Privacy Policy Notice

Privacy Notice on the Processing of Personal Data pursuant to the EU General Data Protection Regulation (GDPR) 679/2016

The Municipality of Cesenatico, in compliance with the principles set out in the EU General Data Protection Regulation (GDPR) 679/2016, in force since 25 May 2018, offers users the possibility to interact with its portal to consult or use the related services, accessible via www.visitcesenatico.it and its subdomains. This page describes how the site is managed with regard to the processing of personal data of users who consult it.

This notice applies solely to the Municipality of Cesenatico’s tourism portal (www.visitcesenatico.it) and its subdomains; it does not apply to other websites that users may visit via links.

Purposes of Processing

Personal data are processed exclusively for purposes that fall within the Municipality’s institutional tasks or for compliance with legal or regulatory obligations. Within these purposes, processing may concern data necessary for managing relations with the Municipality of Cesenatico, for effective institutional communication, or for fulfilling any legal, regulatory or contractual obligations. Processing may also concern all data provided at the time of registration or when using online services.

Place and Methods of Processing

Processing connected with the web services of the site takes place at the offices of the Municipality of Cesenatico and is carried out for the time strictly necessary to achieve the stated purposes. Processing may include the use of automated tools and is carried out in accordance with security measures designed to prevent data loss, unlawful or improper use and unauthorised access. Data are processed solely by personnel authorised to do so or by parties engaged for occasional maintenance operations, in line with the principles of fairness, lawfulness, transparency, relevance and proportionality with respect to the purposes of collection and subsequent processing.

Personal data provided by users—such as name, surname, address, telephone contacts and email address—may be used for other processing operations that are, in any case, compatible with the purposes indicated at the time of collection (for example, sending institutional and public-interest communications by email). Personal data of users who request documents or information material (newsletters, replies to queries, reports, copies of acts and measures, etc.) or who use online services (initiating a procedure, checking the status of a procedure, accessing records, etc.) are processed solely to provide the requested service or performance and are disclosed to third parties only where necessary for that purpose.

Data relating to online services are not subject to communication or dissemination, unless otherwise required by law or regulation.

Types and Nature of Data Processed

Browsing data

The IT systems and software procedures that enable this website to function acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. Although this information is not collected to be associated with identified data subjects, by its nature it could, through processing and association with data held by third parties, make it possible to identify users—particularly where it is necessary to ascertain liability in the event of hypothetical computer crimes against the site.

This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful outcome, error, etc.) and other parameters relating to the user’s operating system and IT environment.

These data are used solely for the purpose of obtaining anonymous statistical information on site usage and to check its correct operation. They are retained for the time necessary to carry out analysis and comparative statistical processing and, in any case, for no longer than 12 months.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of emails to the addresses indicated on this site, the use of reserved areas, or the completion of web forms entails the subsequent acquisition and processing of the data necessary to provide the requested service and/or to respond to enquiries, as well as any other personal data included. As a result, users may be contacted by email, telephone or other communication systems by a municipal officer responsible for handling the request, or by automatic systems that notify events (for example: correct or failed receipt of an application, approaching deadlines, etc.). Specific privacy notices may be provided or displayed on pages of the site dedicated to particular services available on request.

Where access to particular services requires prior registration with the provision of personal data, the following general provisions apply:

  • Personal data, collected and stored in databases, will be processed by employees authorised by the Controller and will not be disclosed or communicated to third parties except in cases provided for by law and in the manner it allows.
  • Data subjects may exercise the rights provided for by Regulation (EU) 2016/679, and in particular obtain confirmation as to whether data concerning them exist, request the erasure of data processed unlawfully, and obtain the updating and rectification of their personal data, in the manner and cases provided for by law.

Newsletter

Subscribing to the newsletter implies acceptance of the provisions of Regulation (EU) 2016/679 on the protection of personal data and therefore consent to the processing of one’s personal data by the Municipality of Cesenatico, within the limits established by law. The data, which are not subject to dissemination, are processed by automated procedures and only by employees authorised to process them. Data subjects may at any time exercise the rights under Article 15 of Regulation (EU) 2016/679, including consulting and amending their data, objecting to their use, and requesting the list of data processors. If you no longer wish to receive communications via the newsletter, simply click the links provided to cancel your subscription.

Visit Cesenatico Academy

Access to the Visit Cesenatico Academy (available at the subdomain https://academy.visitcesenatico.it/) and use of the courses made available free of charge by the Municipality are only possible after user registration.

Subscribing to the Visit Cesenatico Academy implies acceptance of Regulation (EU) 2016/679 and therefore consent to the processing of personal data by the Municipality of Cesenatico, within the limits established by law. The data, which are not subject to dissemination, are processed by automated procedures and only by authorised employees.

The personal data collected via the subdomain https://academy.visitcesenatico.it, through user registration on the site, are as follows: email address, first name, surname.

You can access and update the personal data collected and stored. To request access, correction or deletion of personal data, please email iat@comune.cesenatico.fc.it. The request must be sent from the email address associated with the account.

Provision of Data

By using the services on the portal and/or completing specific web forms required to activate certain services, users guarantee that any personal data provided are correct, truthful and up to date. Users also undertake to update the recorded data promptly so that they remain constantly up to date, complete and accurate. Providing data may be mandatory for the activation of specific online services, as further specified on the relevant pages. In such cases, failure to provide the data may make it impossible to obtain the service or the requested performance.

Apart from what is specified for browsing data and data of a mandatory nature, in all other cases users are free to provide the personal data indicated in request forms or otherwise specified in contacts with the offices for the purpose of receiving information material or other communications.

Data Controller

Data Controller: Comune di Cesenatico (Municipality of Cesenatico) Address: Via M. Moretti, 4 — 47042 Cesenatico (FC) VAT and Tax Code: 00220600407 PEC (certified email): cesenatico@cert.provincia.fc.it

Data Protection Officer (DPO) The Municipality of Cesenatico has appointed a Data Protection Officer (DPO) to whom you may refer for any matter concerning the processing of personal data: rpd@comune.cesenatico.fc.it

Rights of Data Subjects

Data subjects have the right at any time to obtain confirmation as to whether or not personal data concerning them are being processed and to know their content and origin, verify their accuracy or request their integration, updating or rectification. They also have the right to request the erasure, anonymisation or blocking of data processed unlawfully, and to object, on legitimate grounds, to their processing in any case. To simplify submission and reduce response times, please send any requests to the Municipality of Cesenatico at iat@comune.cesenatico.fc.it

Last updated: 03/10/2025