INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF THE CODE RELATING TO PERSONAL DATA (LEGISLATIVE DECREE NO. 196/2003 HEREINAFTER THE “CODE”), AS AMENDED BY LEGISLATIVE DECREE NO. 101/2018 AND ARTICLE 13 OF THE EUROPEAN REGULATION (GDPR 679/2016 ALSO THE “REGULATION”) AND SUBSEQUENT NATIONAL ADAPTATION REGULATIONS.
INTRODUCTION
As the data controller BOLOGNA DISRTICT SRL VAT 04228771202, with registered office at Via Castiglione n. 6, Bologna (Bo) 40124, email: amministrazione@bolognadistrict.com, we inform you that, as a result of consulting and visiting this website, the company obtains personal data (any information concerning an identified or identifiable natural person) related to navigation.
The data controller may modify, integrate, or periodically update this Information, also considering any changes in applicable regulations or measures by the Guarantor for the Protection of Personal Data. Therefore, the interested party is invited to periodically check this information to be aware of any changes.
Therefore, in full compliance with the principles of fairness, lawfulness, and transparency, the data controller provides the following information.
With this document (“Information”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and the rights granted to you by Regulation (EU) 2016/679 concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (“GDPR”). This Information may be supplemented by the Data Controller where any additional requested services require further processing.
Therefore, in full compliance with the principles of fairness, lawfulness, and transparency, the data controller provides the following information.
1. DATA CONTROLLER
The Data Controller is BOLOGNA DISRTICT SRL VAT 04228771202, headquartered at Via Castiglione n. 6, Bologna (Bo) 40124, email: amministrazione@bolognadistrict.com.
2. TYPES OF PROCESSED DATA
The controller processes identifiable personal data related to browsing and consulting our portal (name, surname, email address, address, telephone number, IP address, operating system, type and version of the browser, server used).
These data are voluntarily provided by the User during navigation for the purposes listed below and essentially to obtain information or clarification, to receive a quote, to allow the data controller to verify user interactions on the site.
BOLOGNA DISRTICT SRL may use the data provided by you to send news, notifications (messaging), and allow participation in specific additional services such as receiving newsletters, for commercial communications, and for sending advertising material.
The sending of newsletters, messages to the address provided by you is subject to consent.
In any case, you can refuse to receive communications from BOLOGNA DISRTICT SRL at any time.
Any commercial communication sent by BOLOGNA DISRTICT SRL will provide you with the information and means necessary to refuse it.
The controller does not possess any of your sensitive data (or belonging to particular categories of data under Article 9 of the Regulation) nor any biometric, genetic, or judicial data.
The data will be processed in compliance with the principles of purpose limitation, data minimization, accuracy, storage limitation, relevance, non-excess, and protection of confidentiality.
In summary, the processing activities carried out are aimed at acquiring the following personal data:
| Category | Type |
|---|---|
| Common Data | Personal identification data, email address, telephone number, IP address. |
Privacy Policy – Website
INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF THE CODE RELATING TO PERSONAL DATA (LEGISLATIVE DECREE NO. 196/2003 HEREINAFTER THE “CODE”), AS AMENDED BY LEGISLATIVE DECREE NO. 101/2018 AND ARTICLE 13 OF THE EUROPEAN REGULATION (GDPR 679/2016 ALSO THE “REGULATION”) AND SUBSEQUENT NATIONAL ADAPTATION REGULATIONS.
INTRODUCTION
As the data controller BOLOGNA DISRTICT SRL VAT 04228771202, with registered office at Via Castiglione n. 6, Bologna (Bo) 40124, email: amministrazione@bolognadistrict.com, we inform you that, as a result of consulting and visiting this website, the company obtains personal data (any information concerning an identified or identifiable natural person) related to navigation.
The data controller may modify, integrate, or periodically update this Information, also considering any changes in applicable regulations or measures by the Guarantor for the Protection of Personal Data. Therefore, the interested party is invited to periodically check this information to be aware of any changes.
Therefore, in full compliance with the principles of fairness, lawfulness, and transparency, the data controller provides the following information.
With this document (“Information”), the Data Controller, as defined below, wishes to inform you about the purposes and methods of processing your personal data and the rights granted to you by Regulation (EU) 2016/679 concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (“GDPR”). This Information may be supplemented by the Data Controller where any additional requested services require further processing.
Therefore, in full compliance with the principles of fairness, lawfulness, and transparency, the data controller provides the following information.
1. DATA CONTROLLER
The Data Controller is BOLOGNA DISRTICT SRL VAT 04228771202, headquartered at Via Castiglione n. 6, Bologna (Bo) 40124, email: amministrazione@bolognadistrict.com.
2. TYPES OF PROCESSED DATA
The controller processes identifiable personal data related to browsing and consulting our portal (name, surname, email address, address, telephone number, IP address, operating system, type and version of the browser, server used).
