Privacy Policy

Information concerning the processing of personal data, in accordance with the General Data Protection Regulation (G.D.P.R.) UE 2016/679 and the Privacy Regulation.

According to General Data Protection Regulation, Unione territoriale Intercomunale della Carnia (Inter-Municipal Territorial Union (UTI) of Carnia), data controller, ensures compliance with the rules on personal data protection. The information provided only applies to our web site and does not concern any web sites that may be visited by an user via external links.

1. DATA CONTROLLER
The data controller is the Entity in the person of its pro tempore local representative.

2. DPO (Data Protection Officer)
The DPO in charge is listed with all related references in the dedicated section of the Entity's portal.

3. CATEGORIES AND ORIGIN OF PROCESSED DATA
All personal data provided through this software will be processed in a lawful, correct and transparent manner for the purpose of providing the services requested as well as responding to communications and questions from Users.
Navigation data
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
Collected data include information relating to access, such as the IP addresses and domain names of the computers used by those who connect to the site, as well as other parameters concerning the computer environment of the users. This data will be processed for the time strictly necessary to fulfil the purposes set out in this notice.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site or the use of reserved areas and the completion of web forms, entails the subsequent acquisition and processing of the data necessary to offer the requested service and/or to reply to requests, as well as any other personal data entered.
Specific information may be given or displayed on the pages of the site set up for particular services provided on request.
Where access to particular services is made conditional on the prior registration of personal data, the following general provisions apply: personal data, collected and stored in databases, will be processed by employees appointed by the data controller, and will not be disclosed or communicated to third parties, except in cases provided for by law and in the legally permitted manner.
The data subject is entitled to exercise the rights provided for in this notice.

4. PURPOSE, LEGAL BASIS AND PROCESSING METHODS
Personal data is processed exclusively for the purposes that fall within the institutional tasks of the Administration or for the fulfilment of the obligations laid down by laws or regulations.
Within the scope of these purposes, processing may concern data necessary for the management of relations with the Entity, including data provided at the time of registration or when using online services.
Personal data is processed by automated means for the time strictly necessary to achieve the purposes for which they are collected.
Personal data collected will be processed based on the consent given by the User and/or by virtue of legal provision for reasons of relevant public interest based on national or Union law.

5. RECIPIENTS
The data will be processed for the exclusive use of the Entity by internal subjects and may be brought to the attention of external subjects operating in the capacity of persons in charge of the management or maintenance of electronic instruments or of other external subjects where communication is required by laws or regulations or where it is necessary for the performance of institutional tasks and purposes.

6. RETENTION PERIOD
The personal data collected and processed in accordance with this Information Notice will be kept by the Data Controller for the period necessary for the provision of the service and in any case for the time required to perform the Administration's institutional tasks or for the fulfilment of the obligations laid down by laws or regulations.

7. RIGHTS OF THE DATA SUBJECT
The data subject may, at any time, exercise the following rights:
Access his/her personal data.
Obtain the updating and/or rectification of the data, and/or the integration of incomplete data.
Obtain the deletion of data, their transformation into anonymous form or the blocking of data processed in violation of the law.
Obtain certification that any amendments or deletions have been brought to the attention, also as regards their content, of those to whom the data have been communicated, except as required by law.
Obtain processing restrictions.
Object to the processing.
Data portability.
Revoke consent, where applicable: revocation of consent does not affect the lawfulness of processing based on consent given before revocation.
Lodge a complaint with the supervisory authority (Data Protection Authority).

8. DATA PROVISION
The user is free to provide personal data in the request forms for the various services offered in the portal.
Failure to provide any data that may be requested on a compulsory basis will make it impossible to obtain the service. Further personal data may be provided on a voluntary basis by the User through requests sent to the Municipality based on the forms used by the software. By way of example, through the software it is also possible to provide one's email address or telephone number.