Privacy Policy – Information regarding Article 13 of the General Data Protection Regulation 2016/679 (GDPR)

This information is provided pursuant to Article 13 of the General Data Protection Regulation 2016/679 (GDPR), following EU Directive 2002/58/CE, the contents of which are further defined by Article 122 of the Privacy Code (Legislative Decree no. 196/2003).

It describes how this website handles the personal data of users, whether identified or identifiable, who visit the website or interact with the website and with the provincial services accessible through the network.

Specifically, this document details the obligations of data controllers to provide certain information to persons visiting the website, regardless of the purpose of their visit, including the manner and timing of such communications. This information applies solely to this website. It does not apply to any external websites that may be accessed through links on this website.

Data Controller

The Data Controller of the personal data is the Autonomous Province of Bolzano/Bozen, based at Piazza Silvius Magnago 1, 39100 Bolzano, Italy.

Data processor

Data processor are:

- Consisto Srl, Via Brennero 28, I-39042 Bressanone

- IDM Südtirol - Alto Adige, Piazza della Parrocchia 11, I-39100 Bolzano

- South Tyrol Association of Tourism Organisations, Via Conciapelli 60 – I-39100 Bolzano

Data protection officer

Contact information for the data protection officer:

Email: dsb@provinz.bz.it;

PEC: rpd_dsb@pec.prov.bz.it

Data processing location

Data processing activities connected to this website’s web services occur at the location of the aforementioned organizations, executed exclusively by their technical staff or by persons tasked with occasional maintenance. No data obtained from the web services will be shared or disclosed to third parties unless required by law. The personal data provided by users will only be used for the performance of the requested service, in accordance with the expressly stated purpose of the data processing, and will only be shared with third parties if this is necessary for the stated purpose.

Browsing data

During regular operation, this website’s software systems and processes automatically collect certain personal data as part of standard internet communication protocols. While this data is not intended to identify individuals directly, it has the potential to do so if it is processed and linked with information held by third parties.

The types of data collected include:

• the IP addresses or domain names of the computers used by visitors to connect to the website,

• the URI (Uniform Resource Identifier) addresses of the requested resources,

• the time of the request,

• the method used to transmit the request to the server,

• the size of the file received in response,

• the numerical code indicating the status of the response provided by the server (success, error, etc.)

• and other parameters relating to the user’s operating system and computer configuration.

This information will only be used for the purpose of anonymous statistical data collection regarding the use of the website and to check that the website is functioning properly. It will only be kept for the time necessary to achieve this purpose. The data may be used to determine liability in the event of any IT offences that cause damage to our website.

Data provided voluntarily by the user

When users voluntarily email the addresses listed on this site, their email addresses, necessary for replying to requests, and any personal data included in their messages are collected.

Where specific services are requested, detailed information and consent notices are presented on the relevant web pages.

Cookies

This website does not collect any personal data about its users. Cookies are not used to transmit personal information.

The use of session cookies (which are temporarily stored on the visitor’s computer and deleted once the browser is closed) is strictly limited to the transmission of session identifiers. These random number-generated session identifiers ensure secure and efficient site navigation. The session cookies used on this website prevent the use of techniques that could potentially compromise privacy while guaranteeing that visitors’ personally identifiable information is not collected.

For further information on cookies and to change or save your settings, please click here; to change or save your settings, you can click at any time while browsing on the button cookie preferences at the bottom right of the website.

Transfer of data abroad:

We may need to submit your data to service providers in non-European countries (EEA). The EEA consists of countries of the European Union and Switzerland, Iceland, Liechtenstein and Norway, which are considered to be countries with equivalent data protection and privacy laws. This type of data transfer may occur if our servers (i.e. where we store data) or our suppliers and service providers are located outside the EEA or if you use our products and services during your stay in countries outside the EEA from this area.

If such transfer takes place, we will ensure that it is in accordance with this Privacy Policy and that it is governed by standard contractual clauses approved by the European Commission that provide reasonable protection for the parties concerned.

Privacy policy for the using of Google Analytics

“This website uses Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above.

Cookie-policy Google Analytics: https://www.google.com/intl/en/policies/privacy/

Voluntary provision of data

Apart from the data gathered during website navigation, the user can choose whether or not to provide the personal data requested in the registration form. However, not providing this information may result in the inability to access the requested service.

Data processing practices

Personal data is processed through automated systems for the time necessary to fulfil the purposes for which it was collected. Specific security protocols are implemented to prevent the loss of data, as well as its unlawful or improper use and unauthorized access.

Individual rights regarding data

Individuals whose personal data is collected have the right to confirm whether their data exists, check its accuracy, and request its update, amendment or correction (as per Article 15 and subsequent articles of the GDPR) at any time.

According to these regulations, individuals are also entitled to request the deletion or restriction of processing of their data in case of unlawful handling and to object to its processing on legitimate grounds at any time.

The necessary request form can be found on the website of the Autonomous Province of Bolzano/Bozen – South Tyrol, under the section Transparente Verwaltung – Weitere Inhalte – Zusätzliche Informationen (this document is only available in German and Italian). Should the individual not receive a response within 30 days of the request’s receipt (a period extendable by 60 days in case of complex or numerous requests), they have the right to file a complaint with the data protection authority or appeal to the court.