PRIVACY POLICY

Information on the processing of personal data pursuant to EU Regulation No. 679/2016 (GDPR) and other applicable regulations

Protecting your privacy and personal data is an important matter that we take seriously in all our business relationships and services offered. We respect the confidentiality of your personal data and always act in compliance with data protection laws and this Privacy Policy.

Introduction

This page aims to inform the Data Subject/User about how Comune di San Giovanni Lupatoto uses personal data collected through the website www.visitsangiovannilupatoto.it and related online applications, regardless of the purpose of the connection. This policy does not extend to websites that the user may access via links.
It describes the methods of data collection and processing, specifying: types of data, legal basis, recipients of processing (including foreign ones), retention period, rights of the Data Subject, whether data communication is mandatory and the consequences of refusal, possible automated decision-making processes (including profiling), and categories of processed data. By visiting this website, data related to identified or identifiable individuals may be processed pursuant to Articles 4 and 24 of EU Regulation 2016/679 (GDPR). Such information is collected, evaluated, and subsequently used exclusively for authorized and permitted purposes and is not shared with third parties, except with explicit authorization or when specified for the intended purposes. This policy complies with Articles 12, 13, and 14 of EU Regulation 2016/679 (GDPR).

1. Data Controller

The Data Controller is Comune di San Giovanni Lupatoto, located at Via Roma, 18, 37057 San Giovanni Lupatoto VR, Italy, and can be contacted at cultura@comune.sangiovannilupatoto.vr.it. Processing operations will be carried out by designated personnel acting under the direct authority of the Data Controller, in compliance with the instructions received.

2. Personal Data Collected and Processed

Browsing Data

The IT systems and software procedures that enable this website to function acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. The collected data includes information related to accesses, such as IP addresses and domain names of the computers used by users connecting to the site, as well as other parameters related to the user’s IT environment (such as the internet browser used, operating system, domain name of the last visited website before accessing our website, number of visits, time spent on our website, and accessed pages). These data are used solely to obtain anonymous statistical information on the site’s use and to check its proper functioning. The automatically collected data is not associated with data from other sources, preventing the identification of Data Subjects. However, we reserve the right to retroactively verify and associate such data if concrete indications of illegal use are reported.

Data Voluntarily Provided by the User

Some personal data (e.g., name, surname, email address, etc.) are requested from the user for registration or to access online services on our website. In these cases, personal data is collected voluntarily and optionally. Each service on our website has a dedicated privacy policy allowing the user to precisely understand the relevant processing. We believe this is the best way to ensure fairness, transparency, and clarity in the information provided to the user.
If the user voluntarily sends emails or physical mail to the addresses listed on this website, this will result in the acquisition of the sender’s email or postal address, necessary to respond to requests, as well as any other personal data included in the message. The personal data collected in this case pertains exclusively to:

• Identification data (e.g., name, surname, address, phone number, fax, email, etc.).
• Fiscal data (if required by law, e.g., tax code, VAT number, etc.).
  Personal data of a different nature or unrelated to those specified above (such as sensitive or judicial data) will be processed in compliance with EU Regulation 2016/679 and related laws only with the explicit consent of the Data Subject and only if necessary for the intended purposes. Otherwise, they will be ignored and not processed or destroyed, except when required to fulfill contractual obligations or legal duties.

Cookies

This website uses various Cookies to enhance and facilitate navigation. For all information regarding cookies used on this website, please visit the Cookies page.

3. Lawfulness, Purpose, and Processing Methods

The personal data provided by the Data Subject when interacting with this website will be processed in compliance with the lawfulness conditions under Article 6 of EU Regulation 2016/679 (explicit consent, contract performance or pre-contractual measures, legal obligations, legitimate interest of the Data Controller) and will be processed and used only to the minimum extent necessary for the following purposes:

• Operation and improvement of website navigation.
• Provision, enhancement, and support of our online services.
• Response to inquiries submitted via the contact form (with a dedicated privacy policy).
• Legitimate interest of the Data Controller.
• Compliance with legal and regulatory obligations.
  Personal data will be processed using computerized, telematic, and paper-based methods and stored in relevant databases accessible exclusively by the Data Controller and authorized personnel. For all processed data, appropriate security measures have been adopted to protect the rights, freedoms, and legitimate interests of the Data Subject. Furthermore, specific security measures are in place to prevent data loss, illegal or improper use, and unauthorized access. This website operates with an encrypted HTTPS connection (SSL certificate).

4. Mandatory Data Submission

Data transmitted through the implicit use of Internet communication protocols, as specified earlier, is automatically provided and necessary for website navigation.
For online services offered on this website, data marked as mandatory in the relevant forms must be provided to access the requested service and/or establish professional or work relationships. Beyond the required fields, users are free to provide additional personal data while browsing this website or filling out online service forms.

5. Data Processing Location

Processing related to web services on this site occurs at the aforementioned Data Controller’s premises and is handled only by authorized personnel or occasional maintenance staff. The acquired data is stored on web servers in dedicated server farms located in Italy and the EU.

6. Possible Data Recipients

Data is never transmitted to third parties unless necessary for achieving the intended purposes, providing services, fulfilling orders or contracts, or meeting legal obligations.
Additionally, data may be disclosed to fulfill legal requirements, safeguard security, prevent fraud, or enforce agreements.
In certain cases, data may be shared with:

• Accountants (if required by law or in the subject’s interest).
• Lawyers (if required by law or in the subject’s interest).
• Technical and/or commercial consultants for requested services.

7. Data Retention Period

Data is stored for historical/statistical purposes or to comply with legal and regulatory obligations for a maximum of 10 years. If no specific law applies, data is retained for no more than 5 years before being anonymized or destroyed.

8. No Automated Decision-Making

This website does not use automated decision-making or profiling systems.

9. Data Subject Rights

The Data Subject has the right to:

• Request confirmation of data processing.
• Obtain information on stored personal data.
• Revoke consent.
• Request data deletion or modification.
• Object to data processing.
  For further information, the Data Subject may visit the website of the Italian Data Protection Authority at www.garanteprivacy.it.

For more information regarding privacy laws and rights, the Data Subject can visit the website of the Italian Data Protection Authority at: www.garanteprivacy.it.

The Data Subject who wishes to exercise their rights must use the contact details of the Data Controller.