Privacy & Cookie Policy

Alta Val Metauro, as the Data Controller of your personal data, informs you about its use and your rights, including regarding contacts received via the website www.altavalmetauro.com. For a better understanding of the information, please refer to the instructions provided by the Italian Data Protection Authority..

1. Who is the Data Controller who decides the purposes and means of data processing? How and where can you contact them?

The Data Controller Alta Val Metauro
Email: turismo@comuneurbaniapu.it, for the exercise of the rights listed below and for any clarification requests.

2. What purposes, methods, legal requirements, consequences, and data retention periods apply to data processing?

The data requested from you will be processed for the following purposes:

Providing information and clarifications on the Data Controller’s activities, using the available contact methods (email, messaging, telephone, postal service, etc.) (LEGAL BASIS: overriding legitimate interest of the Data Controller in providing the requested information and managing the relationship; DURATION: for the entire duration necessary to provide the requested information, maximum 24 months)
Any obligations arising from laws, regulations, and EU legislation (LEGAL BASIS: regulatory obligation; DURATION: for the entire statute of limitations provided for by applicable laws)
Any establishment, defense, or exercise of legal claims (LEGAL BASIS: legitimate interest, considered overriding for self-defense in court; DURATION: for the entire statute of limitations provided for by applicable laws)
Protecting the security of the Data Controller’s networks and IT systems (LEGAL BASIS: legitimate interest, considered overriding as it complies with Recital 49 of the GDPR; DURATION: 6 months)
Marketing by the Data Controller (LEGAL BASIS: consent, which may be revoked at any time by the data subject; DURATION: maximum 24 months, unless revoked earlier) via promotional emails, social media, and messaging; any newsletters, unless otherwise specified, are sent for the entire duration of their production by the Data Controller, unless the data subject objects/unsubscribes (always possible); this activity covers sales offers, market research, promotions and discounts, and direct marketing to the user; otherwise, no marketing activities will be carried out towards the user.
Profiling for marketing purposes by the Data Controller (LEGAL BASIS: consent, which may be revoked at any time by the data subject; in this case, the marketing described in the previous point will be implemented based on the user profile consisting of the data collected and observed by the Data Controller, to target offers that meet the user’s actual and likely interests. – Failing this, personalized marketing activities will not be carried out towards the user, and therefore generic promotional messages will be received (if the previous purpose has been consented to).

b) With regard to the methods of processing the data subject’s personal data, said processing will be carried out in compliance with the security measures required by current legislation, either manually or electronically.

3. To whom your data may be disclosed

In order to carry out its activities, the Data Controller may, in turn, disclose your data to the following parties, to the extent strictly necessary to achieve the aforementioned purposes, all of which are based in the European Union/European Economic Area, unless otherwise indicated:

To the Data Controller’s authorized personnel for data processing
To bodies responsible for coordinating, supervising, and managing domestic and foreign Internet networks, as well as communication and telephone networks and related services (particularly messaging and email, cloud services)
To companies and professionals, as well as service providers (particularly IT support and maintenance, web administration, legal assistance, etc.), used by the Data Controller to manage its business and relationships with data subjects, who may be appointed as data processors by the Data Controller if necessary
To any authorities, public bodies, or third parties who have access to the data by law or pursuant to provisions governed by applicable legislation

For the purposes indicated above in this policy, the data may be transferred abroad to countries within the European Union. In the case of software and web service providers of companies based in the USA and related data transfer, the transfers will take place in accordance with the European Commission’s standard contractual clauses and any additional measures, unless otherwise specified.

4. What rights do you have regarding the processing of your data? Legal basis for processing?

You may contact the Data Controller to exercise the rights set forth in Articles 15-22 of the GDPR. Your rights are as follows:

a) You have the right to request from the data controller access to your personal data, confirming whether or not such data exists, as well as rectification or erasure of such data, or restriction (temporarily blocking) of the processing concerning you.

b) You have the right to object at any time to the processing of your personal data for reasons relating to your particular situation if:

Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority, or
In the case of the pursuit of the data controller’s legitimate interest.

c) If you have provided consent for one or more specific purposes, you have the right to withdraw that consent at any time.

d) You have the right to the portability of your personal data (for those with a legal basis of contractual performance or consent) by making a request to the data controller, by sending a file in .CSV format, or similar open interoperable format, depending on the type of data requested.

e) You have the right to lodge a complaint with the following Supervisory Authority: Italian Data Protection Authority; You have the right to alternatively lodge a complaint with the competent supervisory authority of the Member State where you habitually reside, work, or where the alleged infringement occurred.

f) You have the right to request information on the balancing of interests performed by the Data Controller for processing based on legitimate interest.

5. From whom did we collect your data and what type of data?

The data is collected directly when you request information from the Data Controller. The data you provide directly are common data, such as name, surname, email, etc. All of this data is mandatory in order to request and receive information. For cookies, see below.

6. How do we use cookies to process your web data?

Cookies are small text files (information) that are entered into the user’s browser when visiting a website (also via similar technologies on mobile devices, tablets, etc.). They perform important functions within the Internet, such as ensuring the technical monitoring of sessions, storing specific information, etc. While browsing, users may also receive cookies from third-party websites (“third-party cookies”) for purposes and in ways determined by those third parties. Cookie choices can be made via the dedicated banner and the dedicated function always available as a menu/icon on the web page.

With exclusive reference to users of this Site, we inform you that the following types of cookies are used:

a) The use of session cookies (which are not stored permanently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable safe and efficient browsing of the site. The session cookies used on this site avoid the use of other IT techniques that could potentially compromise the privacy of users’ browsing and do not allow the acquisition of personal data that could identify the user.

LEGAL BASIS: Performance of requested services (website navigation); without this, the website would not be usable.

STORAGE: Automatic deletion at the end of the browsing session.

b)Third-party analytics cookies are used, but tools and procedures are adopted to de-identify the data (partial masking of the IP address – pseudonymized). The third party has been requested not to cross-reference the information collected with other data, so that the collected data is used only for aggregate statistics and usage metrics of this website.

LEGAL BASIS: legitimate interest of the Data Controller, considered prevalent following de-identification of the data.

STORAGE: see individual cookie terms, unless you delete the cookies.

These two types of cookies are used for the sole purpose of “carrying out the transmission of a communication over an electronic communications network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the contracting party or user to provide such service” (see Article 122, paragraph 1 of the Privacy Code) and therefore are not subject to consent. The user can always technically disable the use of these types of cookies by our website; however, this may make it impossible or less optimal to navigate the website.

c) Clear analytics cookies are also used, or, and/or profiling and/or other non-technical purposes: useful for tracing specific actions or recurring behavioral patterns in the use of the offered features back to specific, identified or identifiable individuals. This allows for grouping different profiles into homogeneous clusters of varying sizes, thus enabling increasingly personalized service provision and sending targeted advertising messages, i.e., in line with the preferences expressed by the user while browsing the internet.

LEGAL BASIS: consent (including for macro-categories), which can always be revoked.

STORAGE: see for each individual cookie, unless you delete the cookies.

d) Social network widgets are those special “buttons” or “blocks” present on the Site that depict social network icons and allow users browsing to interact directly with social media platforms with a single click.

The links below provide users with the privacy policies regarding data management by the social networks to which the buttons and widgets link. No information is collected or processed by the site in which the widget is embedded, unless included in the previous list of analytics/profiling cookies.

For more information, including how to disable these cookies where not already mentioned, please consult the following links:

LinkedIn button and social widgets (LinkedIn Corporation)

The LinkedIn button and social widgets are services for interacting with the LinkedIn social network, provided by LinkedIn Corporation.