Privacy Policy
(pursuant to Article 13 of EU Regulation 2016/679 – GDPR)
1. Data controller
The Data Controller is:
Municipality of Santo Stefano d’Aveto – IAT Office
Piazza del Popolo, 6 – 16049 Santo Stefano d’Aveto (GE)
Phone: 0185 88007
Email: turismo@comune.santostefanodaveto.ge.it
2. Categories of processed data
a) Navigation data
During their normal operation, the IT systems and software procedures used to operate this website acquire certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g., IP addresses, browser type, operating system).
This data is not used for profiling purposes and is processed only to:
• ensure the correct operation of the website
• derive anonymous statistical information
• establish liability in the event of cybercrimes
b) Data provided voluntarily by the user
Through the contact form, the user can provide personal data such as:
Name
• email address
• phone number
•message content
These data are processed exclusively to respond to the sent requests.
3. Purpose of the processing
Personal data is processed for:
• provide tourist and institutional information
• respond to requests sent via the website
• improve the browsing experience
• to comply with legal obligations
4. Legal basis for processing
The data processing is based on:
• data subject's consent (Art. 6, par. 1, lett. a GDPR)
• legitimate interest of the data controller (Art. 6, par. 1, let. f GDPR)
• compliance with legal obligations
5. Processing methods
Processing is carried out using electronic and telematic tools, in compliance with the principles of lawfulness, fairness, transparency, and data minimization.
Appropriate security measures are adopted to prevent unauthorized access, disclosure, or unauthorized modification.
6. Data Retention
Personal data is kept for the time strictly necessary to achieve the purposes for which it was collected and in compliance with legal obligations.
7. Communication and dissemination of data
The data will not be disseminated. It may be disclosed exclusively to authorized parties or technical service providers acting as Data Processors.
8. Rights of the data subject
The user may exercise the rights provided for in Articles 15–22 of the GDPR at any time, including:
• data access
• rectification or erasure
• restriction or objection to processing
Data portability
•withdrawal of consent
Requests should be sent to: turismo@comune.santostefanodaveto.ge.it
It is also possible to lodge a complaint with the Italian Data Protection Authority.
9. Changes to this Privacy Policy
This privacy policy may be subject to updates. Users are advised to check it periodically.
Cookie Policy
1. What are cookies
Cookies are small text files that visited sites send to the user's terminal, where they are stored to be retransmitted to the same sites upon the next visit.
2. Types of cookies used by the website
Technical cookies (necessary)
The site uses essential technical cookies to:
• the correct functioning of the pages
• navigation and security
These cookies do not require user consent.
Functionality cookies
Cookies may be present for:
• store browsing preferences
• improve the user experience
Third-party cookies (if any)
The site may incorporate external services (e.g., maps, videos, social widgets). These services may install third-party cookies, managed directly by their respective providers.
3. Consent management
Upon first access, the user sees a cookie banner that allows them to:
Accept all cookies
• reject unnecessary cookies
• Customize preferences
Consent can be changed at any time.
4. How to disable cookies from your browser
The user can still manage or disable cookies through their browser. Below are the links to the instructions for the main browsers:
5. Cookie Policy Updates
This Cookie Policy may be updated over time. Users are advised to check it periodically.