INFORMATION ON THE PROCESSING OF PERSONAL DATA
This Privacy Policy is intended to describe the management methods of the comune.scarlino.gr.it website (hereinafter: the "Site") with reference to the processing of users' personal data.

This is general information provided in compliance with art. 13 of Regulation (EU) 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (hereinafter the "Regulation") to all users who consult and, more generally, interact with the services rendered through the Site by the Scarlino - via Martiri d'Istia, 1 - 58020 - Scarlino (GR) (hereinafter: the "Owner" or "Entity").

This information will illustrate the purposes and methods with which the Data Controller could collect and process your personal data, which categories of data are processed, what are the rights of the data subjects and how they can be exercised.

The information is provided exclusively for this Site, therefore the Owner assumes no responsibility for any other websites that may be consulted through hypertext links on the site itself. The data will be processed by means of IT and manual tools.

Users, by using this Site, accept this information and are therefore invited to read it before providing personal information of any kind.

DATA PROCESSING HOLDER
Scarlino - via Martiri d'Istia, 1 - 58020 - Scarlino (GR)

DATA PROTECTION OFFICER
For information on the DPO, contact the Data Controller.

TYPES OF DATA PROCESSED
NAVIGATION DATA
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.

DATA PROVIDED VOLUNTARILY BY THE USER
Except as specified above in relation to navigation data, the entity will acquire any personal data provided by the user through the Site to formulate requests via e-mail, to subscribe to any newsletters, in addition, it will acquire name, surname, address e-mail etc. only if you want to get in touch with the Owner or use the services offered on this site through the appropriate forms.
Through the Site, the Data Controller will not acquire data of a sensitive nature or in any case belonging to the particular categories referred to in art. 9 of Regulation (EU) 2016/679 or data relating to criminal convictions or offenses.
The data provided by the user will be processed in compliance with the purposes and methods indicated in this information and with the specific information made available from time to time.

METHOD OF TREATMENT
Personal data are processed with manual and IT tools in order to achieve the purposes for which they were collected.Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
The data processing will be carried out by personnel directly employed by the Data Controller and / or by natural or legal persons specifically identified by the latter as persons in charge, appropriately appointed managers and their persons in charge of processing.

LEGAL BASIS AND PURPOSE OF THE PROCESSING FOR THE DELIVERY OF THE REQUESTED SERVICES
The data provided referred to in the paragraph "Data provided voluntarily by the user" will be processed by the Data Controller exclusively to respond to requests and follow up on the services the user intends to use. The data will be processed only for these purposes. such data is necessary.

RECIPIENTS OF THE TREATMENT
The recipients of the processing are all users of the website or of the services made available through it in the terms of the laws in force and as defined by Regulation (EU) 2016/679.

OPTIONAL NATURE OF PROVIDING DATA
The user is free to decide whether or not to provide their personal data to the Data Controller through this website and / or the services connected to it. Failure to provide the data may make it impossible for the Data Controller to provide the requested service.

COMMUNICATION AND DATA TRANSFER
The data provided will in no case be disseminated or communicated to third parties, except for the subjects whose right to access the data is recognized by law or by orders of the authorities, as well as subjects, including external and / or foreign ones, which the Data Controller uses to carry out instrumental and / or ancillary activities to the services offered and the benefits connected to them, including suppliers of software solutions, web applications and storage services provided.
Further information can be found by the interested party by sending a request to the Data Controller. The Data Controller may communicate, for the purposes described, some personal data also collected to third parties, who will process the personal data as Data Processors.

The list of data processors can be requested from the Data Controller by writing to

Scarlino - via Martiri d'Istia, 1 - 58020 - Scarlino (GR)
DURATION OF THE TREATMENT
The data will be stored following the requests and services chosen, requests made through the Site. The data will be kept for the strictly necessary period and, in any case, for a period not exceeding necessary, unless otherwise indicated by obligations. legal, administrative, tax, regulatory. In the case of subscription to the newsletter, the data will be kept until a request for cancellation is made.

RIGHTS OF THE INTERESTED PARTIES
It is shown that, in accordance with current legislation, the interested party has the following rights:
request and obtain information about the existence of their data in the availability of the Data Controller and access to such data; for the data being processed with automated systems, request the communication of your data and / or the transfer to another owner; request and obtain the modification and / or correction of your personal data if you believe that they are inaccurate or incomplete; request and obtain the cancellation - and / or limitation of processing - of their personal data in the case of data or information that is not necessary - or no longer necessary - for the aforementioned purposes, therefore after the retention period indicated in the preceding paragraph has elapsed .

In particular, the following rights are recognized: art. 15 - "Right of access by the data subject", 16 - "Right of rectification", 17 - "Right to cancellation", 18 - "Right to limitation of processing", 20 - "Right to data portability" of the 2016 EU Regulation / 679 within the limits and under the conditions provided for by art. 12 of the Regulation itself.
Such requests may be addressed to Scarlino - via Martiri d'Istia, 1 - 58020 - Scarlino (GR) We also inform you that under the current regulations it is possible to propose any complaints regarding the processing of your personal data to the Data Protection Authority. personal.

