Information on the processing of personal data of users consulting the Roma Capitale website https://www.romaperilclima.it pursuant to Article 13 of Regulation (EU) 2016/679
This page describes how the website https://www.romaperilclima.it is managed with regard to the processing of personal data of the users who consult it. This information is provided pursuant to Article 13 of the European Regulation 679/2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter also Regulation) for users of the services of our site, which are provided via the Internet. The information does not apply to other websites that may be consulted through our links, for which Roma Capitale (hereinafter also the Owner) is in no way responsible.
1. Personal data controller
(Art. 13.1.a Regulation 679/2016/EU)
The Data Controller is Roma Capitale. As of today, all information concerning the Data Controller, together with the updated list of designated Data Processors and System Administrators, can be found at Palazzo Senatorio, via del Campidoglio 1, 00186 Roma; PEC: protocollo.gabinettosindaco@pec.comune.roma.it.
2. Data Protection Officer (DPO) / Data Protection Officer (DPO)
(Art. 13.1.b Regulation 679/2016/EU)
The Data Protection Officer (“DPO”) of Roma Capitale can be reached at the following email address: dpo@comune.roma.it
3. Purposes of personal data processing and legal bases
(Art. 13.1.c Regolamento 679/2016/UE)
The https://www.romaperilclima.it website collects personal data such as, for example, the user’s IP address to enable the user to navigate through the site, as well as any identifying data, such as first name and surname and e-mail address, in order to respond to any user requests sent via the e-mail addresses on the pages of this website. The data are processed on the following legal bases:
- performing a task carried out in the public interest or in connection with the exercise of official authority (Article 6.1.e Regulation 679/2016/EU).
- For the performance of a contract to which the data subject is party (Article 6.1.b Regulation 679/2016/EU).
- the data subject has consented to the processing of his or her personal data.
Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services
No personal data should be entered on the site by minors without the prior consent of their parents or guardians. The owner encourages all parents and guardians to instruct minors in the safe and responsible use of their personal data on the Internet. The owner, however, undertakes not to retain or knowingly use any personal data collected from minors for any purpose, including disclosure to third parties.
4. The modalities of personal data processing
The processing of your personal data is carried out at the offices and premises of the Controller or, if necessary, at the premises of the persons indicated in paragraph 6, using both paper and electronic media, by telephone or telematic means, including by means of automated tools for storing, managing and transmitting the data, in compliance with all precautionary measures guaranteeing their security and confidentiality.
Processing will be carried out in such a way as to minimise the risk of destruction or loss, of unauthorised access, of processing not in accordance with the purposes of the data collection. Your personal data will be processed:
- in compliance with the principle of minimisation, pursuant to Articles 5.1.c and 25.2 of Regulation 679/2016/EU;
- lawfully and fairly.
Your data are collected:
- for specified explicit and legitimate purposes;
- exact and if necessary updated;
- relevant, complete and not excessive in relation to the purposes of the processing.
5. Nature of collection and consequences of failure to provide personal data
(Art. 13.2.e Regulation 679/2016/EU)
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.
Browsing data will be stored for 7 days, except for the time required to comply with requests received from the Judicial Authorities for purposes of defence and/or state security and/or prevention, detection or suppression of offences or to comply with requests received from the Personal Data Protection Authority.
Apart from what is specified for navigation data and what is specified in the specific information in other sections of this website, the user is free to provide personal identification data, subject to consent, to request specific information. Failure to provide such data may make it impossible to obtain the information requested.
6. Communication and dissemination of personal data
(Art. 13.1.e Regulation 679/2016/EU)
Your personal data may, if necessary, be communicated (by which term is meant giving knowledge of it to one or more specific persons) to
subjects whose right of access to the data is recognised by provisions of law, secondary and community regulations; collaborators, employees and consultants of Roma Capitale, within the scope of their duties and/or contractual obligations;
2016/679, acting on behalf of Roma Capitale;
- subjects whose right of access to data is recognised by legal provisions, secondary and EU regulations;
- collaborators, employees and consultants of Roma Capitale, within the scope of their duties and/or any contractual obligations;
- suppliers, including Data Processors designated pursuant to Article 28 of EU Regulation 2016/679, acting on behalf of Roma Capitale;
- natural and/or juridical persons, public and/or private, when the communication is necessary or functional to the carrying out of the activity of Roma Capitale in the manner and for the purposes illustrated above.
Your personal data are not disseminated under any circumstances, by which is meant the disclosure of such data in any way to an unspecified number of persons, without prejudice to legal obligations.
7. Criteria used to determine the retention period
(Art. 13.2.a Regulation 679/2016/EU)
Personal data are processed by manual and automated means, in compliance with the requirements of the Regulation. The data will only be kept for the time necessary to achieve the purpose for which they were collected (to allow navigation through the site and to respond to requests from interested parties), without prejudice to different requirements arising from legal obligations. Afterwards, personal data will be deleted. For the retention times of data collected in specific sections of this website, please refer to specific summary information that will be progressively reported or displayed on the pages of the site set up for particular services on request.
The retention times of cookies are indicated in the appropriate table on the Cookie Policy page.
8. Links to other websites
The site may contain hyperlinks to other websites, proposed to provide a better service to its users. The owner is in no way responsible for the content of websites that users may access via its site. The existence of a hyperlink to another site does not therefore imply approval or acceptance of responsibility by the owner for the content of the new site accessed, including in relation to the policy adopted for the processing of personal data and its use.
9. Rights of the data subject
(Art. 13.2.b Regulation 679/2016/EU)
Please note that, at any time, the person concerned may exercise:
- right to ask the Data Controller, pursuant to Art. 15 Reg. 679/2016/EU, for access to one’s personal data;
- the right to ask the Data Controller, pursuant to Art. 16 Reg. 679/2016/EU, to rectify one’s own personal data, where this does not conflict with the applicable data retention regulations;
- the right to ask the Data Controller, pursuant to Art. 17 Reg. 679/2016/EU, to delete one’s personal data, if this does not contravene the legislation in force on data retention;
- right to ask the data controller, pursuant to Art. 18 Reg. 679/2016/EU, to restrict the processing of their personal data;
- right to object to processing, ex Art. 21 Reg. 679/2016/EU.
The above rights may be exercised by contacting the PEC/email address: ufficioclima@comune.roma.it
10. Right to complain
(Art. 13.2.d Regulation 679/2016/EU)
The data subject is informed that he/she has the right to lodge a complaint with a supervisory authority (in particular the Italian Data Protection Authority www.garanteprivacy.it).
