Privacy Notice
In accordance with the Reg. UE 2016/679 (Personal Data Protection European Code) we provide you with the necessary information on the processing of your personal data that you provided to the staff of the Firenze Welcome Card collection points filling in the registration form to obtain your Card. This notice is not valid for other websites possibly accessible through links on the domain website owner, who is not in any way responsible for the websites of third parties. This notice is provided in accordance with the Reg. UE 2016/679 (Personal Data Protection European Code) and it is also inspired by the Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, on Cookies as well as by the Measures of the Authority for the protection of personal data of 08.05.2014 concerning cookies.
1. Subject of Processing
SUBJECT OF DATA PROCESSING, in accordance with artt. 4 and 24 of the Reg. EU 2016/679 is Firenze smart (Silfispa), via dei Della Robbia 47, 50132 FIRENZE, P.Iva 06625660482. RESPONSIBLE FOR DATA PROCESSING, in accordance with the artt. 4 and 28 of Reg. EU 2016/679 is the General Manager of Firenze smart (Silfispa), Dr.ssa Manuela Gniuli. The Data Protection Officer (RDP) is the Eng. Lorenzo Usai.
2. Purpose and Legal Basis of Processing
The personal data furnished will be processed in accordance with the the lawful conditions ex art. 6 Reg. UE 2016/679, upon agreement by clicking a box that indicates “you accept” to the present conditions and until opposition, and the purposes for processing the user personal data are related to:
- Navigation through the website www.firenzewelcomecard.it;
- Management of your request to create the card through the website www.firenzewelcomecard.it and related issue of the card by sending it to the email address you communicated;
- Requirements related to activities for providing / using the service (art. 6 lett. b);
- Sending e-mails related to any request for participation in anonymous surveys on the service quality (art.6 lett.a);
- The creation of Firenze Welcome Card requires confirmation by the user of the personal data relating to name, surname and residence; the latter constitutes a requirement for obtaining the card itself. This information is essential in order to make the necessary checks by the collection points staff for the correct use of the service at the time of creating the card. Possible false declarations are punishable according to the law n. 445/2000.
3. Cookies
For information on the cookie policy adopted by the Controller and additional details, consult the cookie policy present on the site. The data subject has the right to obtain the following indications: a. origin of the personal data; b. processing scopes and methods; c. logic applied in case of processing performed with the aid of electronic tools; d. identification details of the controller, processors and appointed representative pursuant to art. 5, par. 2; e. subjects or categories of subjects to whom data can be disclosed or may become aware of in quality of representative appointed in the territory of the State, processors or persons in charge of processing operations.
4. Recipients or Categories of Recipients of Personal Data
The personal data provided by you will be processed in anonymous and aggregate form, merely for statistic reasons related to monitoring the service. The data will be processed in compliance with previous point 2 by internal processors and/or external companies, within the limits of applicable service agreements and in respect of the indicated scopes. In particular, the processed data may be disclosed to the City of Florence, upon request and in compliance with applicable laws, and also to Companies contractually bound to Firenze smart (Silfispa); - subjects who deal with related activities, such as external subjects for the administration, maintenance and updating of the IT system and website; - Competent authorities to fulfil legal obligations and/or requests of public bodies, upon request; - Companies that are Firenze smart (Silfispa)’s business partners. The abovementioned data recipients will process data in quality of persons in charge of processing tasks, in quality of natural persons who act under the authority of the Controller and Processor or as independent Controllers, in order to comply with contracts or related scopes.
5. Transfer or Personal Data to Third Countries and/or International Organisations
The personal data that you provided may be transferred abroad, within or outside the EU, according to the limits and conditions set forth by art. 44 and subsequent ones, and EU Regulation 2016/679, in order to fulfil processing scopes. The data subject may obtain a copy of the transfer conditions by filling out the information request form at the following link https://www.firenzesmart.it/contatti.
6. Data Retention Period or Criteria
The data processing will be carried out in an automated and/or manual manner, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed to do so. In compliance with the provisions of art. 5 paragraph 1 letter e) of EU Reg. 2016/679 the personal data collected will be kept no longer than is necessary for the purposes for which the data were collected or for which they are further processed in a manner that allows the identification of the user. Upon expiry of the period of validity of the Firenze Welcome Card, established on January 31, 2021, your data will be deleted from the IT systems. The criteria of the data retention can be consulted by filling out the information request form at the following link https://www.firenzesmart.it/contatti.
7. Nature of Data Submission and Refusal
Apart from what is specified in point 2 above in which, for the data indicated, the lack of submitting personal data will make impossible for the customer to use the Firenze Welcome Card services, it will be possible for the user:
- Unsubscribe from any request to participate in an anonymous survey to the service quality by filling out the information request form at the following link https://www.firenzesmart.it/contatti where the user says clearly that “I request the immediate cancellation from any present and future survey linked to the use of Firenze Welcome Card”.
The erasure of the points described above will be taken as soon as the procedures indicated are completed.
8. Rights of Data Subjects
You may, at any time, exercise your rights as stated in Arts. 15, 16, 17, 18, 19, 20, 21, 22 of the EU Regulation 2016/679, by contacting the Data Controller or the Designated Responsible for Data processing, by filling out the information request form at the following link https://www.firenzesmart.it/contatti. You have the right, at any time, to obtain from the Controller the access to your own data, the rectification, the erasure of your data, the limitation of data processing without prejudice to any other administrative and judicial appeal. You have the right to complain to the Guarantor for personal data protection and, with reference to art. 6 paragraph 1, letter a) and art. 9, paragraph 2, letter a), you have the right to revoke at any time the consent to the processing and use of your data in the forms and modalities established in the previous point 6.
Date Update: 16.11.2021
