why this notice?
This page describes how we handle website users’ personal information.
The notice is provided under art. 13 of Legislative Decree no. 196/2003 – the Italian Privacy Code governing protection of personal information on people who interact with web services issued by the Authority for the protection of personal information, accessible on the web at:
the home page of the Authority’s official website.
The notice is provided for the Garante’s website and not for other websites which users may consult through links.
The notice is inspired by Recommendation no. 2/2001 which the European authorities for the protection of personal information, brought together in the Group set up under art. 29 of Directive no. 95/46/EC, adopted on May 17 2001 to identify a number of minimum requirements for online collection of personal information and specifically the methods, timing and nature of the information data controllers must provide to users when they connect to web pages, independently of the purposes of the connection.
The Recommendation and a brief description of its purposes appear on other pages in this website.
The "data controller"
Consultation of this website may result in information being collected on identified or identifiable persons.
The “data controller” is the Garante or authority for the protection of personal information, located in Rome (Italy), Piazza di Monte Citorio no. 121, 00186.
Place where the data will be processed
Processing of data in relation to this site's web services will take place in the offices of the Garante identified above and will be performed solely by the technical staff of the data processing office or employees performing occasional maintenance work.
No data from web services will be disclosed or distributed.
Personal information supplied by users who ask for information to be sent to them (bulletins, Cd-roms, newsletters, annual reports, answers to enquiries, deeds and orders, etc.) is used solely for the purposes of execution of the requested service and disclosed to third parties only if this is strictly necessary for this purpose (mailing service for the Garante’s publications provided by the Presidency of the Council of Ministers – Information and publishing department).
Types of data processed
The information systems and software procedures which operate this website acquire certain personal information the transmission of which is implicitly inherent in use of internet communication protocols in the course of their regular operations.
This information is not collected to be associated with identified parties but may due to its nature permit identification of users when processed or associated with data held by third parties.
This category of information includes the IP addresses or dominion names of computers used by users connecting to the site, addresses of requested resources in URI (Uniform Resource Identifier) notation, request times, the method used to submit the request to the server, the size of the file obtained in response, the numerical code identifying the state of the response given by the server (success, error, etc.) and other parameters on the user's operating system and computing environment.
This data will be used solely to obtain anonymous statistical information on website use and to check that the site is operating properly, and will be deleted immediately after processing. The data may be used to determine responsibility in the event of hypothetical computing crimes against the site: apart from this case, web contacts are not at present kept for more than seven days.
Data supplied voluntarily by users
Optional, explicit, voluntary sending of emails to the addresses indicated in this website means that the sender’s address will subsequently be acquired, as this is necessary to respond to requests, as will any other personal information included in the email.
Specific summary information will be progressively reported or displayed on website pages specifically intended for providing particular services on request.
No personal information on users is intentionally acquired by the site.
No cookies are used to transmit personal information, and the website does not use any permanent cookies or systems for tracking users.
Use of so-called session cookies (which are not stored in the permanent memory of the user’s computer and disappear when the browser is closed) is strictly limited to transmission of session identification (consisting of random numbers generated by the server) required to permit safe, efficient browsing of the website.
The session cookies used in this site eliminate the need for use of other information technology techniques which could potentially compromise the confidentiality of users’ browsing and do not permit acquisition of personal information identifying users.
Optional data providing
A part from the information specified above for browsing data, users are free to provide or not provide the personal information appearing in the forms for requesting information and other correspondence from the Garante or indicated in contacts with the Office.
Failure to provide this information may make it impossible to obtain the requested material.
For the sake of completeness, note that in some circumstances (which do not arise in ordinary site management) the Authority may request information under art 157 of Legislative Decree no. 196/2003 for the purposes of control of the processing of personal information. In these cases it is obligatory to reply, and administrative sanctions will be applied if there is no reply.
Personal information is handled using automated tools and only for the amount of time strictly necessary to achieve the aims for which it is collected.
Specific security measures are applied to prevent loss of data, illicit or incorrect use and unauthorised access.
Data subjets' rights
The subjects to whom the personal information refers are entitled to obtain confirmation of the existence or nonexistence of information and its content and source at any time, to check its accuracy and to ask that it be completed, updated or corrected (art. 7 of Legislative Decree no. 196/2003).
The same article gives data subjects the right to request deletion, conversion into anonymous form or freezing of data which is used in violation of the law, or to object to its handling with legitimate reason in any case.
Requests must be sent to the Data Controller:
Via Rossini 22,
20010 Arluno (MI)
Tel. 02 90376926
Fax 02 90376934
VAT no. 03981980158