Pursuant to EU Regulation 2016/679, known as the "European General Data Protection Regulation" (GDPR), we inform users that the personal data entered on the site will be processed in the manner and for the purposes described below.
Pursuant to the law, processing of personal data means any operation or set of operations, performed with or without the aid of electronic or automated means, concerning the collection, recording, organization, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion, and distribution of data.
In compliance with the provisions of the new Regulation on the protection of personal data, we communicate the following:
DATA CONTROLLER
The data controller is the Municipality of Mantua in the person of the Mayor.
The owner has appointed a Privacy Administrative Manager and all the heads of the internal functional sectors as Data Processors.
The data controller is identified by the Institution and listed on the administration's institutional portal. The data collected will be used for the purposes indicated below.
OBJECT OF THE TREATMENT
The personal and biographical data (name, surname, email address) collected are provided by the user during registration on Citizen Services portals to allow access to services that provide access to personal information.
PURPOSE OF THE PROCESSING
Personal data is processed for purposes related to the provision of services to citizens by the Public Administration based on a web interface.
METHODS OF TREATMENT
Personal data is processed in accordance with the principles of fairness, lawfulness, and transparency. The data controller ensures that data processing, whether carried out with or without the aid of electronic or automated means, will be carried out using tools that guarantee the security and confidentiality of the data subject, through the use of appropriate procedures that prevent the risk of loss, unauthorized access, unlawful use, and disclosure, in compliance with the limits and conditions set forth in EU Regulation 2016/679.
DATA ACCESS
The entities who may become aware of the user's personal data in their capacity as data controllers or persons in charge (pursuant to Article 13, paragraph 1 of the GDPR) are:
• The Data Controller
• The Data Controller's staff, for the fulfillment of user requests
Personal data will not be disclosed to third parties.
DATA COMMUNICATION
The data may be disclosed to supervisory bodies, judicial authorities, and other third parties to whom disclosure is required by law, including for the prevention/repression of any illegal activity related to accessing the site and/or submitting a request.
DATA TRANSFER
Personal data will be managed and stored on servers located in Italy or within the European Union owned by the Data Controller and/or third-party companies appointed as Data Processors. The data will not be transferred outside the European Union.
DATA RETENTION PERIOD
The data collected for the activities referred to in paragraph 3 will be retained for the duration of the service, after which they will be deleted or anonymized within the timeframes established by law. If the data subject withdraws consent to this specific processing, the data will be deleted or anonymized within 72 hours of receiving the withdrawal. Pursuant to Art. 13, paragraph 2, letter (f) of the Regulation, we inform you that all data collected will not be subject to any automated decision-making process, including profiling.
RIGHTS OF THE INTERESTED PARTY
Users can always exercise the rights set forth in Articles 13 (Paragraph 2), 15, 18, 19, and 21 of the GDPR, summarized here in the following points:
• The interested party has the right to obtain confirmation of the existence of data concerning him, even if not yet communicated, and to have their communication in an intelligible form;
• The interested party has the right to ask the Data Controller for access to personal data, integration, rectification, deletion of the same or limitation of the processing concerning him or her or to oppose their processing, in addition to the right to data portability;
• You have the right to lodge a complaint with the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority on www.garanteprivacy.it
The exercise of these rights is not subject to any formal constraints and is free of charge.
HOW TO EXERCISE YOUR RIGHTS
Users can exercise their rights at any time by sending a request to the data controller.
DATA PROTECTION OFFICER
Name: Imperiali d'Afflitto Law Firm
Legal Representative: Attorney Rosario Imperiali d'Afflitto
Email: rpd@comune.mantova.it