesses a particular site, for the purpose of storing and transporting information. Cookies are sent from a web server (which is the computer running the website visited) to the user's browser (e.g. Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the user's device; they are then sent back to the website on subsequent visits.
During browsing, the user may also receive on his or her device cookies from other sites (so-called "third party" cookies) set directly by the operators of these websites and used for the purposes and according to the procedures defined by them.
Types of cookies used by this site
The www.calabriastraordinaria.it website uses technical (navigation and session) cookies and it includes some services provided by third parties that generate cookies stored on the user's computer. These services are:
- GOOGLE ANALYTICS
- USE OF YOUTUBE
You may refuse to accept cookies on your device by adjusting the settings of the program you use to browse the Internet. Deactivating cookies does NOT prevent you from browsing the site, but it may affect the operation of third-party services used within the site.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
The data collected and processed are not transferred to companies or other entities outside the EU.
RIGHTS OF THE PERSONS CONCERNED
Data subjects have the right to obtain, in the cases provided for, access to their personal data and the rectification or erasure of the same or the restriction of processing concerning them or to object to processing (Art. 15 et seq. of the GDPR). The appropriate request to the Regione Calabria is made by contacting the Data Protection Officer.
RIGHT OF COMPLAINT
Data subjects who believe that the processing of personal data relating to them carried out through this website is in breach of the provisions of the GDPR are entitled to lodge a complaint with the Data Protection Authority (art. 77 of the GDPR), following the procedures and instructions published on the official website of the Authority at www.garanteprivacy.it.