These data are voluntarily provided by the User during navigation for the purposes listed below and essentially to obtain information or clarification, to receive a quote, to allow the data controller to verify user interactions on the site.
BOLOGNA DISRTICT SRL may use the data provided by you to send news, notifications (messaging), and allow participation in specific additional services such as receiving newsletters, for commercial communications, and for sending advertising material.
The sending of newsletters, messages to the address provided by you is subject to consent.
In any case, you can refuse to receive communications from BOLOGNA DISRTICT SRL at any time.
Any commercial communication sent by BOLOGNA DISRTICT SRL will provide you with the information and means necessary to refuse it.
The controller does not possess any of your sensitive data (or belonging to particular categories of data under Article 9 of the Regulation) nor any biometric, genetic, or judicial data.
The data will be processed in compliance with the principles of purpose limitation, data minimization, accuracy, storage limitation, relevance, non-excess, and protection of confidentiality.
In summary, the processing activities carried out are aimed at acquiring the following personal data:
| Category | Type |
|---|---|
| Common Data | Personal identification data, email address, telephone number, IP address. |
4. DATA TRANSFER OUTSIDE THE EU
Personal data is stored at the company’s headquarters in Bologna (Bo), Via Quattro Novembre n. 10, and therefore, within the European Union, as well as at the web hosting data center.
5. RECIPIENTS
The data may be made accessible for the purposes outlined in point 3 to the following categories of subjects:
- a) Employees and collaborators previously authorized for processing;
- b) Third-party companies (Orco SRL) or other subjects (indicatively, companies providing IT services or dealing with billing requirements) that carry out outsourced activities on behalf of the data controller, in their capacity as external data processors;
- c) Website hosting companies.
An updated list of external data processors can be requested from the data controller’s contact details.
The data may also be disclosed to:
- Supervisory bodies;
- Judicial authorities;
- Public authorities;
All subjects to whom communication is mandatory by law for the fulfillment of the purposes described in point 2. These subjects will process the data as independent data controllers.
Your data will not be disclosed.
6. SOCIAL PAGE
META
When a user uses the Page managed by the Data Controller, META (“Social Media”) collects information such as the types of content viewed or interacted with, actions taken, and information about the devices used (IP addresses, operating systems, browser types, language settings, cookie data).
Page Insights are aggregated statistics created from specific events recorded by Meta’s servers when users interact with the Pages and the content therein.
As explained in Meta’s Privacy Policy, the Social Media collects and uses information to provide statistical data collection services defined as Page Insights to page administrators to understand how people interact with the content therein.
Details regarding the processing methods executed by Meta are available at the following link:
- https://www.facebook.com/privacy/explanation
- https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
Details about the personal data processed for Insights are available at the following link: https://www.facebook.com/legal/terms/information_about_page_insights_data
Details about cookies used by Meta are available at the following link: https://www.facebook.com/policies/cookies/
The joint controller agreement between the Data Controller and Facebook – Meta covers the creation of such events and their aggregation into Insights on the Page provided to each administrator.
The legal basis for processing is the Data Controller’s legitimate interest, Article 6, paragraph 1, letter f), GDPR. Therefore, your prior consent to processing is not required.
Nature of provision: Mandatory – Failure to provide the requested data will prevent the Data Controller from providing services via the Page published on social media related to Meta.
Period of personal data retention: The collected data will be processed for the time strictly necessary for the purposes described above, as specified in the aforementioned Meta policies.
Processing Method: The processing is carried out electronically by the Co-Controller, Meta.
BOOKING
When a user uses the Page managed by the Data Controller, Booking collects information such as the types of content viewed or interacted with, actions taken, and information about the devices used (IP addresses, operating systems, browser types, language settings, cookie data).
Page Insights are aggregated statistics created from specific events recorded by Booking’s servers when users interact with the Pages and the content therein.
As explained in Booking’s Privacy Policy, the website collects and uses information to provide statistical data collection services defined as Page Insights to page administrators to understand how people interact with the content therein.
Details regarding the processing methods executed by Booking are available at the following link: https://www.booking.com/content/privacy.it.html
Details about personal data processed for Insights are available at the following link: https://partner.booking.com/en-gb/industry-insights
Details about cookies used by Booking are available at the following link: https://www.booking.com/content/privacy.html
The joint controller agreement between the Data Controller and Booking covers the creation of such events and their aggregation into Insights on the Page provided to each administrator.
The legal basis for processing is the Data Controller’s legitimate interest, Article 6, paragraph 1, letter f), GDPR. Therefore, your prior consent to processing is not required.
Nature of provision: Mandatory – Failure to provide the requested data will prevent the Data Controller from providing services via the Page published on social media related to Booking.
Period of personal data retention: The collected data will be processed for the time strictly necessary for the purposes described above, as specified in the aforementioned Booking policies.
Processing Method: The processing is carried out electronically by the Co-Controller, Booking.
