Version updated on April 19, 2020

Data controller

Province of Southern Sardinia – Via Mazzini, 39 09013 Carbonia

Email address of the owner: protocollo@cert.provincia.sudsardegna.gov.it

The Data Controller places the utmost importance on the confidentiality, protection, and security of the personal data of those with whom it comes into contact. Users of this site are therefore invited to first visit all sections of this document, which describes the site's management methods with regard to the processing of personal data of those who consult it. This document also serves as information, pursuant to Art. 13 of EU Regulation 2016/679 and applicable national legislation regarding the processing of personal data, for all those who interact with the Data Controller's web services, accessible electronically at www.provincia.sudsardegna.it

This information is provided and applies only to this website and not to other websites that may be accessed via links on the site. The Data Controller has no control over these sites or their data privacy practices. Therefore, we recommend that you review the privacy policies of all parties you interact with before providing personal information.

Data Protection Officer

Where applicable, the data relating to the data protection officer can be obtained by the interested party by sending a simple request to the email address dpo@provincia.sudsardegna.gov.it.

Types of data processed and purpose of treatment

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could allow users to be identified through processing and association with data held by third parties. This category of data includes the IP addresses or domain names of the devices used by users connecting to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.), and other parameters relating to the user's operating system and IT environment. This data is used solely to obtain anonymous statistical information on the use of the site and to verify its proper functioning. Except as expressly provided in the "Data communication and transfer" section, this data is not communicated to third parties and is not disseminated.

Cookies

A "cookie" is a small text file transferred from a web server to a user's device. Its purpose is to inform the server about the user's access to that particular web page, as well as any other information it obtains from system-readable parameters via functions contained on the web page. Cookies can be "temporary" (or session cookies, which are deleted at the end of the connection) or "permanent" (which remain stored on the user's hard drive unless the user deletes them). This site uses session cookies and persistent cookies to:

• track browsing sessions anonymously;
• improve navigation within the site;
• personalize services;
• analyze site traffic patterns in aggregate form.

The persistent cookies we use can store personally identifiable information only if the user has registered on the site or has consented to the storage of the personally identifiable information entered on the site. Otherwise, our server only recognizes that an unidentified visitor, using that particular cookie, has returned to the site.

Except as expressly provided in the "Data communication and transfer" section, this data is not communicated to third parties and is not disseminated.

The user has the possibility, depending on the web browser in use, to disable or selectively accept the use of cookies. In this case navigation may not be equally easy, some functions of the site may not be available and some web pages may be displayed incorrectly.

You can access the full information on cookies via the link available at the bottom of this site or clicking here.

Data provided voluntarily by the user https://www.provincia.sudsardegna.it/it/cookie

We ask users for personal data (e.g., first name, last name, email address, etc.) only if they wish to contact us or use the services offered on our website. In such cases, we provide appropriate information and, where necessary, ask for their consent. The data provided by the user will be processed in accordance with the purposes and methods indicated in this policy and any specific information made available from time to time.

Method of treatment

Personal data is processed using manual and electronic means to achieve the purposes for which it was collected. Specific security measures are implemented to prevent data loss, illicit or incorrect use, and unauthorized access.

The data processing will be carried out by personnel directly employed by the Data Controller and/or by natural or legal persons specifically identified by the latter as persons in charge, appropriately appointed managers and their data processors.

Legal basis

The data processed through this website and the services made available through it are processed on the basis of consent and/or contractual agreements.

Recipients of the treatment

The recipients of the processing are all users of the website or the services made available through it, aged 16 or over, or aged 18 or over, where provided for in the individual information notices.

Optional nature of providing data

Users are free to decide whether or not to provide their personal data to the Data Controller through this website and/or its related services. Failure to provide data, as indicated on a case-by-case basis in the information provided to users, may make it impossible for the Data Controller to provide the requested service.

Communication and data transfer

The data provided will not be disclosed or communicated to third parties under any circumstances, except for those authorized to access the data by law or by order of the authorities, as well as any parties, including external and/or foreign, that the Data Controller uses to perform activities that are instrumental and/or ancillary to the services offered and the benefits associated with them, including suppliers of software solutions, web applications, and storage services, including those provided via cloud computing systems.

Please also note that to provide the above services, the collected data may be transferred to servers located in non-EU countries. In this case, the Data Controller will ensure appropriate security measures in accordance with the Regulation. Further information can be obtained by sending a simple request to the Data Controller.

Duration of treatment

Unless otherwise specified in the individual privacy policies, personal data will be processed for the entire period in which the interested party uses this website and the services provided through it. In the event of withdrawal of consent, personal data will be retained by the Data Controller to demonstrate fulfillment of its obligations, until their statute of limitations has expired.

Rights of interested parties

The subjects to whom the personal data refers may at any time exercise their rights towards the Data Controller pursuant to Articles 15 to 22 of the Regulation and applicable national legislation regarding the processing of personal data. In particular, they may:

• access the data and obtain confirmation of the existence or otherwise of personal data concerning them, even if not yet recorded, and have it communicated in an intelligible form;
• obtain information on the source of the personal data, the purposes and methods of processing; the logic applied in the event of processing carried out with the aid of electronic tools; the identification details of the owner, managers, and designated representative; the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers, or persons in charge;
• obtain the updating, rectification or integration of data, as well as their portability;
• obtain the erasure, limitation, transformation into anonymous form or blocking of processed data, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• have certification that the aforementioned operations have been brought to the attention of those to whom the data have been communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right;
• object, in whole or in part, for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of collection, and to the processing of personal data concerning them for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communications.

The data subject also has the right to lodge a complaint with a supervisory authority, which in Italy is the "Garante per la protezione dei dati personali" (Italian Data Protection Authority). The data subject also has the right to withdraw consent to data processing at any time. To exercise these rights, the data subject may contact the Data Controller directly using the contact details provided in this policy.

Newsletter and promotional communications

The use of personal data to send newsletters and/or communications regarding events, initiatives, promotions, or other information present and/or indicated on this website will only occur with the user's prior consent. To stop receiving newsletters and/or other communications by email, simply follow the instructions in the last email received or send an email to the Data Controller. Upon receipt of the email, we will unsubscribe.