STATEMENT PURSUANT TO ART. 13 OF LEGISLATIVE DECREE N°196/03 REGARDING NEWSLETTER REGISTRATION
This statement is provided in compliance with Article 13 of Legislative Decree No. 196 of 30 June 2003 (Code regarding the protection of personal data).
Data will be processed by the holder for the purposes of responding to requests (related to tour bookings, requests for documents, books and/or catalogues, the availability of venues for hire, as well as more general information), made by interested parties who have filled out the relevant request form/s provided on the website.
The provision of personal data is voluntary; however, failure to provide data will make it impossible for requests to be processed.
PURPOSE OF DATA PROCESSING
The personal data provided by users is used solely for the purpose of responding to users’ requests.
DATA PROCESSING METHODS
The processing of data will be effected mainly with the aid of electronic or automated tools and will, in compliance with the provisions of Italian legislative decree n. 196/03, be performed in such a manner and with the necessary means to ensure the security and confidentiality of the data collected. To this end, all technical, IT, organizational, and logistical security measures will be adopted so as to guarantee the minimum level of data protection required by law. Access to data will be strictly limited to those specifically charged with data processing or by persons designated by the same.
The data holder is the Commune did Udine (Udine City Council) whose registered office is at n°1. Via Lionel, Udine.
DATA SUBJECTS’ RIGHTS
Data subjects are entitled at any time to exercise their rights in relation to the Data Holder in accordance with Art. 7 of the Italian Personal Data Protection Code (Legislative Decree no. 196/2003) which, for the sake of convenience, is reported here in full:
Article 7 - Right to Access Personal Data and Other Rights
Data subjects shall have the right to obtain confirmation as to whether or not personal data concerning them exists regardless of whether that information has been recorded, and to receive the communication of such data in writing.
Data subjects shall have the right to be informed of:
the source of the personal data gathered;
the purposes and methods of data processing;
the logic applied in the event of automated decisions being made;
details relating to the identity of the data controller, data processors and the representative designated as per Article 5(2);
the persons, entities or types of entity to whom or which the personal data may be communicated or that may become aware of the data in their capacity as a designated representative in the territory of the State, as a data processor, or person in charge of data processing.
Data subjects shall have the right to:
Verify the correctness of the data held on them; require that the data be updated, corrected or, where relevant, require that additions be made to the data;
request the cancellation, transformation into anonymous form or blocking of any data processed in violation of the law, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed;
Obtain a statement testifying that the actions as per letters a) and b) have been made known, also in regard to their contents, to the entities to whom or which the data was communicated or disseminated, unless this requirement proves impossible or foresees a manifestly disproportionate amount of effort when compared to the right that is to be protected.
Data subjects shall have the right to object on legitimate grounds, in whole or in part to:
the processing of personal data concerning them, even if such data is relevant to the purpose of the collection;
the processing of personal data concerning him/her, where it is carried out for the purpose of disseminating advertising materials, direct selling, or for purpose of carrying out marketing research or commercial communication surveys.