PRIVACY POLICY (ART. 13 REG. 679/2016) - WEBSITE NAVIGATION
Dear User,
this information is provided by the Municipality of Udine in accordance with the provisions of Regulation 679/2016 (GDPR) on the protection of personal data in order to describe the methods of processing personal data of users who visit this website.
Data controller
Municipality of Udine (hereinafter also the Owner)
registered Office in Via Lionello, 1, 33100 Udine (UD)
Telephone: +39 0432 1272616
e-mail:
Data Protection Officer (DPO)
The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail:
The personal data collected on this site and any other information associated with you, directly or indirectly, are processed and used in accordance with EU Regulation n. 679/2016 (GDPR) on the protection of personal data.
In particular, the computer systems and software procedures responsible for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified data subjects, but that by their very nature could, through processing and association with data held by third parties, allow to identify users. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good end, error, etc.) and other parameters related to the operating system and the computer environment of the user. This data is used only to obtain anonymous statistical information on the use of the site and to check its correct functioning.
In addition, the Data Controller informs you that the data you provide are processed by means of IT tools and procedures, for the following purposes:
Manage and improve navigation on the site
Subscription to the Newsletter service through the appropriate form (see also specific information)
Sending a request for access to the Museum’s collections through the appropriate form (see also specific information)
Technical management of navigation (see website cookie policy section)
The data you provide may only be known by the staff and collaborators of the Data Controller and possibly by companies that in outsourcing process data on behalf of the Data Controller, however, for the sole purpose of perfecting the activities requested by you.
Some data may be processed for exclusive technical/IT management purposes of the web service, by technological partners of the Data Controller. In any case, the data will never be disseminated.
EXERCISE OF PERSONAL DATA PROTECTION RIGHTS
We inform you of the existence of certain rights regarding the protection of personal data, listed below, and how to exercise them against the Data Controller:
Right to withdraw consent (Art. 13): You have the right to revoke your consent at any time for all processing operations whose legitimacy presupposes your consent. The withdrawal of consent does not affect the lawfulness of the previous processing.
Right of access to data (Art. 15): You may request a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations; d) where possible, the envisaged retention period for personal data or, if not possible, the criteria used to determine that period; e) the existence of the data subject’s right to ask the data controller to rectify or delete personal data or to restrict the processing of personal data concerning him or her or to object to their processing; f) the right to lodge a complaint with a supervisory authority; g) where the data are not collected from the data subject, all available information on their origin; h) the existence of an automated decision-making process, including profiling as referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject. You have the right to request a copy of the personal data processed.
Right of rectification (Art. 16): You have the right to request the rectification of inaccurate personal data concerning you and to obtain the integration of incomplete personal data.
Right to be forgotten (Art. 17): You have the right to obtain from the data controller the cancellation of the personal data concerning you if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, if you revoke your consent, if there is no overriding legitimate reason to proceed with the profiling processing, if the data has been unlawfully processed, if there is a legal obligation to delete them; if the data relates to web services to minors without consent. Deletion may take place unless the right to freedom of expression and information prevails, whether it is retained for the fulfilment of a legal obligation or for the performance of a task performed in the public interest or in the exercise of official authority, for reasons of public interest in the field of health, for the purpose of archiving in the public interest, for scientific or historical research or for statistical purposes or for the establishment, exercise or defence of a right in court.
Right to restriction of processing (Art. 18): You have the right to obtain from the data controller the restriction of processing when you have contested the accuracy of the personal data (for the period necessary for the controller to verify the accuracy of such personal data) or if the processing is unlawful, if it is necessary for the establishment, exercise or defence of a right in the courts.
Right to portability (Art. 20): You have the right to receive in a structured, commonly used and machine-readable format the personal data you have provided to us and you have the right to transmit it to another person if the processing was based on consent, on the contract and whether the processing is carried out by automated means, unless the processing necessary for the performance of a task in the public interest or in connection with the exercise of official authority, and that transmission does not affect the right of third parties.
Right to contact the Data Protection Authority (Art. 77): Without prejudice to any other administrative or judicial recourse, if you consider that the processing of your personal data infringes the Regulation on the protection of personal data, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of habitual residence, employment or the place where the alleged infringement occurred.
The exercise of the aforementioned rights is subject to the limits, rules and procedures provided for by Regulation 679/2016 and that the User must know and implement.
In accordance with art. 12 para. 3 of this Regulation, moreover, the Data Controller will provide the data subject with information on the action taken without undue delay and, in any case, at the latest within one month of receipt of the request. This period may be extended by two months, if necessary, taking account of the complexity and number of requests. The Data Controller shall inform the Data Subject of this extension, and of the reasons for the delay, within one month of receipt of the request.
To exercise the above rights you can use the model on thispageto be sent to the Data Controller or the DPO, duly completed and signed.