Information on the processing of personal data

This information describes the methods of processing of users’ personal data (hereinafter, also the “Users”) that consult the site [teamdigitale.github.io/security-awareness](https://teamdigitale.github.io/security -awareness /) (hereinafter also the “Site”). The information is provided pursuant to art. 13 of the regulation (EU) 2016/679 (hereinafter the “Regulation”).

The validity of the information contained in this page is limited to the Site only and does not extend to other websites that can be consulted through hypertext links.

Data controller

The Data Controller is the Extraordinary Commissioner for the implementation of the Digital Agenda, based in Via della Mercede, 9 00187 Rome - Italy, email [teamdigitale@governo.it] (mailto: teamdigitale@governo.it), which acts through its support structure (hereinafter jointly the “[Digital Transformation Team] (https://teamdigitale.governo.it/)" or just the “Digital Team”).

The digital team has appointed its own Data Protection Officer, pursuant to art. 37 of EU Regulation 2016/679, which can be contacted at the following address: [dpo@teamdigitale.governo.it] (mailto: dpo@teamdigitale.governo.it).

Categories of processed data

a) Navigation data

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category of data includes IP addresses or domain names of computers and terminals used by users, the URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, the time of the request, the method used in the submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

These data, necessary for the use of web services, are also processed for the purpose of:

  • obtain statistical information on the use of services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
  • check the correct functioning of the services offered.

b) Data provided voluntarily by the User

The Owner will acquire the personal data that may be provided by the User through the Site in case of registration to one of the newsletter services, by filling in the forms available on the pages of the individual projects.

In this case the personal data are provided by the User through a form to propose their candidacy. The sending of the data contained in the curriculum will be treated, also with the aid of IT tools, by the Digital Transformation Team of the Presidency of the Council of Ministers for the sole purpose of evaluating the candidacy and, possibly, contacting you. The User may request deletion of data at any time by writing to [dpo@teamdigitale.governo.it] (dpo@teamdigitale.governo.it).

Legal basis for the processing

The legal basis of this treatment is to be found in the institutional tasks entrusted to the commissioner structure, aimed at promoting knowledge, development and dissemination of the tools for implementing the digital agenda, in the specific case to provide information and updates on the activity and on the projects of the structure itself.

The legal basis for processing only the data collected through analytical cookies is the consent of the User.

Categories of subjects to whom personal data can be communicated and the purpose of communication

The Data Controller may communicate, for the pursuit of the aforementioned purposes, some personal data also to third parties who provide a service to the owner himself and who will process said personal data as data processors.

The list of data processors can be requested from the Data Controller at any time by writing to [dpo@teamdigitale.governo.it] (dpo@teamdigitale.governo.it).

Data transfer outside the EU

Some of the third-party providers we use reside in the USA. We have entered into service agreements with these suppliers pursuant to art. 28 of the Regulation. All suppliers are in compliance with the Regulations and, when they are not certified Privacy Shield, we have concluded with them the Contractual Clauses of the European Commission to guarantee adequate levels of protection.

Rights of interested parties

Interested parties have the right to obtain, in the cases provided, access to their personal data and the correction or cancellation of the same or the limitation of the treatment that concerns them or to oppose the processing (articles 15 and following of the Regulations) .

These requests may be addressed to the Data Controller by writing to [dpo@teamdigitale.governo.it] (dpo@teamdigitale.governo.it.

Claims

Interested parties who consider that the processing of personal data referring to them carried out through this site is in violation of the provisions of the Regulations have the right to lodge a complaint with the Guarantor, as envisaged by art. 77 of the same Regulation, or to take the appropriate judicial seats (art. 79 of the Regulation).

Last update: 09/10/2019