Privacy Information Notice
The methods of managing the website with reference to processing the personal data of users and visitors who consult it are described below. This is an information notice provided, also in accordance with Art. 13 of "GDPR - General Data Protection Regulation" (EU) 2016/679, to those who interact with this website only and not with any other websites that may be consulted via links.
Personal Data Processing Controller and
Data Protection Officer
The Personal Data Processing Controller is CSI Piemonte, based in Turin, Corso Unione Sovietica 216, in the form of its Legal Representative whose contact details are: protocollo@cert.csi.it
The Data Controller has appointed a Data Protection Officer (DPO) who can be contacted at the following e-mail address: rpd.privacy@csi.it
Type of data processed
The following data are processed when browsing the CSI Piemonte websites:
- Data willingly provided by the user
The willing and explicit transmission of personal data to the email addresses stated in the different access channels of the present website implies the subsequent acquisition of user’s data necessary to respond to the requests made and/or provide the requested service. Additional information relating to the processing of user data with respect to any services requested is reported or displayed in the pages of the website set up for the specific requested services.
- Browsing data
The simple navigation of the website does not require personal data granting, except those personal data automatically collected described below. The computer systems and applications dedicated to the functioning of the website identify, during browsing, some personal data whose transmission is implicit in the use of Internet communication protocols. This is data that is not collected in order to identify users but that, by its very nature, could, through processing and association with data held by third parties, allow them to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to send the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the computer environment of users. This data is used for the sole purpose of obtaining anonymous statistical information on use of the website and it may be used, at the request of the relevant Authorities, exclusively for investigations or assessments of liability in the judicial venue, in compliance with existing regulations.
- Cookies
Cookies are small text files that the web server deposits on the device through which users browse, without identifying them. A cookie cannot read personal data saved on the hard disc or cookie files created by other web sites, as the only information it can contain is that provided by users themselves. The pages of CSI Piemonte websites use the following types of cookies:
1. technical cookies: they are not permanently stored on the user's device and are necessary to allow the safe and efficient exploration of the sites. Such use is limited to session cookies and in general to domain cookies, such as user preference cookies and tracking cookies (e.g. BlueStripe.PVN). The use of these cookies is done in such a way as to avoid the use of other IT techniques that could potentially compromise the confidentiality of users' browsing, as they do not enable the acquisition of personal identification data of the user.
2. analytics cookies: in order to facilitate the navigation of the CSI Piemonte websites and the way visitors arrive there, the site uses Google Analytics, a web analysis service provided by Google, which adheres to the privacy principles established by the United States government (US Safe Harbor Privacy Principles), to whose Privacy Policy we refer you. To analyze the points of interest of the sites visited by the user, Google Analytics uses cookies for statistical purposes and collects information in aggregated form only, without associating the user's IP address to any other data held by Google itself. Tools have been introduced that reduce the identification power of cookies by masking significant portions of the IP. In addition, Google Analytics settings have been activated so that Google does not cross-reference the data collected with other information it already has.
Browsing the CSI Piemonte websites implies acceptance of the conditions of use, including the functionalities connected to cookies, which can be disabled using the specific options present in the different types of browser. The cookies used by CSI Piemonte do not collect any information on the user's identity, nor any personal data. The information is always processed in aggregate and anonymous form. Except as indicated above, the websites of CSI Piemonte do not use other cookies to transmit information of a personal nature nor do they use any other system for tracking users.
How to disable cookies (opt-out)
Most browsers accept cookies automatically, but you can opt out of them. If you do not wish to receive or store cookies, you can change your browser's security settings (Internet Explorer, Google Chrome, Mozilla Firefox, Safari Opera, etc.). Each browser has different procedures for managing the settings. Normally you need to access the "Options/Settings/Advanced Preferences" section of your browser and here you can access a section entitled "Privacy/Security/Data". According to the browser, it is possible to block all cookies, choose to block only those from third parties, or rather have cookies deleted once the browser is closed.
Processing purposes
Your personal data are collected and processed in compliance with the principles of correctness, lawfulness, data minimization and privacy protection, exclusively for the following purposes:
- in case of data voluntarily sent to the e-mail addresses indicated on the CSI Piemonte websites, to give feedback to inquiries and/or provide the requested service;
- in case of navigation data, to obtain anonymous statistical information on the use of the websites and possibly, in case of abuse of use, to process requests from the competent authorities, as part of inspections or investigations of liability in judicial proceedings.
Legal basis for the processing
The voluntary provision of your data is necessary for the above mentioned purposes. The processing of data has therefore its legal basis in:
- providing a feedback or service specifically requested (art. 6, paragraph 1, letter b) of GDPR);
- the fulfilment of legal obligations and in the pursuit of the legitimate interest of CSI Piemonte (art. 6, paragraph 1, letter c) and f) of GDPR.
Processing methods
Your data are processed using IT methods, exclusively by authorized and instructed subjects and kept confidential by the Data Controller or by entities/companies expressly appointed as Data Processors. In any case, your data are processed by adopting all those technical and organizational measures appropriate to protect the rights, freedoms and legitimate interests that are recognized by law as interested parties.
Data retention
Your data are stored on servers located at CSI Piemonte for a period of 180 days.
Communication and dissemination of data
Your data may be communicated to third parties - data processors - whose services are necessary to carry out the activities of Data Controller, judicial authorities (for the detection and prosecution of crimes), or those subjects to whom such communication is required by law for the performance of the above purposes. Your personal data will not be in any way the object of communication and dissemination outside the cases mentioned above, nor of transfer to a third country outside Europe, nor of automated decision-making processes including profiling.
Rights of Interested Parties
As the Interested Party, you may exercise - in the cases indicated - the rights provided for in Articles from 15 to 22 of the GDPR (including those to obtain confirmation of the existence or not of your personal data and their availability in intelligible form; to be informed of the logic and purposes on which the processing is based; to obtain the cancellation, transformation into anonymous form or limitation or blocking of data processed unlawfully, as well as updating, rectification or, if there is interest, integration of data; to oppose for legitimate reasons to the processing itself) by contacting the Data Controller or the Data Protection Manager, using the above-mentioned contact data. You may also exercise your right to lodge a complaint with the Supervisory Authority or appeal to the competent judicial authorities if the processing of your personal data is carried out in violation of the provisions of GDPR, in accordance with Articles 77 and 79 of GDPR.
Changes to this Privacy Information Notice
This document is updated to July 2019. CSI Piemonte reserves the right to update this notice at any time; users undertake to visit this section periodically in order to view any changes that may have been made.