Information on Privacy and cookie management

The Province of Treviso, located in via Cal di Breda 116 – 31100 Treviso (hereafter "Province of Treviso") is constantly committed to protect the online privacy of its users. This document will allow you to know our privacy policy, to understand how your personal data are handled when using our services and to permit you, where appropriate, to give an expressed and aware consent to the processing of your personal data in those sections of the Web site where it is requested to provide personal data. We remind you that, in the different activities carried out by the offices and in the sections of the Provincial website where we collect your personal data, some specific information are published pursuant to the art. 13 of EU Regulation 2016/679 (hereafter: "Regulation") that need to be examined before provisioning the requested data. Such information are not present in the cases of information required to carry out those activities envisaged in the Art. 6 paragraphs b - c - e (data processed for contractual obligations, legal obligations, obligation related to the exercise of public powers). The information and data supplied by you or otherwise acquired as part of the registration to the different services of the Province, will be processed in compliance with the provisions of the Regulation and the confidentiality obligations inspiring the activities of the Administration. According to the rules of the Regulation, the data processing carried out by the Province of Treviso will be based on the principles of lawfulness, correctness, transparency, limitation and retention purposes, data minimization, accuracy, integrity and confidentiality.

1. Owner and Data Protection Officer

The Data Controller is the Pro Tempore President of the Provincial Administration. The structure has a data protection officer (DPO). The DPO is available for any information concerning the processing of personal data by the Province of Treviso. You can contact the DPO writing to: This email address is being protected from spambots. You need JavaScript enabled to view it. or phoning to: +39 0422 656683.

2. Personal data undergoing processing

Processing personal data means any operation or set of operations, performed with or without the aid of the automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of provision, comparison or interconnection, limitation, cancellation or destruction. We inform you that the processed personal data are made up of an identifier such as the name, the e-mail, an identification number, the location data, an online identifier and other data suitable for making it identified/identifiable. They depend on the kind of requested services (hereinafter "Personal Data"). In particular, the Personal Data processed through the Website are the following ones:

a. Connection data

The computer systems and the software procedures used to operate the Site acquire, during their normal operation, some Personal Data whose transmission is implicit in the use of the Internet communication protocols. These information are not collected to be associated to the identifiers but, by their very nature, through the processing and association with data held by third parties, they could allow the users to be identified. This category of data includes IP addresses or the domain names of the computers used by users who connect to the Site, the Uniform Resource Identifier (URI) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user's computer environment. These Data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify possible anomalies and/or abuses. The Data could be used to ascertain the responsibility in case of hypothetical computer crimes against the site or third parties: except for this possibility, currently, the Data on the Web do not persist for more than fourteen days, unless requested by the user.

b. Data processed in the registration on the site

Filling out the registration form, you can register for the services. If, instead, you are already a registered user of the Provincial Administration of Treviso, by your identification code for the Provincial Administration, you can simply click to authenticate yourself directly to the control panel.

c. Data voluntarily provided by the interested party

In the use of particular services, the personal data may be processed by third parties sent by you to the Service manager. Regarding this point, you are the independent data controller, assuming all the legal obligations and responsibilities. In this respect, you confer the widest indemnity for any objection, claim, request for compensation for damage, etc. that the Province of Treviso should receive from third parties whose personal data have been processed through your use of the services in breach of the applicable rules on the protection of the Personal Data. In any case, if you provide or process the Personal Data of third parties in the use of the service, you guarantee from now - assuming all the related liability - that this particular processing is based on a suitable legal basis (for example the consent of the interested party) pursuant to the art. 6 of the Regulation that legitimizes the processing of the concerned information.

d. Traffic data

In the use of the e-mail, the Province of Treviso processes certain data to transmit some communications to the electronic communication network. These data are those listed in the Legislative Decree 30 May 2008, n. 109, and, particularly, they are:

• The used IP address, the e-mail address and the possible further identification of the sender;
• The IP address and the fully qualified domain name of the mail exchanger host, in the case of SMTP technology or any type of host related to a different technology used for the transmission of the communication;
• The e-mail address, and any further identification, of the recipient of the communication;
• The IP address and the fully qualified domain name of the email exchanger host (in case of SMTP technology), or any type of host (regarding a different used technology), which provided the message;
• The IP address used for receiving or consulting the recipient's e-mail messages regardless of the used technology or protocol;
• The date and time (GMT) of the connection and disconnection of the user of the e-mail service in Internet and the used IP address, regardless of the technology and the used protocol;
• the used Internet service.

These data are processed and stored by the Province of Treviso to provide the service with the necessary security measures making them accessible only to those people specifically authorized in writing, who access them only after a request from the judicial authority. By law, the data are kept by the Province of Treviso to ascertain and suppress possible crimes.

Cookie

1. Definitions, characteristics and enforcement.

The cookies are small text files that the sites, visited by the user, send and record on his computer or mobile device, to be then retransmitted to the same sites at the next visit. Thanks to the cookies, a site remembers the user's actions and preferences (such as login data, the chosen language, the font size, other display settings, etc.) so that they do not have to be re-shown when the user returns to visit the same site or surf from one page to another. The cookies, therefore, are used to perform computer authentications, monitoring sessions and storing information regarding the activities of the users accessing a site and they may also contain a unique identification code that allows to track the user's surfing inside the same site for statistical purposes. Surfing in a site, the user can also receive (on his computer or mobile device) some cookies of sites or web server other than the one he/she is visiting (the so called "third party" cookies). Some operations could not be performed without the use of the cookies which, in some cases, are therefore technically necessary for functioning the site. There are different types of cookies, depending on their characteristics and functions, and these can remain in the user's computer or mobile device for different periods of time: the session cookies that are automatically deleted when the browser is closed; the persistent cookies, that remain in the user's equipment until a pre-established expiry date. According to the legislation in force in Italy, the user's express consent is not always required for the use of the cookies. In particular, the "technical cookies" - those used for the sole purpose of transmitting a communication over an electronic communication network or, strictly necessary, to provide a service explicitly requested by the user- do not require such consent. In other words, these are cookies that are essential for the operation of the site or necessary to perform activities requested by the user.

