PRIVACY STATEMENT PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679
Pursuant to and for the purposes of Articles 13 and 14 of EU Regulation 2016/679 (General Data Protection Regulation), the implementing provisions set out in Legislative Decree no. 196 of 30 June 2003, as amended and supplemented by Legislative Decree no. 101 of 10 August 2018, and DGR no. 466 of 17/07/2018, we hereby inform you of the methods for processing the personal data of users interacting with the website www.scabec.it , owned by Scabec SpA (hereinafter: the ‘Site’), of their rights and how to exercise them.
Please note that this information does not concern other sites, pages or online services, even if traceable to Scabec SpA, can be reached through hypertext links that may be published on this site but refer to external resources.
DATA CONTROLLER
In accordance with the stipulations set forth in the portal, the processing of data pertaining to identified or identifiable natural persons may be undertaken. The entity responsible for the processing of personal data as outlined in this Information Notice is Scabec SpA, with its registered office located at Via Generale Giordano Orsini 30, Naples.
The processing of your data will be conducted in accordance with the principles of lawfulness, correctness, transparency, security and confidentiality. The processing will be conducted manually, in accordance with the stipulations set forth in Article 32 of EU Regulation 2016/679, by personnel designated for this purpose and in compliance with the provisions of Article 29 of EU Regulation 2016/679.
DATA PROTECTION OFFICER
The appointment of a Data Protection Officer (DPO) at Scabec SpA has been made in the person of Maurizio D’Amico, who can be contacted via the following channels: telephone number 0815624561 and email address mdamico@scabec.it.
The processing of personal data by Scabec SpA is carried out in accordance with the legal basis of public interest tasks or activities related to the exercise of public powers. This includes the management and protection of cultural heritage and related communication activities.
PURPOSE AND LEGAL BASIS FOR THE PROCESSING
Personal data are processed by Scabec SpA in the performance of its public interest tasks or in any case related to the exercise of its public powers, including the management and protection of cultural heritage and related communication activities.
The personal data provided is processed for the purposes of enabling the Site to function as intended or to respond to requests from users. These may include, but are not limited to, requests to subscribe to the Scabec SpA newsletter or mailing list or to obtain information from the user.
In the event that the Controller intends to process personal data for a purpose other than that for which it was originally collected, it is required to provide the data subject with information regarding the new purpose and any additional relevant details prior to the commencement of such further processing.
TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING
Browsing data
The computer systems and software procedures used to operate the regional portal acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected for the purpose of associating it with identified interested parties. However, due to its intrinsic nature, it could potentially be used to identify users through processing and association with data held by third parties. This category of data encompasses the IP addresses or domain names of the computers utilized by users accessing the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method employed to submit the request to the server, the size of the obtained file, the numerical code indicating the status of the response provided by the server (successful, error, etc.), and other parameters pertaining to the user’s operating system and IT environment. The aforementioned data are employed for the exclusive purpose of obtaining anonymous statistical information regarding the utilization of the portal, with the objective of verifying its optimal functioning. Following the completion of this process, the data are promptly deleted. The data may be employed to ascertain liability in the event of hypothetical computer crimes against the portal.
Data provided by the user
The data provided by the user may be obtained in a variety of ways. These include the sending of messages to the contact addresses on the Site, the sending of private messages by users to institutional profiles or pages on social media (where this option is available), and the completion and submission of forms on the Site.
Information specific to the provision of certain services is provided in the pages of the website dedicated to those services.
Cookie
This website employs the use of technical cookies, in accordance with the stipulations set forth in Article In accordance with Article 122 of the Personal Data Protection Code and the Garante Order of 8 May 2014, the data subject’s consent is not required. Additionally, third-party cookies are employed for user profiling purposes, facilitating the delivery of content, including advertisements tailored to the user’s interests. This enables the assessment of the efficacy of such advertisements and the provision of services on behalf of Scabec.
The utilization of technical cookies is confined to the minimum extent necessary for the secure and efficient navigation of the websites. Further information on the Cookie Policy can be found on the relevant page of this website.
LOCATION, METHOD AND RECIPIENTS OF PROCESSING
The location, methodology and recipients of the processing of personal data are as follows:
The processing of personal data is conducted at the premises of the data controller or data processor, utilising automated tools for the duration that is strictly necessary to achieve the purposes for which the data were collected. This is done in compliance with the confidentiality and security rules that are set forth by the regulations that are currently in force.
Specific technical and organisational security measures are implemented to safeguard information from alteration, destruction, loss, theft or improper or unlawful use. The processing of data related to the services of the web portal is conducted exclusively by duly authorised and trained technical personnel, or by the managers designated by the data controller in accordance with Article […]. 28 of the Regulations.
It is not the practice of this organisation to disseminate data derived from the web services of the portal. The personal data provided by users is used for the purposes described in paragraph 3 and may be communicated to other personnel authorised to process them or to other public or private entities only if required by law or if it is strictly necessary to provide the information requested.
DATA RETENTION PERIOD
In accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Art. 5 EU Regulation 2016/679, personal data will be retained within the time periods provided for by current legislation (e.g. in the case of browsing data). In the case of subscription to the newsletter and/or mailing list, the data will be processed until the user requests cancellation. In the event of the provision of services deriving from the conclusion of a contract with Scabec SpA, the data may be processed for the entire duration of the contract and for ten years following its conclusion.
This is without prejudice to cases in which matters relating to the activities falling within the competence of the Office have to be brought before the courts, in which case the personal data of the data subject, only those necessary for such purposes, shall be processed for the time indispensable for their pursuit.
RIGHTS OF INTERESTED PARTIES
The interested parties are hereby informed that, in accordance with the regulations currently in force, they are entitled to request and obtain information about the existence of their own data in the possession of the Data Controller, as well as access to such data. Furthermore, in the case of data subject to processing by automated systems, the interested parties are entitled to request the communication of their own data and/or the transfer to another data controller. Furthermore, the interested party is entitled to request and obtain the modification and/or correction of their personal data if they believe that it is inaccurate or incomplete. Additionally, the interested party may request and obtain the deletion and/or limitation of the processing of their personal data if it is not necessary or no longer necessary for the purposes outlined above, and after the retention period indicated in the aforementioned paragraph has expired. In particular, the following rights are granted:
In accordance with Articles 15, 16, 17, 18 and 20 of Regulation (EU) 2016/679, the data subject is entitled to:
1. Access to their personal data
2. Rectification of their personal data
3. Erasure of their personal data
4. Restriction of processing of their personal data
5.Data portability of their personal data
These rights are subject to the limitations and conditions set out in Article 12 of Regulation (EU) 2016/679. Such requests may be directed to the DPO of Scabec SpA. In accordance with the prevailing regulations, any complaints pertaining to the processing of your personal data may be submitted to the relevant Data Protection Authority.