Website Privacy Policy
This privacy notice on the processing of personal data (hereinafter, the “Privacy Policy”) is provided pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and the free movement of such data (hereinafter, for brevity, the “Regulation” or “GDPR”), as well as the applicable national legislation set forth in Legislative Decree 196/2003, as subsequently amended and supplemented (hereinafter, the “Privacy Code”), by the Chamber of Commerce, Industry, Crafts and Agriculture of Salerno, with registered office at Via Roma, 29 – Salerno (SA), 84121 (the “CCIAA”, the “Entity” or the “Data Controller”), which may be contacted at segreteria.generale@sa.camcom.it, to all users (hereinafter, the “Users” or the “User”) who visit and browse the Data Controller’s website available at the following URL https://visitsalernoandcilento.com/ (hereinafter, the “Website”), with regard to the processing of Users’ personal data.
Please be informed that the Data Controller has appointed a Data Protection Officer, who may be contacted at rpd.privacy@sa.camcom.it.
This Privacy Policy explains the purposes and methods by which the Data Controller collects and processes your personal data, the categories of data subject to processing, the rights of data subjects, and how such rights may be exercised.
This Privacy Policy applies exclusively to this Website and does not extend to any third-party websites that may be accessed through hyperlinks. By using the Website, Users acknowledge this Privacy Policy and are therefore invited to read it before providing any personal information of any kind.
With regard to Cookies, Users are invited to consult the specific Cookie Policy available on the Website.
1. Categories of Personal Data
A) Browsing Data
The IT systems and software procedures used to operate this Website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but, by its very nature, could, through processing and association with data held by third parties, make it possible to identify Users.
This category of data includes the IP addresses or domain names of the computers used by Users connecting to the Website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.), as well as other parameters relating to the User’s operating system and IT environment.
This data is used solely to obtain anonymous statistical information on the use of the Website and to monitor its correct functioning and is deleted immediately after processing. The data may be used to ascertain liability in the event of hypothetical cybercrimes committed against the Website.
B) Common Personal Data (Contact Form)
The Data Controller may also process your personal data (“Data”) when you request information through the appropriate contact form available on the Website. In particular, the Data Controller may process the following Data:
(a) first name and surname;
(b) email address at which you request to be contacted;
(c) any other information relating to your request, freely entered in the relevant section of the contact form.
With regard to the Data referred to in point (c), the Data Controller invites you not to provide information that is excessive or unrelated to what is necessary to process your request. Any such information will, in any event, not be taken into consideration by the Data Controller.
2. Purposes and Legal Basis of Processing
2.1. Contact Form Requests
The Data Controller may process your Data in order to respond to your request for information submitted through the appropriate form available on the Website.
The legal basis for such processing is the performance of pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR).
2.2. Legitimate Interest of the Data Controller in the Operation of the Website, Fraud Prevention and Exercise of the Right of Defence
Your Data will be processed by the Data Controller to ensure the proper browsing and functioning of the Website (Browsing Data), as well as to comply with the legal obligations to which the Data Controller is subject and, where necessary, to ascertain liability in the event of cybercrimes and to exercise its right of defence.
The legal basis for the processing is the legitimate interest of the Data Controller (Article 6(1)(f) GDPR) and compliance with legal obligations to which the Data Controller is subject (Article 6(1)(c) GDPR).
2.3. Promotional Communications
Subject to your explicit and freely given consent, the Data Controller may send you promotional communications regarding initiatives, services and/or other activities promoted by the Data Controller or its partners.
The consent provided may be freely withdrawn at any time by writing to segreteria.generale@sa.camcom.it or through the DPO at the following address: rpd.privacy@sa.camcom.it. However, in the event of withdrawal, the lawfulness of processing activities carried out on the basis of consent prior to its withdrawal shall remain unaffected.
3. Categories of Recipients to Whom Personal Data May Be Disclosed and Purposes of Disclosure
The Data Controller may disclose, for the same purposes, some of your personal data to third parties who will process your personal data as Data Processors, such as, for example, IT service providers supporting the Website. The list of Data Processors may be requested from the Data Controller at any time.
The list of Data Processors may be requested from the Data Controller by writing to segreteria.generale@sa.camcom.it or through the DPO at the following address: rpd.privacy@sa.camcom.it.
4. Data Retention Period and Duration of Processing
Your Browsing Data will be processed for a period of 30 days from the date of browsing the Website.
Data relating to your request will be retained for the time necessary to process and respond to it, and for an additional period of 30 days.
Your Data may be retained for promotional purposes from the date on which you provide your consent and for an additional period of 24 months, unless consent is withdrawn beforehand.
5. Rights of Data Subjects
Pursuant to the applicable legislation and with regard to the processing in question, you have the following rights:
● Right of access (Article 15 GDPR): the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you is being processed and, where this is the case, to obtain the relevant information;
● Right to rectification (Article 16 GDPR): the right to have your personal data corrected and, where necessary, updated;
● Right to erasure (Article 17 GDPR): the right to obtain the erasure of your personal data where it is no longer necessary for the purposes for which it was processed;
● Right to restriction of processing (Article 18 GDPR): the right to obtain restriction of the processing of your personal data in certain circumstances (e.g.: where you contest the accuracy of the personal data; where the processing is unlawful and you oppose the erasure of the personal data; where the personal data is necessary for the establishment, exercise or defence of legal claims; where you have objected to processing based on the legitimate interest of the Data Controller because you believe that your rights, interests and freedoms should prevail, and the Data Controller needs to assess this balance);
● Right to withdraw consent (Article 7 GDPR): where processing is based on consent, the right to withdraw your consent at any time, without prejudice to the lawfulness of processing carried out before such withdrawal.
You also have the right to lodge a complaint with the Supervisory Authority for the protection of personal data (in Italy, the Italian Data Protection Authority – Garante per la protezione dei dati personali) if you believe that the processing of your personal data is not carried out in compliance with the applicable data protection legislation.
To exercise your rights, you may send a communication to the Data Controller or exercise your rights through the DPO by writing to rpd.privacy@sa.camcom.it.
6. Updates
This Privacy Policy is subject to periodic updates. You are invited to regularly consult this page in order to remain informed of any changes made after your last visit.