Among the technical cookies, which do not require an express consent for their use, the Italian Data Protection Authority (see Measure for the simplified procedures for information and the acquisition of consent for the use of cookies - May 8, 2014, hereinafter only "Ruling") also includes:

• aAnalytics cookie, when used directly by the site operator to collect information, in an aggregate form, on the number of users and how they visit the site itself;
• browsing or session cookies (to authenticate),
• functionality cookies, which allow the user to surf accordingly to a set of selected criteria (for example: the language, the selected products to purchase) in order to improve the provided service.

The Site uses the following cookies that can be de-selected, except for the third-party cookies for which you must refer directly to the methods of selection and de-selection of the respective cookies, indicated by the links:

• Surfing or session technical cookies strictly necessary for the operation of the Site or to allow the user to use the requested contents and services;
• Analytics cookies that allow to understand how the site is used by users. By these cookies no information about the user's identity or any personal data are collected. The information are processed in an aggregate and anonymous form.
• Functionality cookies that are used to activate specific functions of the Site and a set of selected criteria (for example the language) in order to improve the supplied service.

ATTENTION: disabling the technical and/or functional cookies, the Site may not be available or certain services and functions of the Site may be unavailable or may not work properly and you are forced to change or manually enter certain information or preferences each time you visit the site.

2. Purpose of the processing

The data processing we perform -both for the regulatory obligations and, where necessary, with specific consent - has the following purposes:

• Allowing the provision of the requested services;
• Allowing the surfing and consultation of the website of the Province of Treviso;
• Responding to the requests for assistance or information, which we will receive via e-mail or telephone. As regards the requests made by phone, we inform you that the calls can be registered so that the Province of Treviso can demonstrate that it has correctly attended the requests;
• Complying with the legal, accounting and tax obligations;
• Developing studies, research, statistics, if required by law;
• Only with reference to certain services, the data may be processed for a communication purpose towards third public parties, if required by law;
• for the exclusive purposes of security and prevention against fraudulent behaviour, the Controller establishes an automatic control system involving the detection and analysis of the behaviour of the user in the site associated with the processing of personal data including the IP address.

  3. Legal basis and mandatory or optional nature of the processing

For the processing of the Personal Data for the purposes included in the Section 2 (a-b-c), the legal basis is the art. 6 (1) (b - d) of the Regulation as the processing is necessary for the provision of those services the P.A. is supposed to provide. The provision of the personal data for these purposes is necessary and the failure to provide them would make impossible to activate the required services. The purpose of the section 2 (d) represents a legitimate processing of the personal data pursuant to art. 6 (1) (c) of the Regulation. Once the personal data have been provided, the processing may indeed be necessary to comply with the legal obligations to which the Province of Treviso is subject.

4. Recipients of the Personal Data

The personal data may be shared, for the purposes referred to in the Section 2 above, with:

• subjects acting on the basis of legislative rules also affecting the Province of Treviso;

• subjects, bodies or authorities to which it is mandatory to communicate your personal data under the provisions of law or orders of the authorities (for example, in the course of criminal investigations the Province of Treviso may receive requests from the judiciary authority to provide the log of electronic traffic);

persons authorized by the Province of Treviso to process personal data necessary to perform activities strictly related to the provision of the services, whether they are committed to confidentiality or have an appropriate legal obligation of confidentiality, such as the employees of the Province of Treviso.

5. Transferring of the Personal Data

The personal data will not be shared with the recipients outside the European Economic Area.

6. Data retention

The personal data processed for the purposes set out in the section 2 will be kept for the time stated for the Data retention in public administrations. Further information about the period of the Data retention and the criteria used to determine this period can be requested, by writing, to the Data Controller or the DPO.

7. Rights of the interested parties

You have the right, at any time, to ask to the Province of Treviso the access to your personal data, to rectify or cancel them or to oppose their processing in the cases provided in the Article 20 of the Regulation. You have the right to request the limitation of the processing in the cases provided for by the art. 18 of the Regulation, as well as to obtain, in a structured format, in common use and readable by an automatic device, the Data concerning them (portability), in the cases provided by the art. 20 of the Rules. The requests should be sent in writing by mail to the RDP: This email address is being protected from spambots. You need JavaScript enabled to view it.. The address is the one to send the requests to exercise the right to Data portability and get more information about the content. In any case, you are always entitled to lodge a complaint with the competent supervisory authority (Personal Data Protection Authority), pursuant to the art. 77 of the Regulation, if you considers that the processing of your Data is contrary to the legislation in force.

8. Modifications

This privacy policy has been in force since 25 May 2018. The Province of Treviso reserves the right to modify or simply update its content, in part or completely, also due to the changes in the applicable legislation. If the modifications to the present Policy include substantial changes in the Data processing or may have a significant impact on the interested parties, the Province of Treviso will take care to notify the interested parties accordingly.