Dear user,
in line with the provisions of the EU regulation on general data protection 2016/679, of the Legislative Decree of June 30, 2003 no. 196 (so-called Privacy Code) and of the Legislative Decree of August 10, 2018, no. 101 whose objective is to protect the fundamental rights and freedoms of natural persons, in particular the right to protection of personal data, we inform You about treatment methods of personal data of users who interact with the site [Insert NAME of the SITE] of the Lombardy Region starting from the address http://www.en.regione.lombardia.it on their rights and how they can exercise them.
These methods do not apply to other external websites that might be connected via links to this site.

1. Purpose of the processing
Following consultation of this site, data relating to identified or identifiable persons may be processed for the following purposes:

• provision of information, pursuant to Law 150/2000, on the activities of the Lombardy Region;
• execution of public interest tasks or otherwise related to the exercise of public authority, including purposes of archiving, historical research and analysis for statistical aims;
• fulfillment of obligations provided for by law, regulations, Community legislation.

2. Methods of processing
Processing is carried out with the support of electronic or automated means and transmitted via telematic networks.
The Data Controller adopts appropriate technical and organizational measures to guarantee a suitable level of security with respect to the type of data processed.

3. Data controller
Data Controller is the Lombardy Region, with headquarters in Piazza Città di Lombardia, 1 - 20124 Milan.

4. Data Protection Officer (DPO)
Data Protection Officer (DPO) of the Lombardy Region can be contacted by sending an email to: rpd@regione.lombardia.it

5. Type of data processed

Navigation data – Computer systems and software procedures designated to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through elaboration and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or computer domain names used by users connecting to the site, addresses in URI (Uniform Resource Identifier) notation of requested resources, the time of request, the method used for submitting the request to server, the size of the file obtained in response, the numerical code indicating the status of the response given by server (succeeded, error, etc.) and other parameters related to the operating system and the user's IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. To this end, the last trifecta of the portal's visitors IP addresses is concealed before the navigation data is saved in the management database.

Data provided voluntarily by user - The explicit and voluntary optional sending of emails to the e-mail addresses indicated on this site involves the acquisition of the sender's address, necessary to respond to requests, and any other personal data included in the message. Sensitive and judicial data processing is excluded; if data are provided by the user, they will be deleted.

Cookie Policy - For information on cookies used in this site, please refer to the Cookie Policy specification.

6. Data provision discretion

The user is free to voluntarily provide personal data in communications sent to the Lombardy Region through the contact details indicated on this site. Failure to provide certain data in requests for information/in sending suggestions and warnings, may entail the impossibility of obtaining a response to what was requested or reported.

7. Communication and dissemination of personal data
Collected data are processed exclusively by Lombardy Region Authority personnel and collaborators. These data are processed, in the role of Data Processor pursuant to ex art. 28 of the Regulation, by Lombardia Informatica S.p.A., which performs management and maintenance of information systems on behalf of the Lombardy Region.
Some processing operations may also be carried out by other third subjects, to which the Lombardy Region entrusts certain activities, or part of them, functional to the provision of services. On such additional subjects, designated as Data Processors, are imposed by the Lombardy Region, by contract or other legal act under EU or Member States law, appropriate obligations regarding general data protection through operating instructions, with particular reference to the adoption of adequate technical and organizational measures, in order to guarantee confidentiality and security of data, pursuant to ex art. 32 of the Regulation.
Apart from these hypotheses, data will neither be disclosed to third parties nor disseminated, except in cases specifically provided for by national or European Union law.

8. Transfer of personal data to countries outside the European Union
Data collected and processed are not transferred to Companies or other entities outside the Community territory.

9. Data retention times
The anonymized navigation data remain available for statistical processing for 400 days. They are never deleted from servers, unless explicitly requested (request to be sent according to procedures described in point 11, "Rights of the interested parties" of this disclosure). Data could be used to ascertain responsibility in case of hypothetical cyber-crimes against the site.

10. Rights of the interested parties
Users can exercise the rights referred to in Articles 15 et seq. of Regulation (EU) 2016/679, where applicable; among these, the right to request the correction or cancellation of registration data, the limitation of processing or to oppose the processing, in the cases provided for.
Requests for the exercise of these rights must be sent to the e-mail address rpd@regione.lombardia.it to the attention of the Director pro tempore, or by registered mail to the Lombardy Region presidenza@pec.regione.lombardia.it, Piazza Città di Lombardia 1, 20124 Milan to the attention of the Director pro tempore of Presidenza. Furthermore, it is always possible to exercise the right to lodge a complaint with the competent Supervisory Authority.