COOKIES
Cookies are small text files that the visited sites send to the User's terminal, where they are stored, to optimize the browsing session.

The user has the possibility, depending on the web browser in use, to disable or selectively accept the use of cookies. In this case, navigation will not be equally easy, some functions of the site may not be available and some web pages may be displayed incorrectly.
You can access the complete information on cookies via the link available at the bottom of this site or by clicking here.

TYPES OF DATA COLLECTED
Among the Personal Data collected by this Application, either independently or through third parties, there are: ZIP code, email, province, geographical location, Usage data, Cookies, unique identifiers of devices for advertising (Google Advertiser ID or IDFA identifier, for example) and various types of Data indicated here by way of example, but not exhaustive. Complete details on each type of data collected are provided in the dedicated sections of this privacy policy or through specific information texts displayed before the data is collected.

Personal Data may be freely provided by the User or, in the case of Usage Data, collected automatically during the use of this Application.

Unless otherwise specified, all Data required by this App is mandatory. If the User refuses to communicate them, it may be impossible for this App to provide the Service. In cases where this Application indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of the Service or on its operation.

Users who have doubts about which data are mandatory are encouraged to contact the owner.

Any use of tracking tools by this Application or by the owners of third party services used by this App, unless otherwise specified, has the purpose of providing the Service requested by the User, in addition to the additional purposes described in this document.

The User assumes responsibility for the Personal Data of third parties obtained, published or shared through this App and guarantees to have the right to communicate or disseminate them, freeing the Owner from any liability to third parties.

METHOD OF TREATMENT
The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data. The processing is carried out using IT and / or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this App (administrative, commercial, marketing, legal, system administrators) or external subjects (such as suppliers of third party technical services, postal couriers) may have access to the Data. hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.

LEGAL BASIS OF THE PROCESSING
The Owner processes the user's data exclusively following a specific registration of the same within an area reserved for services offered by the owner.
The data is processed exclusively following a request and / or adhesion to a service issued by the owner and which may also have a legitimate interest of the owner, a public interest or precisely the performance of a service directed to the user.

PLACE
The Data is processed at the Data Controller's operating offices and in any other place where the parties involved in the processing are located. For more information, contact the owner.
The User's Personal Data may be transferred to a country other than that in which the User is located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

If one of the transfers described above takes place, the User can refer to the respective sections of this document or request information from the Data Controller by contacting him at the opening details.

STORAGE PERIOD
The Data are processed and stored for the time required by the purposes for which they were collected. Therefore:

Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until this interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.
When the processing is based on the User's consent, the Data Controller may keep the Personal Data longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.
At the end of the retention period, the Personal Data will be deleted. Therefore, at the end of this term the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

PURPOSE OF THE PROCESSING OF COLLECTED DATA
The User Data is collected to allow the Owner to provide its Services, as well as for the following purposes: registration and authentication limited to specific services offered by the app, contacting the user, interactions based on location, statistics, viewing of content from external platforms, payment session, infrastructure monitoring, management of support and contact requests. To obtain further detailed information on the purposes of the processing and on the Personal Data concretely relevant to each purpose, the User can refer to the relevant sections of this document.

USER RIGHTS
Users can exercise certain rights with reference to the Data processed by the Data Controller.
In particular, the User has the rights listed below.

Withdraw consent at any time. The User can revoke the consent to the processing of their Personal Data previously expressed.
Oppose the processing of their data. The user can oppose the processing of their data when it occurs on a legal basis other than consent. Further details on the right to object are indicated in the section below.
Access their data. The user has the right to obtain information on the data processed by the owner, on certain aspects of the processing and to receive a copy of the data processed.
Verify and ask for rectification. The User can verify the correctness of their Data and request its updating or correction.
Obtain the limitation of the treatment. When certain conditions are met, the User can request the limitation of the processing of their Data. In this case, the Data Controller will not process the Data for any other purpose than their conservation.
Obtain the cancellation or removal of your Personal Data. When certain conditions are met, the User can request the cancellation of their Data by the Owner.
Receive your data or have it transferred to another owner. The User has the right to receive his / her data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its unhindered transfer to another owner. This provision is applicable when the Data is processed with automated tools and the processing is based on the User's consent, on a contract to which the User is a party or on contractual measures connected to it.
Make a complaint. The User can lodge a complaint with the competent personal data protection supervisory authority or take legal action.
DETAILS ON THE RIGHT OF OBJECTION
When Personal Data are processed in the public interest, in the exercise of public authority vested in the Owner or to pursue a legitimate interest of the Owner, Users have the right to object to the processing for reasons related to their particular situation.
Users are reminded that, if their Data are processed for direct marketing purposes, they can oppose the processing without providing any reasons. To find out if the Data Controller processes data for direct marketing purposes, Users can refer to the respective sections of this document.

