Privacy Policy
Dear User,
This page explains the management of the website www.atlasalpilatine.eu, the portal for the Integrated Plan on the Themes of Heritage, Culture and Economy (PITEM Pa.C.E.) and the Atlas of the Cultural Heritage of the Alpes Latines, regarding the processing of its users’ personal data. This information is provided in accordance with Article 13 of EU Regulation 2016/679, the General Regulation for protecting the data of those who interact with the website starting from the address www.atlasalpilatine.eu and not for other external websites that may be connected to this website through links. The website is managed by the Scientific Analysis, Conservation and Co-financed Projects Division – Department of Cultural Heritage, Tourism, Sport and Commerce of the Autonomous Region of Valle d’Aosta.
1. LEGAL BASIS OF PURPOSE OF DATA PROCESSING
The data collected are processed in compliance with the rules set by the Regulation for the performance of tasks carried out in the public interest or in the exercise of official authority, including for purposes of archiving, historical research and analysis for statistical purposes.
2. TYPE OF DATA PROCESSED
2.1. Personal data provided voluntarily by the user
The website does not collect personal data provided voluntarily by the user for achieving the purposes referred to in point 1 of this information notice.
2.2. Browsing data – Log file
During their normal operation, the computer systems and applications for this website’s operation ascertain certain data (whose transmission is implicit in the use of Internet communication protocols) not associated with directly identifiable users.
The data collected includes the IP addresses and domain names of the computers operated by users who connect to the website, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters concerning the operating system and the IT environment used by the user.
These data are processed, for the time strictly necessary, for the sole purpose of obtaining anonymous statistical information on the use of the website and to check that it is functioning correctly.
2.3. Cookies
For information on the cookies used by the site, please refer to the specific Cookie Policy.
3. COMMUNICATION AND/OR DISSEMINATION
The data collected will be processed exclusively by the staff and collaborators of the Region. These data are processed by the Region’s associate company IN.VA. S.p.A. which has the role of Data Processor pursuant to Article 28 of the Regulation, and which manages and maintains the IT systems on behalf of the Region.
Some processing operations could also be carried out by other third parties, to which the Region entrusts certain activities or part of them, necessary for the provision of services. The appropriate obligations regarding the protection of personal data are imposed by the Region on these additional third parties by contract or in other legal form in accordance with EU or Member State law. The obligations on these third parties, designated as Data Processors, are in the form of instructions for how they operate, with particular reference to implementing sufficient technical and organisational measures to guarantee the confidentiality and security of data, pursuant to Article 32 of the Regulation.
Outside of these cases, the data will not be disclosed to third parties or disseminated, except in the situations specifically provided for by national or European Union law.
4. TRANSFER OF DATA TO NON-EUROPEAN UNION COUNTRIES
The data collected and processed are not transferred to companies or other entities outside the EU territory.
5. DATA RETENTION TIME
The criteria used to establish the retention period of personal data are those proposed by current Italian data storage regulations, specifically about compliance with the principles of lawfulness, necessity and proportionality, as well as with the purposes for which the data were provided.
6. RIGHTS OF USERS (AS THE “DATA SUBJECTS”)
Users can exercise the rights provided for in Article 15 et seq. of EU Regulation 2016/679 where applicable. These include, in accordance with the provisions of Article 13(2b and 2d), the right of Data Subjects to request the rectification or erasure of registration data regarding them, the restricting of processing or to object to their processing in the cases provided for, and also the right to lodge a complaint with the Supervisory Authority for the protection of personal data, following the procedures and instructions published on the official website of the Authority: www.garanteprivacy.it
7. DATA CONTROLLER
The Data Controller for the processing of data relating to identified or identifiable persons who have consulted this website is the Autonomous Region of Valle d’Aosta/Vallée d’Aoste, headquartered in Aosta, Piazza Deffeyes, 1.
The Region’s Data Protection Officer can be contacted at the following addresses:
