Privacy policy
PRIVACY POLICY – REGULATION (EU) No. 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016
The Municipality of Vinci, with registered office at Piazza Leonardo Da Vinci 29, as Data Controller (hereinafter also “Controller”), pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter “GDPR” or “Regulation”) informs that personal data will be processed according to the following methods and purposes.
Principles Applicable to Processing
The Controller processes the personal data of the Data Subject (hereinafter “personal data” or “data”) to execute a contract or pre-contractual measures. The Controller, pursuant to the Regulation, informs that the legislation protects natural persons regarding the processing of personal data, which will be carried out according to principles of fairness, lawfulness, transparency, and protection of confidentiality and fundamental rights.
Legal Basis
The Controller processes personal data of the Data Subject:
-
when processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller (Article 6(1)(e));
-
when processing is necessary for the legitimate interests pursued by the Controller or by a third party (Article 6(1)(f)).
Purposes of Processing
Personal data are processed:
A) Without explicit consent of the Data Subject (Article 6(1)(b) GDPR) for:
-
carrying out a task in the public interest or connected with the exercise of official powers vested in the Controller and for the pursuit of legitimate interests;
-
communicating data to subjects, entities or authorities to whom communication is mandatory by law or orders of authorities;
-
exercising the Controller’s rights, for example the right to defense in court.
B) Only upon specific and distinct consent of the Data Subject (Article 6(1)(a) and Article 7 GDPR) for:
i) allowing the use of newsletters or other informational materials from the Municipality, as well as using Municipality applications (apps);
ii) using the individual services offered by the Municipality (e.g., canteen, school transport, library, online tax payments).
Failure to provide consent prevents execution of these activities. Refusal or incomplete/inaccurate data may prevent the use of newsletters, apps, or other services. Consent can be revoked at any time.
Methods of Processing
Personal data processing is carried out through operations such as collection, recording, organization, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction. Data may be processed in paper and/or electronic/automated form. Data will be kept no longer than 10 years after the end of the employment/collaboration relationship.
Access and Data Communication
Data may be accessible to employees and collaborators of the Controller, appointed as processors or system administrators; entities or authorities obliged by law; other public entities for administrative and accounting purposes; third-party contractors for administrative/accounting purposes.
Data are stored on servers within the EU. If necessary, servers may be relocated outside the EU, ensuring compliance with legal provisions and standard contractual clauses from the European Commission.
Rights of the Data Subject
Under Article 15 GDPR, the Data Subject has the right to:
-
obtain confirmation of whether personal data concerning them are being processed;
-
access personal data and information about the processing purpose, categories of data, recipients, storage periods, rights to rectification, erasure, restriction, opposition, and consent withdrawal;
-
lodge a complaint with the supervisory authority.
How to Exercise Rights
Rights can be exercised by sending a registered letter to Comune di Vinci, Piazza Leonardo da Vinci 29, or an email to protocollo@comune.vinci.fi.it.
Data Controller and DPO
The Data Controller is the Municipality of Vinci, Piazza Leonardo da Vinci 29. The Data Protection Officer is Avv. Francesco Barchielli, email dpo@comune.vinci.fi.it, phone +39 0571 933231.