Dear User, below are the rules observed by the institutional tourism promotion website of the Municipality of Rio nell’Elba (hereinafter referred to as “the Website”), developed by InEuropa srl (hereinafter referred to as “the Company”) on behalf of the Municipality, for the protection of your personal data privacy.

a) Privacy Notice
Pursuant to Legislative Decree no. 196/2003 and EU Regulation 2016/679 (GDPR), the processing of information will be based on the principles of fairness, lawfulness, transparency, and protection of confidentiality.
The Website is purely informational in nature and does not provide for the collection of personally identifiable data through registration forms or newsletters.

b) Data Controller and Data Processor
The Data Controller is the Municipality of Rio nell’Elba, with registered office at Via Giuseppe Garibaldi 20, 57038 Rio (LI), Italy.
InEuropa srl, with registered office at Via Giardini n. 476/N – 41126 Modena (MO), Italy, acts as External Data Processor solely for the technical management and maintenance of the Website.

c) Data Processing and Purposes
As the Website does not include contact forms or booking services, the data processed are limited to:

Browsing data: temporary collection and storage of technical data (e.g. IP addresses) exclusively for the purpose of providing informational services and ensuring the security of the Website.

Statistics: processing of aggregated and anonymous data for institutional purposes and statistical surveys related to territorial promotion.

The legal basis for processing is the performance of a task carried out in the public interest or connected to the exercise of official authority vested in the Data Controller.

d) Processing Methods
Data processing will be carried out through electronic means.
The data will not be disclosed to third parties.
The Data Controller does not intend to transfer data to a third country.

e) Special Categories of Personal Data
Any processing of special categories of personal data (sensitive, genetic, biometric, health-related data, or data concerning sexual orientation) is expressly excluded.

f) Cookies
For information regarding the cookies used (exclusively technical or anonymized analytical cookies), please refer to the dedicated Cookie Policy.

g) Data Retention and Rights of the Data Subject
The processing will not exceed the duration of the user’s browsing session on the Website.
The data subject has the right to request access to their data, rectification, or erasure (Articles 15, 16, and 17 GDPR) by writing to: protocollo@comune.rio.it

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).