Information notice on the processing of personal data (pursuant to Article 13 of EU Regulation 2016/679 – GDPR)
The Gruppo Storico e Sbandieratori Città di Castiglion Fiorentino (hereinafter the “Data Controller”) informs users of the website (hereinafter the “Site”) about the methods of processing personal data that may be collected while browsing.
1. Data Controller
The Data Controller is:
Gruppo Storico e Sbandieratori Città di Castiglion Fiorentino
Registered office: Via Madonna del Rivaio, 56 - 52043 Castiglion Fiorentino AR - Italy
Email:
info@gruppostorico.com
2. Types of data processed
While browsing the Site, the following data may be collected:
Browsing data
The IT systems and software procedures used to operate the Site acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols.
Such data include, by way of example:
- IP address (in anonymised form)
- browser type
- operating system
- pages visited
- date and time of access
- time spent on pages
These data are not used to directly identify the User.
3. Purpose of processing
Data are processed for the following purposes:
- to ensure the proper technical functioning of the Site
- to obtain aggregated statistics on the use of the Site through Google Analytics
- to improve the content and structure of the Site
4. Legal basis for processing
Processing is based on:
- the legitimate interest of the Data Controller for technical cookies necessary for the functioning of the site (Art. 6(1)(f) GDPR);
- the User’s consent for the use of statistical cookies (Art. 6(1)(a) GDPR).
Consent may be withdrawn at any time through the cookie preference management system.
5. Processing methods
Data are processed using IT and telematic tools, in compliance with the principles of lawfulness, fairness, transparency and data minimisation provided for by the GDPR.
Appropriate technical and organisational measures are adopted to ensure data security.
6. Communication and transfer of data
The Site uses the Google Analytics service, provided by Google LLC.
The collected data may be transferred to the United States.
Google LLC adheres to the EU-US Data Privacy Framework and uses Standard Contractual Clauses approved by the European Commission to ensure an adequate level of protection.
7. Data retention period
Data collected through Google Analytics are retained for a maximum period of 14 months.
Technical data necessary for the functioning of the site are retained for the time strictly necessary for the purposes for which they are collected.
8. User rights
The User may exercise at any time the rights provided for in Articles 15–22 of the GDPR, including:
- access to personal data
- rectification or erasure
- restriction of processing
- objection to processing
- withdrawal of consent
- data portability (where applicable)
Requests may be sent to the contacts indicated in section 1.
The User also has the right to lodge a complaint with the Data Protection Authority.
9. Nature of data provision
The provision of data for statistical purposes is optional and subject to the User’s consent.
Failure to provide consent does not affect browsing of the Site.