Dear Sir or Madam,
According to the legislation on the protection of personal data (Regulation (EU) 2016/679, Legislative Decree 196/2003 and Legislative Decree 101/2018), the Data Controller would like to explain the following to you in a simple and clear manner:
The Data Controller is the Autonomous Region of Sardinia, in the person of its Legal Representative, the pro-tempore President of the Sardinia Region - firstname.lastname@example.org
With resolution of the Regional Council No. 51/3 of 16 October 2018, the President of the Region has delegated the tasks and functions of the Data Controller to the General Managers responsible for the matter.
The Data Processing Delegate, on behalf of the Data Controller, is the Director of the Marketing and Communications Service of the Department of Tourism, Crafts and Commerce – email@example.com.
WHY DOES THE REGION OF SARDINIA PROCESS YOUR DATA
Your personal data is processed for the following purposes:
Legal basis for the processing
We process your personal data legally:
WHICH DATA DOES THE REGION OF SARDINIA PROCESS
Within the scope of the purposes indicated and based on the way the Portal is used, we specify that mere browsing of the website does not require you to provide personal data, the Data Controller processes the following data collected automatically or those provided voluntarily as described below:
When browsing, the computer systems and applications dedicated to the operation of the website detect certain personal data, the transmission of which is implicit in the use of Internet communication protocols. This data is not collected to identify users, but by its very nature could allow users to be identified through processing and association with data held by third parties. By way of example, this data includes:
This data, required to use the website, is processed for the purpose of providing the services presented therein.
this data, needed to use the web services, may also be processed in an exclusively aggregated form to obtain statistical information on the use of the services (most visited pages, number of visitors by tie slot or daily, geographical areas of origin, etc.). The IP address is used exclusively for security purposes and is not crossed-referenced with any other data.
Data provided voluntarily by the user
The optional and voluntary sending of messages to the contact addresses on the website results in the acquisition of the sender's contact details, necessary to reply, as well as all personal data included in the communications. This data is processed for the sole purpose of responding to the questions, requests and queries made.
Multimedia elements and social networks
The www.sardegnaturismo.it Portal integrates some social network plugins that allow you to view content hosted on external platforms directly from the pages of this website and to interact with them. The Data Controller does not have access to the data collected and processed independently by the operators of the social network platforms.
Interested users can read the privacy policies provided by the above-mentioned operators: Facebook, Twitter, Instagram, Flickr, YouTube, Open Street Maps etc.
WHO PROCESSES YOUR DATA
Your data may be made accessible for the purposes you have been informed of by:
HOW WE PROCESS AND STORE YOUR DATA
Your personal data is processed electronically through collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data.
The Data Controller strives to guarantee the logical and physical security and privacy of the personal data processed, implementing all of the appropriate technical and organisational measures for the processing.
FOR HOW LONG DO WE RETAIN YOUR DATA
The personal data collected for the purposes referred to under WHICH DATA DOES THE REGION OF SARDINIA PROCESS will be processed and retained for as long as is necessary to pursue the purposes referred to above, including the protection of rights and, therefore, not beyond the prescribed legal limitation period.
The data (IP address) used for site security purposes (blocking attempts to damage the website) will be retained for 30 days.
Data for analytics (statistics) purposes are only retained in aggregate form.
TRANSFER OF DATA TO OTHER COUNTRIES
HOW TO EXERCISE YOUR RIGHTS IN RELATION TO THE PROCESSING OF PERSONAL DATA
The Region of Sardinia informs you that, as a data subject, unless the limitations provided for by law apply, you have the right to know how your personal data is processed, and for this reason you have the right to:
In the above cases, where necessary, the Region of Sardinia, as Data Controller, will inform the third parties to whom your personal data was disclosed of any rights exercised by you, with the exception of specific cases (e.g. when this proves impossible or involves the use of methods manifestly disproportionate to the right that is being protected).
You may exercise your right by sending to the Data Controller:
Fill in the appropriate form available on the institutional website of the Autonomous Region of Sardinia in the section - Documents and regulations/form for exercising data subjects’ rights or by clicking on the following link DPO - Documents and regulations
The address to which to send the registered letter is Viale Trieste n. 105 – 09123 Cagliari, or send a Certified e-mail to: firstname.lastname@example.org.
For information about your rights to protect your personal data, you can contact the Data Protection Officer of the Autonomous Region of Sardinia at the following addresses: