Privacy Policy and Legal Notice


This notice describes how the personal data of users, collected during web browsing, is processed.

Pursuant to Article 13 of Regulation (EU) 2016/679 (General data protection regulation - GDPR), we hereby inform you that the Mountain Community of Carnia (hereinafter also referred to as the Entity or Controller) processes the personal data you have provided and freely communicated in order to perform its institutional functions.

The Entity guarantees that the processing of your personal data is carried out with respect for your fundamental rights and freedoms, as well as your dignity, with particular reference to confidentiality, personal identity and the right to protection of personal data.

This notice does not cover other sites, pages or online services that can be reached via hypertext links that may be published on the site but refer to external resources.

Data controller

The data controller is the Mountain Community of Carnia, in the person of its pro tempore Chairperson.


Headquarters: Via Carnia Libera 1944, 29 - 33028 Tolmezzo (Ud) - Italy

Pec (certified email):

Contact details of the Data Protection Officer

Data protection officer (Dpo) pursuant to Article 38 of Regulation (EU) 2016/679:

Name: Boxxapps srl

Tax Code/VAT No.: 04155080270

Address: Via della Stazione 2 - 30200 Marcon

Phone: 800893984


PEC (certified email):

Information concerning the processing of personal data, in accordance with the General Data Protection Regulation (G.D.P.R.) UE 2016/679 and the Privacy Regulation.

According to General Data Protection Regulation, Unione territoriale Intercomunale della Carnia (Inter-Municipal Territorial Union (UTI) of Carnia), data controller, ensures compliance with the rules on personal data protection. The information provided only applies to our web site and does not concern any web sites that may be visited by an user via external links.

The data controller is the Entity in the person of its pro tempore local representative.

2. DPO (Data Protection Officer)
The DPO in charge is listed with all related references in the dedicated section of the Entity's portal.

All personal data provided through this software will be processed in a lawful, correct and transparent manner for the purpose of providing the services requested as well as responding to communications and questions from Users.
Navigation data
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
Collected data include information relating to access, such as the IP addresses and domain names of the computers used by those who connect to the site, as well as other parameters concerning the computer environment of the users. This data will be processed for the time strictly necessary to fulfil the purposes set out in this notice.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site or the use of reserved areas and the completion of web forms, entails the subsequent acquisition and processing of the data necessary to offer the requested service and/or to reply to requests, as well as any other personal data entered.
Specific information may be given or displayed on the pages of the site set up for particular services provided on request.
Where access to particular services is made conditional on the prior registration of personal data, the following general provisions apply: personal data, collected and stored in databases, will be processed by employees appointed by the data controller, and will not be disclosed or communicated to third parties, except in cases provided for by law and in the legally permitted manner.
The data subject is entitled to exercise the rights provided for in this notice.

Personal data is processed exclusively for the purposes that fall within the institutional tasks of the Administration or for the fulfilment of the obligations laid down by laws or regulations.
Within the scope of these purposes, processing may concern data necessary for the management of relations with the Entity, including data provided at the time of registration or when using online services.
Personal data is processed by automated means for the time strictly necessary to achieve the purposes for which they are collected.
Personal data collected will be processed based on the consent given by the User and/or by virtue of legal provision for reasons of relevant public interest based on national or Union law.

The data will be processed for the exclusive use of the Entity by internal subjects and may be brought to the attention of external subjects operating in the capacity of persons in charge of the management or maintenance of electronic instruments or of other external subjects where communication is required by laws or regulations or where it is necessary for the performance of institutional tasks and purposes.

The personal data collected and processed in accordance with this Information Notice will be kept by the Data Controller for the period necessary for the provision of the service and in any case for the time required to perform the Administration's institutional tasks or for the fulfilment of the obligations laid down by laws or regulations.

The data subject may, at any time, exercise the following rights:
Access his/her personal data.
Obtain the updating and/or rectification of the data, and/or the integration of incomplete data.
Obtain the deletion of data, their transformation into anonymous form or the blocking of data processed in violation of the law.
Obtain certification that any amendments or deletions have been brought to the attention, also as regards their content, of those to whom the data have been communicated, except as required by law.
Obtain processing restrictions.
Object to the processing.
Data portability.
Revoke consent, where applicable: revocation of consent does not affect the lawfulness of processing based on consent given before revocation.
Lodge a complaint with the supervisory authority (Data Protection Authority).

The user is free to provide personal data in the request forms for the various services offered in the portal.
Failure to provide any data that may be requested on a compulsory basis will make it impossible to obtain the service. Further personal data may be provided on a voluntary basis by the User through requests sent to the Municipality based on the forms used by the software. By way of example, through the software it is also possible to provide one's email address or telephone number.