PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to articles 13 and 14 of the general EU data protection regulation 2016/679
Data Processing
The Cammino Minerario di Santa Barbara Foundation, in compliance with the principles established by Regulation (EU) 2016/679 (hereinafter the “Regulation”), offers users the possibility of interacting with its portal to consult or use the related services, accessible through the address https://www.camminominerariodisantabarbara.org corresponding to the home page of the Cammino Minerario di Santa Barbara website.
This page, in addition to describing how to manage the site, pursuant to articles 13 and 14 of the aforementioned “Regulations” has the purpose of informing users who connect to the portal, also with regard to the processing of personal data and the related guarantees recognized by law.
This information is provided exclusively for the Cammino Minerario di Santa Barbara site and not for other websites that can be consulted by the user via links.
The Data Controller
The data controller is the Santa Barbara Mining Path Foundation, with headquarters in Iglesias (SU) Piazza Municipio n. 1, who can be contacted at the following addresses: tel. 0781.24132, e-mail amministrazione@cmsb.it , pec caminodisantabarbara@pec.it .
The data protection officer (RPD or DPO)
The data protection officer (RPD or DPO) is the lawyer. Giovanni Ledda, with office in Cagliari Piazza Repubblica n. 10, who can be contacted at the following numbers: tel. 070.303361, cell. 339.83589721, e-mail avvoledda@studiolegalegiovanniledda.it , certified email giovanni.ledda@legalmail.it .
Legal basis of the treatment
Personal data will be processed in relation to the services offered by the Cammino Minerario di Santa Barbara Foundation through its Unione Comuni del Villanova portal, exclusively for the purposes that fall within the institutional tasks of the Administration or for the fulfilments required by law or regulation .
Within the scope of these purposes, the processing also concerns data relating to registrations/registrations on the portal necessary for the management of relations with the Organization, as well as to allow effective institutional communication and to fulfill any legal, regulatory or contractual obligations .
Where the data processing is carried out outside this legal basis, information will be provided and consent to the processing will be requested.
Type and nature of the data processed
Navigation data
Access to the site involves the recording of data used for the sole purpose of obtaining statistical information or to ensure correct functioning. The data collected includes the IP addresses and/or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the resources requested, the time of the request, the method used in submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are not collected for the purpose of associating them with identified subjects, however due to their nature they could allow users to be identified through processing and association with data held by third parties especially when it is necessary to ascertain responsibility in case of hypothetical computer crimes against the site.
The data used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, are kept for the time necessary to carry out the analysis and comparative statistical processing activities and in any case for a period of time not exceeding 12 months.
Data communicated by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated in the various access channels to the site and the compilation of the formats (masks) involve the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other data personal data included in the message.
In this case, the acquired data will be processed exclusively to respond to user requests, for example, regarding the use of a service, problems connecting to the site, problems navigating the site, problems accessing site services or problems accessing your account.
In order to better contextualize the question, users may be contacted via email, telephone or other communication systems by an operator of the Administration. Specific summary information will be reported or displayed on the pages of the site set up for particular services on request.
Cookies and other tracking systems
No personal user data is purposely acquired by the site.
The use of so-called session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow the safe and efficient exploration of the site.
The so-called session cookies used on this site avoid the use of other IT techniques potentially prejudicial to the confidentiality of users’ browsing and do not allow the acquisition of personal identification data of the user.
The use of persistent cookies is strictly limited to the acquisition of statistical data useful for understanding the level of use of one’s site.
The site uses analytics cookies used to collect information, in aggregate form, on the number of Users and on how they visit the Site; analytics cookies allow, among other things, the collection and processing of User navigation data, including IP addresses or domain names of the computers used by Users who connect to the Site, addresses in URI notation ( Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, and other parameters relating to the operating system and the User’s IT environment; the data is collected for the sole purpose of processing anonymous statistical information on the use of the Site and to verify its correct functioning;
Recipients of the data collected and methods of treatment
The personal data collected is processed by the personnel of the Foundation, who act on the basis of specific instructions provided regarding the purposes and methods of the processing itself, in compliance with the so-called “principle of minimisation”.
The personal data provided by users who register and provide references such as name, surname, residence, telephone numbers, e-mail address, can be used for other processing operations in terms compatible with the purposes of collection such as sending, by e-mail, institutional and public utility communications.
The personal data of users who request documents or informative material (newsletter, answers to questions, deeds and provisions, etc.) are used only to perform the service or provision requested and are communicated to third parties only if it is for this purpose necessary (shipping services and the like).
The data relating to the online service are not subject to communication or dissemination, unless the provisions of the law or regulation provide otherwise.
Rights of the interested parties
Each interested party, pursuant to articles from 15 to 22 of EU Regulation no. 2016/679, has the right to:
- a) request confirmation of the existence or otherwise of personal data;
- b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
- c) obtain the rectification and cancellation of data;
- d) obtain the limitation of the treatment;
- e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
- f) oppose the treatment at any time;
- g) ask the data controller to access personal data and correct or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;
- h) withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
- i) lodge a complaint with a supervisory authority.
The aforementioned rights may be exercised with a written request sent to the Fondazione Cammino Minerario di Santa Barbara, to the postal address of the registered office or to the email address amministrazione@cmsb.it or via pec to caminodisantabarbara@pec.it .
Right of complaint
Interested parties who believe that the processing of personal data referring to them carried out through this site occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by art. 77 of the Regulation itself, or to take the appropriate judicial offices (art. 79 of the Regulation).