This notice is provided pursuant to Article 13 of EU Regulation 2016/679 (GDPR), Legislative Decree no. 101/2018 and the Privacy Code (Legislative Decree no. 196/2003), to those who use the web services of the Municipality of Salerno accessible from the following addresses:
http://www.comune.salerno.it
http://www.comune.salerno.it/client/menu.aspx?menu=5&stile=4
https://servizi.comune.salerno.it/web/home

1. Data Controller and Data Protection Officer
The Data Controller is the Municipality of Salerno, with registered office at Via Roma – Palazzo di Città, 84100 Salerno.
Email/PEC: protocollo@pec.comune.salerno.it
The Data Protection Officer (DPO) is Mrs. Vincenza Pierri, Esq., at the Municipality of Salerno.
PEC: avvvincenzapierri@pec.ordineforense.salerno.it

2. Subject of the processing
The processing of personal data is intended for the performance of tasks carried out in the public interest or otherwise connected with the exercise of public powers vested in the Municipality, based on laws, the Statute and municipal regulations. Processing operations, as set out in Article 4(2) of the GDPR, may include: collection, recording, organisation, storage, consultation, processing, modification, selection, retrieval, comparison, use, interconnection, blocking, communication, erasure and destruction of data.

3. Legal basis
Processing is carried out on the basis of laws, the Statute and regulations, for reasons of substantial public interest or to fulfil legal or regulatory obligations.

4. Methods of processing
Data are generally processed using automated tools, for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are in place to prevent data loss, unlawful or improper use, and unauthorised access.
Processing is carried out exclusively by authorised personnel, in compliance with the principles of fairness, lawfulness, transparency, relevance and non-excessiveness.
Data provided by registered users (first name, surname, place of residence, telephone contacts, email) may be used for further processing compatible with the purposes of collection, such as sending institutional communications and public-interest notices by email. The data of those requesting documents or informational materials (newsletters, answers to queries, acts and measures) are used solely to deliver the requested service and are communicated to third parties only where necessary (e.g. shipping services). Unless otherwise provided by law, such data are not subject to communication or dissemination.

5. Purposes of the processing
Data are processed exclusively for purposes falling within the institutional duties of the Administration or to fulfil legal or regulatory obligations. This includes data relating to registrations and sign-ups on the website, necessary for managing relations with the Municipality, for effective institutional communication, and for fulfilling any legal, regulatory or contractual obligations.

6. Nature of the provision of data
The provision of data is optional but necessary for the proper conduct of the procedure, related administrative obligations, or the delivery of the service. Failure to provide the necessary data (e.g. personal details, email, telephone number) may make it impossible to obtain what was requested.

7. Data voluntarily provided by the user
The optional, explicit and voluntary sending of emails to the addresses indicated on the website, as well as the completion of online forms, entails the acquisition of the sender’s address and any other personal data provided, necessary to respond to requests. Specific notices are provided on the pages dedicated to particular services on request.

8. Browsing data
The IT systems and software procedures of the website acquire, during normal operation, certain data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects but could, through processing and association with third-party data, allow users to be identified.
This category includes: IP addresses or domain names of the devices used, URI addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (success, error, etc.) and other parameters relating to the user’s operating system and IT environment.
These data are processed, for the time strictly necessary, solely to obtain anonymous statistical information on the use of the site and to verify its proper functioning. They could be used by the competent authorities to ascertain liability in the event of computer crimes against the site.

9. Recipients of the data
In relation to the procedure and related activities, the Municipality may communicate the acquired data to other competent public or private entities, in the cases provided for by laws, the Statute and municipal regulations.

10. Data retention period
Data are kept for a period no longer than that provided for by the legal basis legitimising the processing and in accordance with the rules on the retention of administrative documentation. To this end, including through periodic checks, the relevance, non-excessiveness and indispensability of the data processed are verified.

11. Place and methods of processing
Processing takes place mainly at the Municipality of Salerno and possibly with the collaboration of other parties specifically designated as data processors. It is carried out for the time strictly necessary to achieve the purposes, including through automated tools, in compliance with the security measures adopted.
Data are processed exclusively by authorised personnel, mainly technical, or by persons authorised for occasional maintenance operations, in accordance with the principles of fairness, lawfulness, transparency, relevance and non-excessiveness.
Data provided by users who register or use the website’s services (first name, surname, place of residence, telephone contacts, email) may be used for further processing compatible with the purposes of collection, such as sending institutional and public-interest communications. The data of those requesting documents or informational materials are used solely to deliver the requested service and communicated to third parties only where necessary (e.g. shipping services).

12. Transfer of data abroad
Data are not transferred to third countries outside the European Economic Area.

13. Rights of the data subject
Data subjects have the right to ask the Municipality of Salerno for access to their personal data, their rectification or erasure, the restriction of processing, or to object to the processing (Articles 15 et seq. of EU Regulation 2016/679).
The request may be submitted to the Controller: Municipality of Salerno, Via Roma – Palazzo di Città, 84100 — PEC: protocollo@pec.comune.salerno.it
Data subjects also have the right, where the conditions are met, to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), as the supervisory authority, and the right to appeal to the judicial authority.