Privacy Policy
Information on the processing of personal data
This page represents the “Privacy Policy” of this site and aims to provide information on how personal data of users who interact with this website are processed, who use the services provided by it to users, as well as to provide the information required by art. 13 of EU Regulation 2016/679.
This policy applies only to this site and not to other websites that may be accessed by the user through links on the pages of this site.
Data Controller
- Name: OpenCity Italia
- Address: Via Valentina Zambra 11 – 38121 Trento
- Tax Code/VAT: 02649840226
- Phone: 0461-917437
- Email: [email protected]
Data Protection Officer
The Data Protection Officer appointed by the Data Controller can be contacted at: [email protected]
Browsing data
Computer systems acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
This category includes:
- IP addresses
- Domain names of computers used
- URI addresses of requested resources
- Time of request
- Request method
- Size of file obtained
- Numeric code of response status
- Parameters related to operating system and computer environment
This data is used to obtain anonymous statistical information on site usage and to monitor its correct functioning, and is deleted immediately after processing.
The data could be used to ascertain responsibility in case of computer crimes against the site.
Processing purposes
Personal data will be processed for:
- Responding to requests sent via email and/or forms
- Fulfilling newsletter subscription requests with informational messages and commercial and promotional communications
- Enabling navigation and ensuring security, integrity and availability
- Statistical analysis on aggregated or anonymous data to monitor operation and traffic
- Ascertaining, exercising or defending rights in court
- Fulfilling obligations under law, regulation, EU legislation or orders from Authorities
Legal bases for processing
- Art. 6 par. 1 lett. b) GDPR - to respond to requests
- Art. 6 par. 1 lett. a) GDPR - with consent for newsletter subscription (revocable)
- Art. 6 par. 1 lett. f) GDPR - legitimate interest for site operation
- Art. 6 par. 1 lett. f) GDPR - legitimate interest for analysis and monitoring
- Art. 6 par. 1 lett. f) GDPR - legitimate interest for exercising right of defense
- Art. 6 par. 1 lett. c) GDPR - compliance with legal obligations
Optional nature of data provision
Users are free to provide their personal data, except for browsing data. Failure to provide data may result in the impossibility of obtaining what is requested or improper functioning of the site.
Processing methods
Processing will be carried out using both manual and computerized/telematic tools, in a manner that guarantees the security, integrity and confidentiality of the data in compliance with the organizational, physical and logical measures provided.
Subjects involved in processing and data communication
Processing will be carried out in part directly by the Data Controller. Recipients include authorized subjects belonging to the Controller’s organization.
Data may be communicated to individuals, companies, associations or professional firms providing assistance and consultancy services, with reference to accounting, legal, administrative, tax, financial and IT matters.
Data may be processed by subjects acting as autonomous controllers or designated Data Processors. An updated list of Processors can be provided upon request.
Communication required by police forces, judicial authorities, information and security bodies for defense or State security purposes is permitted.
Data will not be subject to dissemination.
Transfer of data abroad
Personal data will be processed within the European Economic Area (EEA). If transferred to Third Countries, the provisions of applicable legislation on the transfer of Personal Data to third countries will be respected, such as Standard Contractual Clauses provided by the European Commission.
Data retention
Personal data will be kept for the time strictly necessary to achieve the purposes for which it was collected, in any case not exceeding 24 months.
Data subject rights
Pursuant to European Regulation 679/2016 articles 15 to 22, the data subject may exercise the following rights:
- Request confirmation of the existence of personal data (right of access)
- Know its origin
- Receive intelligible communication
- Have information on the logic, methods and purposes of processing
- Request update, rectification, integration, deletion, anonymous transformation, blocking
- In cases of consent-based processing, receive data in a structured format readable by a data processor and in a commonly used format
- Lodge a complaint with the Supervisory Authority (Privacy Guarantor)
- Exercise all rights recognized by applicable law
Rights may be exercised through a request addressed without formalities to the Controller: [email protected]
Cookies
A cookie is a small data file that is transferred to the user’s device accessing this site to store certain information.
The site uses:
- Technical cookies: navigation or session cookies to ensure normal navigation and use
- Analytics cookies: to collect information in aggregated form about users and visits
- Functionality cookies: to allow navigation based on selected criteria
The site also uses:
Hubspot cookies: for user behavior monitoring, consent banner management, form management and chat operation. Hubspot cookie details
Google Analytics cookies: to acquire statistical information in anonymous or aggregated form about user navigation. Google Analytics cookie details
Most browsers automatically accept cookies, but the user can change settings to refuse them. If the user refuses cookies, they may not be able to use some interactive features of the site.
Contact Information
- Address: Via Valentina Zambra 11, 38121 Trento (Italy)
- Phone: (+39) 0461 917437
- Email: [email protected]
- PEC: [email protected]
Certifications
Company certified ISO 9001:2015 (certificate CISQ/Certiquality 62241 - IQNet 138045) and ISO 27001:2022 (certificate CISQ/Certiquality 62242)