This statement is provided in compliance with Article 13 of Legislative Decree No. 196 of 30 June 2003 (Code regarding the protection of personal data).
Newsletters (which provide recipients with up-to-date information on the various initiatives promoted by the Council, such as exhibitions, public talks and other cultural events organized or sponsored by the Holder) are sent via email to those who have made an explicit request to receive them by filling in the request form provided on the website and who authorize the Holder to process their personal data.
The provision of personal data is voluntary. The refusal to provide such data will make it impossible to receive the newsletter.
THE PURPOSES OF DATA PROCESSING
Any personal data gathered during the course of navigating the website will neither be used for communication purposes nor shared with third parties.
DATA PROCESSING METHODS
The processing of data will be effected mainly with the aid of electronic or automated tools and will, in compliance with the provisions of Italian legislative decree n. 196/03, be performed in such a manner and with the necessary means to ensure the security and confidentiality of the data collected. To this end, all technical, IT, organizational, and logistical security measures will be adopted so as to guarantee the minimum level of data protection required by law. Access to data will be strictly limited to those specifically in charge of data processing or by persons designated by the same.
The data holder is the Comune di Udine (Udine City Council) whose registered office is at n°1. Via Lionello, Udine.
DATA SUBJECTS’ RIGHTS
Data subjects are entitled at any time to exercise their rights in relation to the Data Holder in accordance with Art. 7 of the Italian Personal Data Protection Code (Legislative Decree no. 196/2003) which, for the sake of convenience, is reported here in full:
Article 7 - Right to Access Personal Data and Other Rights
Data subjects shall have the right to obtain confirmation as to whether or not personal data concerning them exists regardless of whether that information has been recorded, and to receive the communication of such data in writing.
Data subjects shall have the right to be informed of:
- the source of the personal data gathered;
- the purposes and methods of data processing;
- the logic applied in the event of automated decisions being made;
details relating to the identity of the data controller, data processors and the representative designated as per Article 5(2);
the persons, entities or types of entity to whom or which the personal data may be communicated or that may become aware of the data in their capacity as a designated representative in the territory of the State, as a data processor, or person in charge of data processing.
Data subjects shall have the right to:
- Verify the correctness of the data held on them; require that the data be updated, corrected or, where relevant, require that additions be made to the data;
- request the cancellation, transformation into anonymous form or blocking of any data processed in violation of the law, including data whose retention is unnecessary for the purposes for which it has been collected or subsequently processed;Obtain a statement testifying that the actions as per letters a) and b) have been made known, also in regard to their contents, to the entities to whom or which the data was communicated or disseminated, unless this requirement proves impossible or foresees a manifestly disproportionate amount of effort when compared to the right that is to be protected.
Data subjects shall have the right to object on legitimate grounds, in whole or in part to:
the processing of personal data concerning them, even if such data is relevant to the purpose of the collection;
the processing of personal data concerning him/her, where it is carried out for the purpose of disseminating advertising materials, direct selling, or for purpose of carrying out marketing research or commercial communication surveys.