EXPEDIA GROUP
When a user uses the Page managed by the Data Controller, Expedia Group collects information such as the types of content viewed or interacted with, actions taken, and information about the devices used (IP addresses, operating systems, browser types, language settings, cookie data).
Page Insights are aggregated statistics created from specific events recorded by Expedia Group’s servers when users interact with the Pages and the content therein.
As explained in Expedia Group’s Privacy Policy, the website collects and uses information to provide statistical data collection services defined as Page Insights to page administrators to understand how people interact with the content therein.
Details regarding the processing methods executed by Expedia Group are available at the following link: https://www.expedia.it/lp/b/lg-privacypolicy
Details about personal data processed for Insights are available at the following link: https://advertising.expedia.com/insights/
Details about cookies used by Expedia Group are available at the following link: https://www.expedia.it/lp/b/support/cookies
The joint controller agreement between the Data Controller and Expedia Group covers the creation of such events and their aggregation into Insights on the Page provided to each administrator.
The legal basis for processing is the Data Controller’s legitimate interest, Article 6, paragraph 1, letter f), GDPR. Therefore, your prior consent to processing is not required.
Nature of provision: Mandatory – Failure to provide the requested data will prevent the Data Controller from providing services via the Page published on social media related to Expedia Group.
Period of personal data retention: The collected data will be processed for the time strictly necessary for the purposes described above, as specified in the aforementioned Expedia Group policies.
Processing Method: The processing is carried out electronically by the Co-Controller, Expedia Group.
When a user uses the Page managed by the Data Controller, LinkedIn collects information such as the types of content viewed or interacted with, actions taken, and information about the devices used (IP addresses, operating systems, browser types, language settings, cookie data).
Page Insights are aggregated statistics created from specific events recorded by Meta’s servers when users interact with the Pages and the content therein.
As explained in LinkedIn’s Privacy Policy, the Data Controller collects and uses information to provide statistical data collection services defined as Page Insights to page administrators to understand how people interact with the content therein.
Details regarding the processing methods executed by LinkedIn are available at the following link: https://www.expedia.it/lp/b/support/cookies
Details about personal data processed for Insights are available at the following link: https://it.linkedin.com/legal/user-agreement?
Details about cookies used by LinkedIn are available at the following link: https://it.linkedin.com/legal/cookie-policy
The joint controller agreement between the Data Controller and LinkedIn covers the creation of such events and their aggregation into Insights on the Page provided to each administrator.
The legal basis for processing is the Data Controller’s legitimate interest, Article 6, paragraph 1, letter f), GDPR. Therefore, your prior consent to processing is not required.
Nature of provision: Mandatory – Failure to provide the requested data will prevent the Data Controller from providing services via the Page published on social media related to LinkedIn.
Period of personal data retention: The collected data will be processed for the time strictly necessary for the purposes described above, as specified in the aforementioned LinkedIn policies.
Processing Method: The processing is carried out electronically by the Co-Controller, LinkedIn.
7. PROCESSING METHODS
The processing of personal data is carried out through the operations indicated by the Privacy Code and Article 4 no. 2) of EU Regulation 2016/679, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, limitation, communication, deletion, and destruction of data.
The data undergo electronic processing.
8. RIGHTS OF THE DATA SUBJECT
Under the Privacy Code and Articles 15 and following of the Regulation, as the Data Subject, you have the right to:
- Obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
- Obtain information about the origin of personal data, the purposes and methods of processing, the logic applied in case of processing carried out with the aid of electronic instruments, the identification details of the owner and the managers, the subjects or categories of subjects to whom the personal data may be communicated as designated processors;
- Obtain the updating, rectification, or, when interested, integration of data;
- Obtain the erasure of data in the cases provided for by Art. 17 Reg. EU 2016/679, transformation into anonymous form, or blocking of data processed in violation of the law, including data that does not require storage for the purposes for which the data was collected or subsequently processed;
- Obtain the limitation of processing in cases provided for by Art. 18 Reg. EU 2016/679;
- Receive, in a structured, commonly used, and machine-readable format, the personal data concerning you, and the right to transmit them to another controller;
- Object, in whole or in part, for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
- Lodge a complaint with the Supervisory Authority for the Protection of Personal Data.
9. EXERCISE OF RIGHTS
The exercise of rights is not subject to any formal constraint and is free of charge.
To do so, you can directly contact the Data Controller by sending a registered letter with return receipt to the following address: BOLOGNA DISRTICT SRL VAT 04228771202, with registered office in Via Castiglione n. 6, Bologna (Bo) 40124, email: amministrazione@bolognadistrict.com.
10. SECURITY MEASURES
The Data Controller implements appropriate technical and organizational security measures to prevent data loss, unlawful or incorrect use, and unauthorized access. It also ensures the possibility of restoring – in case of damaging events – the functionality of protections on the systems and processed data.