Privacy Policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
This information, provided pursuant to art. 13 and 14 of Regulation (EU) 2016/679 (hereinafter the “Regulation” or “GDPR”), describes the methods of processing the personal data of users (hereinafter “Data Subject(s)” or generically “User/s”) who visit the website (hereinafter “Site”) www.dolomitivalcomelico.it. Unione Montana Comelico (hereinafter, also the “Company”) is the owner of the Site and has entrusted its operational management to the Val Comelico Dolomiti Tourist Consortium to promote the territory of competence and respond to an information need with respect to citizens. The validity of the information contained in this page is limited to the site only and does not extend to other websites that may be consulted by hyperlink.
Data Controller
The Data Controller is Unione Montana Comelico, via Dante Alighieri 3, 32045 Santo Stefano di Cadore (BL), VAT 00731980256 (hereinafter the “Data Controller”).
E-mail: dolomiti@valcomelico.it
For any questions regarding the processing of personal data, please contact the Data Controller at the address indicated in this section.
Categories of data and purposes
a. Browsing data
The computer systems used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the devices used by the Users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the resources requested, the time of the request, the type of request made (resource requested and name of the operation), the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the User’s IT environment.
These data, necessary for the use of the Site’s functions, are processed in order to check the correct functioning of the systems and services offered by the Site (diagnostics), as well as for security reasons.
b. Data voluntarily communicated by the User
The Data Controller’s contact details and contact methods are indicated on the Website and in this privacy policy. If the User contacts the Data Controller, the data communicated by the same in the contact request will be processed. The User is invited not to communicate personal data of a particular nature, pursuant to art. 9 and 10 of the GDPR, unless it is strictly necessary.
These data will be processed exclusively for the purpose of responding to the User’s request.
Legal basis of the processing
The Company processes the personal data referred to in point a) in its capacity as Data Controller on the basis of its legitimate interest in the Website being functional and publicly available through the web, by virtue of a task of public interest or related to the exercise of public authority vested in the Data Controller pursuant to art. 6, par. 1 letter e) of the GDPR.
The Company processes the personal data referred to in point b) as Data Controller on the basis of the need to implement pre-contractual measures with the User who sends the request of the data subject, pursuant to art. 6, paragraph 1, letter b), of the GDPR.
Categories of recipients
The Company may communicate some personal data to subjects it uses for the provision of services essential to the operation of the Site, as data processors pursuant to art. 28 of the Regulation, for the performance of certain processing activities or to others, to whom communication is necessary to comply with a legal obligation.
The personal data collected are also processed by the staff in charge of processing, who act on the basis of specific instructions given by the Data Controller.
The complete list of suppliers appointed as responsible can be requested from the Data Controller, at the addresses indicated in the policy.
Transfers to third countries
The processing of Users’ personal data is carried out at the Data Controller’s headquarters. Likewise, however, we use third-party suppliers for some services essential to the operation of our products and services that reside abroad, including the USA.
We have concluded agreements with these suppliers pursuant to art. 28 of the Regulation and use one or more mechanisms that guarantee adequate levels of protection (e.g. verification of their adherence to the Data Privacy Framework, signing of Standard Contractual Clauses of the European Commission). Where possible, we also select options that allow us to keep data in the European Union.
We care a lot about the principle of minimization, and for this reason we only communicate the strictly necessary data to third parties. You can request the list of data processors and the measures taken by writing to the Data Controller.
Retention period
The personal data relating to Users are processed for the time strictly necessary to pursue the purposes for which they were collected.
In compliance with the principles of proportionality and necessity, the data are not stored for longer periods than those indispensable for the achievement of the purposes indicated above and therefore for the diligent performance of the activities, in particular:
- browsing data are stored in the form of logs until the purpose indicated in the information is achieved, then they will be aggregated into reports;
- the data communicated by the User are kept for the time necessary to manage the request and, in any case, up to 10 years, the ordinary limitation period pursuant to Article 2946 of the Italian Civil Code.
Rights of the data subjects
Users, pursuant to articles 15 et seq. of the Regulation, have the right:
- to obtain from the Data Controller confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain access to the personal data and receive a copy thereof;
- to obtain from the Data Controller the rectification of inaccurate personal data concerning them, without undue delay, as well as to obtain the integration of incomplete personal data;
- to obtain from the Data Controller the erasure of personal data concerning them without undue delay, where the conditions are met;
- to obtain from the Data Controller the limitation of processing, where the conditions are met;
- to receive in a structured, commonly used and machine-readable format the personal data concerning them provided to a data controller and have the right to transmit such data to another data controller without hindrance from the data controller to whom they have been provided, where the conditions are met.
Users also have the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them for the pursuit of the legitimate interest of the Data Controller, pursuant to art. 21 of the Regulation.
In the event that the processing is based on consent, Users have the right to withdraw it at any time without affecting the lawfulness of the processing based on the consent given before its withdrawal.
Data Subjects who believe that the processing of personal data relating to them, carried out by the Data Controller, is in violation of the provisions of the Regulation, have the right to lodge a complaint with the Data Protection Authority, as provided for in art. 77 of the Regulation itself, or to take legal action (art. 79 of the Regulation).
The contact details and references of the Supervisory Authority – Guarantor for the protection of personal data are provided below:
- E-mail address: garante@gpdp.it
- PEC address: protocollo@pec.gpdp.it
- Website: https://www.garanteprivacy.it
Automated processing of personal data
Users’ personal data are not subject to dissemination or to any fully automated decision-making process, including profiling.
Changes
The Data Controller reserves the right to make any changes to this policy, at its sole discretion, and at any time, as deemed appropriate or made mandatory by the regulations in force from time to time, giving adequate notice to Users. Therefore, the User is requested to consult this page often, taking as reference the date of the last modification indicated.
Date of last update: 23.07.2026
