Version updated 19 April 2020

Data controller

Province of Southern Sardinia - Via Mazzini, 39 09013 carbonia

Holder's email address: protocollo@cert.provincia.sudsardegna.gov.it

The Data Controller pays the utmost attention to the confidentiality, protection and security of the personal data of the persons with whom it comes into contact. The user of this site is therefore invited to first visit all sections of this document, which describes how the site is managed in relation to the processing of personal data of persons consulting it. This document also serves as information, pursuant to Article 13 of EU Regulation 2016/679 and the applicable national legislation on the processing of personal data, for all those who interact with the web services of the Data Controller, which can be accessed electronically at the address www.provincia.sudsardegna.it

This information is provided and is valid only for this site and not for other websites that may be consulted by the user through links present on the site. The Data Controller has no control over these sites or over the procedures applied by them to respect data confidentiality and, therefore, we suggest that you consult the confidentiality policies of all those with whom you come into contact before communicating personal information.

Data Protection Officer

Where applicable, the data protection officer's details can be obtained by the data subject by sending a simple request to the e-mail address dpo@provincia.sudsardegna.gov.it.

Types of data processed and purposes of processing

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could allow users to be identified through processing and association with data held by third parties. This category of data includes the IP addresses or domain names of the devices used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation. Except as expressly provided for in the "communication and transfer of data" section, these data are not communicated to third parties and are not disseminated.

Cookies

A "cookie" is a small text file transferred from the web server to the user's device, the purpose of which is to inform the server of the user's accesses to that particular web page, and of any other information it obtains from the system's readable parameters by means of functions contained in the web page. Cookies can be "temporary" (or session cookies, they are deleted at the end of the connection) or "permanent" (they remain stored on the user's hard disk, unless the user deletes them). This site uses session cookies and persistent cookies for:

• keep track of anonymous browsing sessions;
• improve navigation within the site;
• customise services;
• analysing site traffic patterns in aggregate form.

The persistent cookies we use can only store personally identifiable data if the user has registered on the site or has consented to the storage of the personally identifiable data entered on the site. Otherwise, our server only recognises that an unidentified visitor has returned to the site with that particular cookie.

With the exception of what is expressly provided for in the section 'communication and transfer of data', these data are not communicated to third parties and are not disseminated.

The user has the possibility, depending on the web browser in use, to disable or selectively accept the use of cookies. In this case navigation may not be as smooth, some functions of the site may not be available and some web pages may be displayed incorrectly.

You can access the full cookie policy via the link available at the bottom of this site or by clicking here.

Data provided voluntarily by the user https://www.provincia.sudsardegna.it/it/cookie

You are only asked for personal data (e.g. first name, last name, e-mail address, etc.) if you wish to contact us or make use of the services offered on our site. In such cases, the user is provided with appropriate information in this regard and, where necessary, is asked to give his/her consent. The processing of the data provided by the user will take place in compliance with the purposes and methods indicated in this information notice and in the specific information notices made available from time to time.

Treatment modalities

Personal data are processed by manual and computerised means in order to achieve the purposes for which they were collected. Specific security measures are observed to prevent loss of data, unlawful or incorrect use and unauthorised access.

The data will be processed by personnel directly employed by the Data Controller and/or by natural or legal persons specifically designated by the latter as data processors, duly appointed data processors and their appointees.

Legal basis

The data processed through this website and the services made available through it are processed on the basis of consent and/or on the basis of contractual agreements.

Recipients of treatment

The recipients of the processing are all users of the website or of the services made available through the same, aged 16 years or over, or aged 18 years or over where provided for in the individual policies.

Optional provision of data

Users are free to decide whether or not to provide their personal data to the Controller through this website and/or the services connected to it. Failure to provide data, as indicated on a case-by-case basis in the information provided to the user, may make it impossible for the Controller to provide the requested service.

Communication and data transfer

Under no circumstances will the data provided be disclosed or communicated to third parties, with the exception of subjects whose right to access the data is recognised by law or by orders of the authorities, as well as subjects, including external and/or foreign subjects, whose services are used by the Data Controller for the performance of activities that are instrumental and/or accessory to the services offered and to the benefits associated with them, including suppliers of software solutions, web applications and storage services also provided through cloud computing systems.

You are also advised that in order to provide the above services, the data collected may be transferred to servers that may be located in countries outside the EU. In this case, the Data Controller will guarantee appropriate security measures on the basis of the provisions of the Regulation. Further information can be obtained by the data subject by sending a simple request to the Controller.

Duration of treatment

Unless otherwise specified in the individual information notices, personal data will be processed for as long as the person concerned uses this website and the services provided through it. If consent is withdrawn, personal data will be retained by the Data Controller in order to prove the fulfilment of its obligations, until such time as they become statute-barred.

Rights of data subjects

The persons to whom the personal data refer may at any time exercise their rights vis-à-vis the Data Controller pursuant to Articles 15 to 22 of the Regulation and the applicable national legislation on the processing of personal data. In particular, they may:

• have access to the data and receive confirmation of the existence or non-existence of personal data concerning them, even if not yet recorded, and have them communicated in an intelligible form;
• obtain information on the origin of the personal data, the purposes and methods of processing; the logic applied in the event of processing carried out with the aid of electronic instruments; the identification details of the data controller, data processors and the designated representative; the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors or persons in charge of processing;
• obtain the updating, rectification or integration of the data, as well as the portability of the data;
• obtain the deletion, restriction, transformation into anonymous form or blocking of processed data, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• have certification that the aforementioned operations have been brought to the attention of those to whom the data have been communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared with the right protected;
• object, in whole or in part, on legitimate grounds, to the processing of personal data concerning them, even if pertinent to the purpose of collection, and to the processing of personal data concerning them for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

The data subject also has the right to lodge a complaint with a supervisory authority, which in Italy is the 'Garante per la protezione dei dati personali'. The data subject also has the right to revoke the consent given for the processing of data at any time. To exercise these rights, the data subject may contact the Data Controller directly by writing to the contact details given in this policy.

Newsletter and promotional communications

The use of personal data for sending newsletters and/or communications relating to events, initiatives or promotions or other present and/or indicated on this website will only take place with the user's prior consent. To stop receiving newsletters and/or communications of any other kind by e-mail, simply follow the instructions contained in the last e-mail received or send an e-mail to the Data Controller. Upon receipt of the e-mail we will provide for the cancellation.