Privacy Policy

Municipality of Santarcangelo di Romagna
Piazza Ganganelli, 1
47822 Santarcangelo di Romagna
Tax Code: 01219190400
VAT number: 01219190400

Privacy Notice on the processing of personal data pursuant to Articles 13–14 of EU Regulation 2016/679

The Municipality of Santarcangelo di Romagna, in its capacity as the Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679, hereinafter the “GDPR”, hereby informs you that the aforementioned legislation provides for the protection of data subjects with regard to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency, proportionality and the protection of your privacy and your rights.

Your personal data, subject to your consent, will be processed in accordance with the legal provisions set out in the legislation referred to above and the confidentiality obligations laid down therein.

Purposes and legal basis of the processing: performance of the requested service, in compliance with legislative or contractual obligations.

Methods of data processing: your data may be processed using electronic computers.

All processing is carried out in accordance with the procedures set out in Articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures provided for therein.

Disclosure: your data will be disclosed exclusively to competent parties who have been duly appointed as Data Processors for the performance of the services necessary for the proper management of the relationship, with a guarantee that the data subject’s rights will be protected.

Your data will be processed exclusively by persons authorised for this purpose and duly trained by the Data Controller.

Disclosure: Your personal data will not be disclosed in any way.

Retention period: Please note that, in accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, the retention period for your data is:

• set for a period not exceeding the time required to fulfil the purposes for which the data is collected and processed for the performance and fulfilment of contractual obligations;
• set for a period not exceeding the provision of the services rendered;
• set for a period not exceeding the fulfilment of the purposes for which the data are collected and processed, and in compliance with the mandatory time limits prescribed by law.

The Data Controller, in accordance with the law, is the Municipality of Santarcangelo di Romagna (Piazza Ganganelli, 1
47822 Santarcangelo di Romagna
Tax Code: 01219190400
VAT number: 01219190400)

You have the right to request from the Data Controller the erasure (right to be forgotten), restriction, updating, rectification and portability of your personal data, as well as the right to object to the processing of such data; furthermore, you may generally exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.

Rights of the data subject:

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning them exist, even if not yet recorded, and to have such data communicated to them in an intelligible form.
2. The data subject has the right to obtain the following information:

• the purposes of the processing;
• the categories of personal data concerned;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations;
• where possible, the envisaged period for which the personal data will be stored or, if this is not possible, the criteria used to determine that period;
• the existence of the data subject’s right to request from the data controller the rectification or erasure of personal data, or the restriction of the processing of personal data concerning them, or to object to such processing;
• the right to lodge a complaint with a supervisory authority;
• where the data are not collected from the data subject, all available information on their origin;
• the existence of automated decision-making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
• where personal data are transferred to a third country or to an international organisation, the data subject has the right to be informed of the existence of appropriate safeguards pursuant to Article 46 in relation to the transfer. 3. The data controller shall provide a copy of the personal data undergoing processing. Where the data subject requests further copies, the controller may charge a reasonable fee based on administrative costs. If the data subject submits the request by electronic means, and unless the data subject indicates otherwise, the information shall be provided in a commonly used electronic format.4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

3. The data subject has the right to obtain:

• the updating, rectification or, where the data subject has an interest, the completion of the data;
• the erasure, anonymisation or blocking of data processed in breach of the law, including data which no longer need to be retained for the purposes for which they were collected or subsequently processed;
• confirmation that the operations referred to in points (a) and (b) have been brought to the attention, including as regards their content, of those to whom the data have been disclosed or made public, except where this proves impossible or involves a clearly disproportionate effort compared with the right being protected;
• data portability.

4. The data subject has the right to object, in whole or in part:

• on legitimate grounds, to the processing of personal data concerning him or her, even if relevant to the purpose of collection;
• to the processing of personal data concerning them for the purposes of sending advertising or direct marketing material, or for carrying out market research or commercial communications.

For an exhaustive list of the data subject’s rights, please refer in all cases to the text of Articles 15–22 of the GDPR.