Regulation 2016/679/EU (General Data Protection Regulation – GDPR)
This information is provided, in accordance with Regulation 2016/679/EU (General Data Protection Regulation – GDPR), for the processing of personal data carried out by the Veneto Region/Regional Council structures, by paper and/or computerised means.
The processing of personal data is based on the principles of correctness, lawfulness and transparency, protecting the confidentiality of the data subject and his/her rights.
1. DATA CONTROLLER
The Data Controller of the processing of data, relating to identified or identifiable individuals, is the Regional Council (for the processing of personal data carried out by the structures that report to it), with registered office in: Venice, Palazzo Balbi – Dorsoduro 3901.
2. PROCESSING DELEGATES
Pursuant to Regional Decree no. 596 of 8 May 2018, the data processing delegate is the Director of the Research, Innovation and Energy Competitiveness Directorate
email: ricercainnovazionenergia@regione.veneto.it;
PEC: ricercainnovazionenergia@pec.regione.veneto;
3. DATA PROTECTION OFFICER – Data Protection Officer
The DPO’s contact details are:
DATA PROTECTION OFFICER
Data Protection Officer
Palazzo Sceriman,
Cannaregio, 168
30121 Venice
Telephone: 041/279. 2498 / 2044 / 2602.
e-mail: dpo@regione.veneto.it
4. PURPOSES OF DATA PROCESSING
The Regional Council processes personal data for the performance of its institutional functions, excluding processing when the purposes pursued can be achieved by means of anonymous data or methods that make it possible to identify the data subject only when necessary.
For newsletter services, managed by the structures of the Regional Government, the legal basis for such processing is to be found in the institutional tasks of the Regional Administration, in order to provide the requested information services.
Specific purposes, relating to individual processing, may be indicated in detail within the various access channels. Within these, the User may find additional information on the processing of personal data.
With regard to the operation of the Regional Administration’s websites, the computer systems and dedicated applications collect, in the course of their normal operation, certain data (the transmission of which is implicit in the use of Internet communication protocols) not associated with directly identifiable Users. The data collected include IP addresses and the domain names of the computers used by Users who connect to the site, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the system (successful, error, etc.) and other parameters regarding the operating system and the IT environment used by the User. This data is processed, for the time strictly necessary, for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its regular operation.
No computer techniques are used in any way for the direct acquisition of personal data identifying the user.
The interested party may voluntarily provide personal data and information to request, report and/or solicit interventions, services, information and/or request the dispatch of informative material, through the different access channels and/or by filling in the specifically prepared “formats” (forms).
In such cases, the Regional Administration acquires information and data from the sender, necessary to respond to the requests made and/or provide the services requested, and uses such data solely for the purpose of providing such services or services and/or following up on the requests made (see also point 6 below).
Specific summary information may be given or displayed on the pages of the site set up for particular services.
5. PROCESSING METHODS AND DURATION OF STORAGE
Personal data are processed by paper and computerised means and will be kept in accordance with the rules on the conservation of administrative documentation and in any case for the time necessary to achieve institutional purposes, including archiving in the public interest, scientific or historical research or for statistical purposes.
6.SCOPE OF DATA DISCLOSURE, COMMUNICATION AND/OR DISSEMINATION
The data will be processed exclusively by the staff and collaborators of the Regional Council and/or regional agencies and entities and/or companies expressly appointed as External Data Processors pursuant to Regulation 2016/679/EU and DGR no. 596 of 8 May 2018.
In cases of data voluntarily provided by the Data Subject to request, report and/or solicit interventions, services, information and/or request the sending of informative material, the data may be disclosed to third parties in the cases permitted by the regulations in force, in any case for the fulfilment of the aforementioned requests, or in cases in which communication is imposed by legal or regulatory obligations as well as during legal proceedings.
The data may be disclosed in the cases provided for by law or regulation, for example: in the section of the regional website www.regione.veneto.it called ” AMMINISTRAZIONE TRASPARENTE ” (pursuant to Legislative Decree no. 33 of 14 March 2013), in the section of the aforementioned website called “Bandi, Avvisi e Concorsi” and/or in the Official Bulletin of the Veneto Region – BURVET (pursuant to Regional Law no. 29 of 27 December 2011).
The entities requesting publication shall omit any information that may conflict with the requirements of confidentiality protection provided for in Regulation 2016/679/EU.
For all dissemination operations carried out by means of regional information systems, knowledge tools and/or legal publicity, it is specified that the responsibility related to compliance with Regulation 2016/679/EU is attributable to the entities (other than the Veneto Region and autonomous data controllers) that disseminated the personal data.
During public events, seminars and conventions, organised by the Regional Administration, photographs and/or films may be taken to accompany such events/conventions. These images and films may become part of the iconographic material of the Veneto Region’s activities and be disseminated and/or included in publications of historical directories.
7. RIGHTS OF THE INTERESTED PARTIES
Data subjects (the natural persons to whom the data refer) have the right to obtain from the Regional Administration, in the cases provided for, access to and rectification or erasure of their personal data or restriction of the processing concerning them or to object to the processing (Articles 15 et seq. of Regulation 2016/679/EU). The appropriate request is submitted by contacting the Data Protection Officer – Data Protection Officer at Regione del Veneto (see point 3 above)
8. COMPLAINT TO THE PRIVACY GUARANTOR
Interested parties who consider that the processing of personal data relating to them occurs in violation of the provisions of Regulation 2016/679/EU, have the right to lodge a complaint with the Garante per la Protezione dei dati personali, with headquarters in Piazza Venezia, 11 – 00187 Rome (website: http://www.garanteprivacy.it/), as provided for in Article 77 of the Regulation itself, or with another competent European supervisory authority.
9. PROVISION OF DATA
The provision of data is optional in the case of data provided voluntarily by the data subject and in all cases where the provision of data is not compulsory on the basis of specific legal provisions and/or regulations.
In cases of stipulation of contracts with the Regional Administration, the provision of data is a necessary requirement for the conclusion of such contracts.
In cases where the provision of data is not mandatory, failure to provide the data requested as necessary will make it impossible to obtain the service and/or access the benefit, contribution or procedure requested.