HOW TO EXERCISE YOUR RIGHTS

DEFENSE IN JUDGMENT
The User's Personal Data may be used by the Owner in court or in the preparatory stages for its eventual establishment for the defense against abuse in the use of this Application or related Services by the User.
The User declares to be aware that the Owner may be obliged to disclose the Data by order of the public authorities.

SPECIFIC INFORMATION
At the request of the User, in addition to the information contained in this privacy policy, this Application may provide the User with additional and contextual information regarding specific Services, or the collection and processing of Personal Data.

SYSTEM LOG AND MAINTENANCE
For needs related to operation and maintenance, this Application and any third party services used by it may collect system logs, which are files that record the interactions and which may also contain Personal Data, such as the User IP address.

INFORMATION NOT CONTAINED IN THIS POLICY
Further information in relation to the processing of Personal Data may be requested at any time from the Data Controller using the contact details.

DETAILS ON THE PROCESSING OF PERSONAL DATA
Personal Data is collected for the following purposes and using the following services:

Mailing List or Newsletter. By joining and optional registration to the services offered by the app in the appropriate sections, registration to any mailing lists or newsletters may be required, such registration linked to the single service offered in the specific section will be subjected to specific information and consent request according to the provisions of current legislation.
Payment management. The payment management services, linked for example to the payment service module, allow this App to process payments by credit card. The data used for the payment are acquired directly by the manager of the requested payment service without being processed in any way by this App. Some of these services may also allow the scheduled sending of messages to the User, such as emails containing invoices or notifications regarding the payment.
Management of support and contact requests. This type of service allows this App to manage support and contact requests received via email or through other tools, such as the contact form. The Personal Data processed depend on the information provided by the User within the messages and the tool used for communication (for example the email address).

Location-based interactions.
Non-continuous geolocation (This App). This Application may collect, use and share data relating to the user's geographical location, in order to provide services based on the location itself. Most browsers and devices provide tools by default to deny geo-tracking. If the User has expressly authorized this possibility, this Application may receive information on its actual geographical position, however for this specific application the geographical location of the User occurs in a non-continuous manner, upon specific request of the User or when the User allows the localization of the place where it is located and allows the application to automatically detect that position. This data is not stored in the database but used to specify the location of the report and send it to the data controller.
Infrastructure monitoring. This type of service allows this App to monitor the use and behavior of its components, to allow for the improvement of performance and functionality, maintenance or troubleshooting. The Personal Data processed depend on the characteristics and methods of implementation of these services, which by their nature filter the activity of this App.
Registration for access to the app services. Personal Data collected: various types of Data as specified in the privacy policy of the service. The User registers for the requested service only by filling in the registration form for the chosen service by providing his / her Personal Data directly. Personal Data collected: emails and other personal data that vary with the proposed and / or requested service.
Displaying content from external platforms This type of service allows you to view content hosted on external platforms directly from the pages of this App and interact with them.
Google Maps widget (Google). Specifically, a map viewing service managed by Google Inc. that allows this App to integrate such content within its pages

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behavior.

GOOGLE ANALYTICS (GOOGLE LLC)
Google Analytics is a web analysis service provided by Google LLC ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google.
Google may use the Personal Data to contextualize and personalize the advertisements of its own advertising network.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy - https://tools.google.com/dlpage/gaoptout?hl=it '}) "target =" _ blank "> Opt Out. Subject adhering to the Privacy Shield.

CONTACT FORM (THIS APPLICATION)
By filling in the contact form with their data, the User consents to their use to respond to requests for information, quotes, or any other nature indicated by the form header.

Personal Data collected: surname, email and website.

MAILING LIST OR NEWSLETTER (THIS APPLICATION)
By registering with the mailing list or newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Application may be sent. The User's email address may also be added to this list as a result of registering with this Application or after making a purchase.

Personal Data collected: surname and email.

INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS
This type of service allows interaction with social networks or other external platforms directly from the pages of this Application.
The interactions and information acquired by this Application are in any case subject to the User's privacy settings relating to each social network.
In the event that an interaction service with social networks is installed, it is possible that, even if the Users do not use the service, it collects traffic data relating to the pages in which it is installed.

LIKE BUTTON AND FACEBOOK SOCIAL WIDGETS (FACEBOOK, INC.)
The "Like" button and Facebook social widgets are interaction services with the Facebook social network, provided by Facebook, Inc.

Personal Data collected: Cookies and Usage Data.

Place of processing: United States - Privacy Policy. Subject adhering to the Privacy Shield.

To exercise the User's rights, Users can direct a request to the contact details of the Owner indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within one month.

CHANGES TO THIS PRIVACY POLICY
The Data Controller reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this Application as well as, if technically and legally feasible, by sending a notification to Users through one of the extremes. contact number held by the Data Controller. Therefore, please consult this page regularly, referring to the date of the last modification indicated at the bottom.
If the changes concern treatments whose legal basis is consent, the Data Controller will collect the User's consent again, if necessary.