Privacy Policy
Data Controller
Pro Loco Pietrapertosana
Via della Speranza, 159, 85010 Pietrapertosa (PZ)
Email: prolocopietrapertosa@gmail.com
Purposes and Legal Basis of Processing
The data collected through the contact form (name, email, subject and message) are used exclusively for the purpose of responding to your requests for information. The legal basis for processing is taking steps at the data subject’s request prior to entering into a contract (Article 6(1)(b) GDPR) and the Controller’s legitimate interest in responding to incoming communications (Article 6(1)(f) GDPR).
Providing Your Data
Providing data through the contact form is optional. However, if you do not provide the mandatory information, such as your name and email address, we will be unable to process and respond to your request.
Retention Period
Your data will be retained for the time strictly necessary to handle your request and, subsequently, for any period required by law or necessary to protect the Controller’s rights. Emails received through the contact form are normally deleted 12 months after the matter has been closed, unless legal requirements make a different retention period necessary.
Data Processors and Recipients
Your data will not be made public. The following parties may have access to them as data processors (Article 28 GDPR) or authorised persons:
- The website hosting provider;
- The email service provider used by Pro Loco to receive communications;
- Cloudinary: used as a Content Delivery Network (CDN) to optimise and deliver images, documents and videos. When you visit the website, media are downloaded from Cloudinary’s servers, which may collect technical data, such as IP addresses, to provide the service.
- Members of the association authorised to handle requests.
Transfers Outside the EEA
Personal data processed through services such as Cloudinary or US cloud providers may be transferred outside the European Economic Area (EEA). In these cases, the Controller ensures that transfers comply with applicable law, for example by using the European Commission’s Standard Contractual Clauses or relying on adequacy decisions such as the EU–US Data Privacy Framework.
External Content and Cookies
With your express consent through an affirmative action in the cookie banner, we enable external services such as Google Maps, Facebook and Instagram. These third parties may install profiling or tracking cookies. Without consent, which is the default setting, external content is blocked and only inactive placeholders are shown. We also use strictly necessary technical cookies for sessions and CSRF protection, which do not require consent.
Automated Decision-Making
The Controller does not use automated decision-making, including profiling, as referred to in Article 22(1) and (4) GDPR.
Your Rights and Complaints
You may exercise the rights provided by Articles 15 onwards of the GDPR at any time, including access, rectification, erasure, restriction of processing and the right to object. To do so, contact us at the email address above.
You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) if you believe that processing infringes the Regulation.
Updates
This privacy policy may be amended to comply with new regulations. Please check it periodically.