Dear User,

We inform you that access to our websites and/or any requests for information or services require the provision of personal data that will be processed in full compliance with European Regulation 2016/679 (GDPR).

Therefore, below, you are given all the information, complete and detailed, regarding the methods and the purposes of the processing of your personal data.

DATA CONTROLLER

The Data Controller is Associazione Enti locali per le attività culturali e di spettacolo, with headquarters in Via Pasquale Paoli n.25 – 09128 Cagliari, which can be contacted at the following email address: direzione@assoentilocali.it.

The Organisation has appointed a DPO (Data Protection Officer) which can be contacted at the following  email address: direzione@assoentilocali.it.

CATEGORIES OF DATA PROCESSED, PURPOSE OF TREATMENTS AND LEGAL BASIS

Website

Through the website, different categories of personal data are collected and processed for different purposes and in different ways. Personal data is information about a defined or definable natural person.

Newsletter

Through the website you have the opportunity to subscribe to our newsletter that will keep you informed about new initiatives and events. Sending the newsletter is based on your explicit consent pursuant to art. 6, paragraph 1, lett. a) in conjunction with art. 7 of the GDPR.

Audiovisual material

On the occasion of events organized as part of the COOLTOUR project, audio-visual material can be produced, which can be disseminated on the project’s social media, sites and channels to document the activities performed.

When this material is considered obsolete, it will be removed from the project’s sites. It is understood that the images once published may be saved and then processed by third parties in a completely independent manner, without any consequent responsibility of Associazione Enti locali per le attività culturali e di spettacolo.

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

This data is used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and is deleted immediately after processing.

We also collect such data to be able to recognize system errors and cyber-attacks and to be able to implement protective measures to prevent abuse. Conservation takes place according to the principle of necessity.

The legal basis for the processing is art. 6, paragraph 1, lett. f) of the GDPR (the processing is necessary for the pursuit of the legitimate interest of the data controller).

NATURE OF THE PROVISION OF DATA

With the exception of navigation data, data communication is free and optional; however, failure to provide such data may make it impossible to obtain a response to what has been requested.

DATA PROCESSING METHODS

The data processing is performed through paper and computer media.

The data is stored in electronic archives and, on a residual basis, paper with full assurance of the minimum-security measures provided by the legislator, so as to minimize the risk of destruction or loss, even accidental, of the data themselves, of access not authorized or processing not allowed or not in accordance with the collection purposes indicated in this Privacy Policy.

No automated decision-making process is performed on the site.

CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Personal data will be processed by authorized employees of Associazione Enti locali per le attività culturali e di spettacolo as data controller and leader of the COOLTOUR project. These data will be shared with the COOLTOUR project partners, as Data Processors, and with selected organizations that collaborate with the COOLTOUR project.

Such data may be communicated, as far as their respective and specific competence is concerned, to Entities and in general to any public or private subject with respect to which there is an obligation for us (or faculty recognized by law or secondary or community legislation) or need for communication, as well as to our consultants, to the extent necessary to carry out their duties in our organization, subject to a letter of appointment that imposes the duty of confidentiality and security.

The Data Controller may transfer personal data to third countries or international organizations. In this case, in accordance with the legal requirements, personal data is transferred only if the European Commission has taken an adequacy decision against the third country, and if adequate guarantees have been agreed. Associazione Enti locali per le attività culturali e di spettacolo also reserves the right to use cloud services, in which case the service providers will be selected from among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

RIGHTS OF INTERESTED PARTIES

Pursuant to EU Regulation 2016/679, the interested party enjoys the rights referred to in section 2, 3 and 4 of Chapter III of Regulation (EU) 2016/679. In particular, you have the right to ask the Data Controller: access to personal data and the correction, deletion of the same, limitation of the processing that concerns them, opposition to their processing and data portability. In addition, you have the right to lodge a complaint with a supervisory authority if you consider that your data treatment violates EU Regulation 2016/679. 

In order to receive the full privacy policy and/or information about your Personal Data, the purposes and the parties the Data is shared with, contact with: direzione@assoentilocali.it.

REVOCATION

You may revoke the consent you have given us at any time; likewise, you may exercise your rights of access, rectification, cancellation and opposition free of charge by sending your request accompanied by the copy or data of your Personal ID Number to the email direzione@assoentilocali.it.