Privacy Policy - Eventi Culturali

PRIVACY POLICY PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679
Pursuant to and for the purposes of Articles 13 and 14 of EU Regulation 2016/679 (General Regulation on Data Protection), the implementing provisions of Legislative Decree no. 196 of 30 June 2003, as amended and supplemented by Legislative Decree no. 101 of 10 August 2018, and the RDG no. 466 of 17/07/2018,
we inform you about the methods of processing of personal data of users who interact with the Ecosistema digitale per la cultura della Regione Campania website from the address http://cultura.regione.campania.it . Furthermore, we inform you about users rights and how they can exercise them.

This information does not concern other websites, pages or online services, even if related to the regional administration, which can be reached through hypertext links that may be published on the portal but refer to resources outside the regional domain.

1. DATA CONTROLLER
Art.13, par.1, letter a and art. 14, par. 1, letter a of EU Regulation 2016/679 and DGR 466 of 17/07/2018.

Following consultation of the portal, data relating to identified or identifiable natural persons may be processed. The Data Controller is the Campania Region, represented by its President, with registered office in Via Santa Lucia n. 81 - 80132 - Naples - Toll Free Number 800.550.506.
In accordance with the provisions of Regional Council Resolution no. 466 of 17/07/2018, all managers serving in the Regional Administration are delegated, each for the part of its competence, to the processing of personal data, in accordance with the provisions of the respective individual employment contract.
Your data will be processed according to the principles of lawfulness, fairness, transparency, security and confidentiality. The processing will be carried out mainly in non-automated form, in compliance with the provisions of art. 32 of EU Regulation 2016/679, by specially appointed persons and in compliance with the provisions of art. 29 of EU Regulation 2016/679.

2. DATA PROTECTION OFFICER
Art.13, par.1, letter b and art.14, par.1, letter b of EU Regulation 2016/679.

We also publish the contact details of the Data Protection Officer: Dr. Eduardo Ascione, tel. + 39 0817962413, e-mail dpo@regione.campania.it.

3. LAWFUL BASIS FOR DATA PROCESSING
Art.13, par.1, lett. c and art.14, par.1, lett. c of EU Regulation 2016/679

Personal data are processed by the Region in the performance of its tasks of public interest or otherwise related to the exercise of its public authority, including the management and protection of cultural heritage and the related communication activities.
The personal data you provide are processed only for purposes strictly related and necessary to the use of the portal and any services requested, or rather for purposes functional to carrying out research, analysis and statistics, sending information material and updates on initiatives and programs of the regional administration.
Whether the controller intends to further process personal data for a purpose other than that for which they were collected, before such further processing, he must provide the person concerned with information about such different purpose and any other relevant information.

4. TYPES OF DATA PROCESSED AND PURPOSES OF PROCESSING

Navigation data
The computer systems and software procedures used to operate the regional portal acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected in order to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system and computer environment. These data are used only to obtain anonymous statistical information on the use of the portal and to check its proper functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the portal.

Data provided by the user
The optional, explicit and voluntary sending of messages to the contact addresses of the Campania Region on the portal, private messages sent by users to institutional profiles/pages on social media (where this possibility is provided), as well as the completing and forwarding of forms on the regional portal, involve the acquisition of contact information of the sender, necessary to respond, and all personal data included in the communications.
Specific information will be published on the dedicated pages of the regional portal for the provision of certain services.

Cookie
This website uses technical cookies, with which, in compliance with the art. 122 of the Personal Data Protection Code and the legal measure by the Authority of 08/05/2014, no consent by the user is required. No cookie is used for user profiling, neither are other methods of data tracking. Instead, technical cookies are used in a strictly limited way to what is necessary for a safe and efficient navigation. Further information about the Cookie Policy can be found on the specific page.

5. PLACE, MODALITIES AND RECIPIENTS OF THE PROCESSING
Personal data are processed at the headquarters of the Owner or Managers with automated tools for the time strictly necessary to achieve the purposes for which they were collected, in compliance with the rules of confidentiality and security provided by current legislation.
Specific technical and organizational security measures are adopted to protect the information from alteration, destruction, loss, theft or improper or unlawful use. Processing related to the services of the web portal are only handled by technical personnel authorized and trained in the treatment, or by the managers appointed by the owner pursuant to art. 28 of the Regulation.
No data deriving from the web services of the portal is disseminated. The personal data provided by users who request information and suggestions are used only to perform the service or provision requested and are eventually disclosed to other staff authorized to process within the Campania Region or other public or private entities only where this is required by law or strictly necessary to provide the information requested by you.

6. PERIOD OF DATA RETENTION
Art.13, par.2, lett. a) and art.14, par.1, lett. a) of EU Regulation 2016/679

In accordance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to art. 5 of EU Regulation 2016/679, personal data will be kept for the entire duration of the activities aimed at carrying out the institutional tasks of the Ecosistema digitale per la cultura della Regione Campania.
Personal data may be stored for longer periods to be processed exclusively for purposes of public interest archiving, scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1, of EU Regulation 2016/679.
This is without prejudice to cases in which questions relating to the activities of the Office may be raised in court, in which case the personal data of the interested party, exclusively those necessary for such purposes, will be processed for the time necessary to pursue them.

7. RIGHTS OF THE INTERESTED PARTIES
Art.13, par.2, lett.b and art.14, par.2, lett.c of EU Regulation 2016/679 and of DGR no. 466 of 17/07/2018
We inform you that you may exercise your rights under EU Regulation 2016/679, described in detail below.

• Right of access ex art. 15
  You have the right to obtain, from the Data Controller, confirmation of the existence of a processing of personal data relating to your data, to know its content and origin, verify its accuracy and in this case, to obtain access to such data. In any case, you have the right to receive a copy of the personal data being processed.
• Right to rectification ex art. 16
  You have the right to obtain from the Data Controller the integration, updating and rectification of your personal data without undue delay.
• Right to erasure (‘Right to be forgotten’) ex art. 17
  You have the right to obtain, from the Data Controller, the erasure of personal data concerning him or her, without undue delay, in cases where one of the hypotheses provided for in art. 17 applies (personal data no longer necessary with respect to the purposes for which they were collected or processed, revocation of consent and lack of any other legal basis for processing, personal data processed unlawfully, exercise of the right to object, etc.).
• Right to restriction of processing ex art. 18
  The data subject shall have the right to obtain, from the Owner, the limitation of the processing of personal data in cases expressly provided for in the Regulation, or when: disputes the accuracy of the data, the processing is unlawful and requires that it be merely limited use, the data are necessary for the assessment, exercise or defense of a right in court or opposed the processing for legitimate reasons. If processing is limited, personal data will only be processed with your explicit consent. The Data Controller is obliged to inform you before the restriction is lifted.
• Right to data portability ex art. 20
  Where processing is carried out by automated means, the data subject has guaranteed the right to portability of personal data concerning him or her, where the processing is based on consent or on a contract, and the direct transmission of the same to another data controller, where technically feasible.
• Right to object ex art. 21
  You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you. In any case, the Data Controller will balance your interests with the legitimate reasons for processing (including, for example, ascertaining, exercising and defending a right in court, etc.).
• Right to lodge a complaint ex art. 77
  Interested parties who believe that the processing of personal data relating to them carried out through this site is in violation of the provisions of the Regulation have the right to make a complaint with a Supervisory authority for the protection of personal data, or to bring an action before the appropriate courts (art. 79 of the Regulation). Further information regarding your rights to the protection of personal data can be found on the website of the Data Protection Authority at https://www.garanteprivacy.it.