Information note on privacy and cookie policies pursuant to Article 13
of EU General Data Protection Regulation 679/2016 (GDPR)
Information on privacy and cookie policies pursuant to Article 13 of EU General Data Protection Regulation 679/2016 (GDPR)
City Park S.r.l. , with registered office at Via Maragliano 10/1, 16121 Genova, undertakes at all times to protect the on-line privacy of users.
1. A) Source of the personal data and data controller
1. B) Types of data
You are informed that, as a result of Website navigation, City Park S.r.l. will process personal data (Article 4 (1) of the Regulation), hereinafter just “Personal Data”. In particular, the following Personal Data are processed via the Website:
1) Navigation data
The computer systems and software procedures involved in the running of the Website, in the course of their normal operation, acquire certain Personal Data whose transmission is implicit in the use of Internet communication protocols. The information in question is not gathered for the purpose of association with specific parties concerned, but for their very nature might, via elaborations and associations with data held by third parties, permit the identification of users. Coming within this category of data are IP addresses or domain names of the computers utilised by users when connecting to the Website and other parameters relating to the user’s operating system and IT environment. The said data are used only to obtain anonymous statistical information regarding the use of the Website and to check the correctness of its operational status (see the paragraph below concerning cookies), to identify anomalies and/or misuse, and are deleted immediately after elaboration. The data may be used by the competent authorities in order to ascertain responsibilities in the event of hypothetical cybercrimes against the website.
2) Data furnished on a voluntary based by the party concerned
Apart from what is specified with regard to navigation data, the user is free to provide personal data as indicated on the request forms, if any, present on the website (for example, to activate newsletters, gratuitous registration, purchases, etc.). Failure to provide the same could imply impossibility to supply the service. In such cases, only the information necessary for the service in question will be requested (see specific information notes for details). When utilising some Website services, the need may arise to process third party Personal Data transmitted by you to City Park S.r.l. . In such circumstances, you will appear as independent data controller, assuming all legal obligations and responsibilities. In this respect, on the point you agree to fully indemnify City Park S.r.l. with respect to any dispute, claim, request for compensation of damage arising from processing, etc. that might be raised against the same by third parties whose Personal Data has been processed through your utilisation of the Website functions in breach of the applicable personal data protection rules. In any case, should you supply or otherwise process third party Personal Data through your utilisation of the Website, you hereby guarantee – assuming any and all responsibility connected therewith – that the particular case of processing is founded on an appropriate legal basis in accordance with Article 6 of the Regulation which legitimises the processing of the information in question.
1. C) Data furnished on a voluntary based by the party concerned
The processing of personal data that we intend to carry out, with your specific consent insofar as required, serves the following purposes: to enable the supply of Website Services; the legal basis for processing is the performance of precontractual measures adopted at the request of the same (Article 6(1)(b) of the Regulation) since the processing is necessary to supply the Service. The conferral of Personal Data for the said purposes is optional, although any failure to confer the same would imply impossibility to activate the Services provided by the Website.
1. D) Recipients of Personal Data
Your Personal Data may be shared, for the above purposes, with:
1. persons authorised by City Park S.r.l. to process the Personal Data required to perform activities strictly related to the supply of the Services, who have committed to a confidentiality undertaking or have a suitable legal confidentiality obligation (for example, employees and system administrators).
2. possible third parties assigned to management of the Website who are usually acting in the capacity of Data Processors (the complete and updated list of Data Processors is available on the website at the following address: cityparkgenova.it).
3. parties, organisations or authorities obliged to communicate their Personal Data under legal provisions or on the orders of the authorities.
4. E) Transfer of Personal Data
Some of your Personal Data are shared with Recipients who may be located outside the European Economic Area. City Park S.r.l. ensures that the processing of your Personal Data by the said Recipients takes place in observance of the Regulation. Indeed, the transfers can be based on an adequacy decision, on the Standard Contractual Clauses approved by the European Commission or on another appropriate legal basis.
1. F) Your privacy rights pursuant to Articles 15 et seq.. of the Regulation
Pursuant to Articles 15 et seq. of the Regulation, you are entitled at any time to ask City Park S.r.l. for access to your Personal Data, or the correction or cancellation of the same or to oppose the processing thereof, you have the right to request restriction of processing in the cases set forth by Article 18 of the Regulation, as well as to obtain in a structured, commonly used and machine-readable format the data concerning you, in the cases envisaged by Article 20 of the Regulation. Requests should be sent in writing to the Controller at the following address: firstname.lastname@example.org In any case, you have the right at all times to submit a claim to the competent Control Authority (the Italian Data Protection Authority), in accordance with Article 77 of the Regulation, should you consider that the processing of your Personal Data is contrary to the regulations in force.
1. G) Amendments