Privacy notice

The text below is incomplete: the data controller still has to provide or complete the following information before the service goes live.

• Data controller: section missing or empty. Name, address and contact details of the municipality acting as controller (art. 13 par. 1 let. a).
• Data protection officer: section missing or empty. Contact details of the data protection officer (DPO) appointed by the municipality (art. 13 par. 1 let. b; art. 37 par. 1 let. a).
• Purposes and legal basis of the processing: section missing or empty. Purposes for which report data is processed and the legal basis (art. 13 par. 1 let. c; art. 6 par. 1).
• Recipients of the data: section missing or empty. Recipients or categories of recipients, including service providers (art. 13 par. 1 let. e).
• Transfers to third countries: section missing or empty. If data leaves the European Economic Area: country and safeguards; otherwise state that there are no transfers (art. 13 par. 1 let. f).
• Retention period: section missing or empty. How long reports, accounts, consents and logs are kept, or the criteria used to decide it (art. 13 par. 2 let. a).
• Rights of the data subject: section missing or empty. Access, rectification, erasure, restriction, objection, portability and, if the legal basis is consent, withdrawal; how to exercise them (art. 13 par. 2 let. b and c; arts. 15-21).
• Complaint to the supervisory authority: section missing or empty. Right to lodge a complaint with the Italian data protection authority (Garante) (art. 13 par. 2 let. d).
• Whether providing the data is mandatory: section missing or empty. Whether providing the data is a legal or contractual requirement or necessary to file a report, and the consequences of not providing it (art. 13 par. 2 let. e).
• Automated decision-making: section missing or empty. Whether automated decision-making, including profiling, exists: logic and consequences; otherwise state that it does not (art. 13 par. 2 let. f).