INFORMATION ON THE TREATMENT OF PERSONAL DATA
of users who consult the Garante's websites for the protection of personal data
pursuant to Article 13 of Regulation (EU) 2016/679
PERCHÉ QUESTE INFORMAZIONI
Pursuant to the Regulation (EU) 2016/679 (hereinafter "Regulation"), this page describes the methods of processing personal data of users who consult the websites of the Data Protection Authority (hereinafter "Garante") accessible via telematic to the following addresses:
- www.garanteprivacy.it
- Garanteprivacy. it
- www.gpdp.it
- gpdp.it
- www.dataprotection.org
- dataprotection. or
- services. gpdp.it
- web.gpdp.it
- web.garanteprivacy. it
This information does not concern other sites, pages or online services accessible through hypertext links that may be published on sites but relate to resources outside the domain of the Guarantor.
PROCESSING
After consulting the sites listed above, data relating to identified or identifiable natural persons may be processed.
Data controller is the Data Protection Authority, based in Piazza Venezia 11, IT-00187, Rome (Email: protocollo@gpdp.it, PEC*: Protocol@pec.gpdp.it, power station +39 06.696771).
PROTECTION OF DATA PROTECTION
The Data Protection Officer (RPD) can be reached at: Personal Data Protection Officer – Piazza Venezia 11, IT-00187, Rome, email: rpd@gpdp.it.
LEGAL BASIS OF THE TREATMENT
The personal data indicated on this page are processed by the Guarantor in the performance of his/her duties of public interest or in any case related to the exercise of his/her public powers, including the task of promoting awareness and encouraging the understanding of the public regarding the risks, norms, guarantees and rights in relation to the processing and, moreover, of promoting the awareness of the controllers and processors regarding the obligations imposed on them by the Regulation (Art. 57, paragraph 1, letter).
TYPES OF DATA PROCESSED AND FINALITY OF TREATMENT
Navigation data
The computer systems and software procedures for the operation of this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This data category includes IP addresses or domain names of computers and terminals used by users, URI/URL notation addresses (Uniform Resource Identifier/Locator) of the requested resources, request time, method used in submitting the request to the server, the file size obtained in response, the numeric code indicating the status of the response given by the server (fine, error, etc.) and other operating parameters.
This data, necessary for the use of web services, is also processed in order to:
- obtain statistical information on the use of services (most visited pages, number of visitors per hour or daily, geographical areas of origin, etc.);
- check the proper functioning of the services offered.
The navigation data do not last for more than seven days (although any need to ascertain crimes by the judicial authority).
Data communicated by the user
The optional, explicit and voluntary sending of messages to the contact addresses of the Guarantor, private messages sent by users to the institutional profiles/pages on social media (where this possibility is provided), as well as the compilation and forwarding of the forms present on the sites of the Authority, involve the acquisition of the contact data of the sender, necessary to respond, as well as of all the personal data included in the communications.
Specific information will be published on the pages of the Garante’s sites for the provision of certain services.
Cookies and other tracking systems
No cookies are used for profiling of users, or other tracking methods are used.
Instead, it is made use of session cookies (not persistent) strictly limited to what is necessary for safe and efficient navigation of the sites. The storage of session cookies in the terminals or browsers is under user control, where on the servers, at the end of the HTTP sessions, information about cookies remain recorded in the service logs, with retention times however not exceeding seven days as well as other navigation data.
DESTINARY OF DATA
The data collected as a result of the consultation of the sites listed above are the following subjects designated by the Guarantor, pursuant to Article 28 of the Regulation, as processors.
Etcware S.r.l., on www.garanteprivacy.it, garanteprivacy.it, www.gpdp.it, gpdp.it, www.dataprotection.org, dataprotection.org, as a provider of development and maintenance services of the web platform;
Davide Mascoli, on the website services. gpdp.it as a provider of the services of development, delivery and operational management of the technological platforms used.
The personal data collected are also processed by the Guarantor's staff, which acts on the basis of specific instructions provided for purposes and methods of processing.
RIGHTS OF INTERESTS
The data subjects have the right to obtain from the Garante, in the cases provided for, access to their personal data and rectification or deletion of the personal data or restriction of the processing that concerns them or object to the processing (Art. 15 et seq. of the Regulation). The special application to the Authority is presented by contacting the Data Protection Officer at the Garante (Personal Protection Authority – Data Protection Officer, Piazza Venezia, 11, IT-00187, Rome, email: rpd@gpdp.it).
RIGHT OF RECLAMO
Those interested parties who believe that the processing of personal data to them reported through this site takes place in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for in Article 77 of the Regulation itself, or to refer the appropriate judicial offices (Article 79 of the Regulation).
