4. Purposes of the data processing
The Veneto Region, as Managing Authority of the Italy – Croatia CBC Programme (2021-2027), will gather and manage personal data only if they are strictly necessary to perform the institutional functions of the Programme, excluding the data processing when the purposes pursued can be achieved through anonymous data or trough other methods that allow the identification of data subject only if needed.
If newsletter services are setting up to provide information by the Managing Authority, the legal basis data processing is the Communication Strategy of the Programme, as approved by the Veneto Regional Government Resolution n. 689 of the 16th of May 2017.
Specific purposes, related to individual processing, can be detailed inside the specific services provided on the website. With reference to this specific services, each user can find additional information on the processing of personal data.
As regard the functioning of the official Programme website, the IT systems and the dedicated software applications point out, during their ordinary work, some data (the transmission of which is implicit in the use of Internet protocols) that are not associated with identifiable Users.
The collected data include the IP addresses and the computers domain names used by the web site Users that utilise the website, the addresses in the Uniform Resource Identifier (URI) related to the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained as response, the numerical code indicating the status of the response given by the system (success, error, etc.) and other parameters concerning the operating system and the IT environment used by the User.
These data are processed during the length of time necessary and only for the purpose of gathering anonymous statistical information as regard the use of the website and of monitoring of its orderly functioning.
No computer techniques are used in any way for the direct personal data collection.
Data subject shall provide voluntarily its personal data and personal information, in order to require, notify and/or request interventions, specific services, information and/or to require informative material, through the available channels and/or filling in the “format” specifically drafted for that purpose.
In those cases, the Managing Authority shall gather information and data of the applicant, necessary to appropriately respond to the claims received and/or provide the requested services; the Managing Authority shall use the aforementioned data only for the fulfilment of the services and/or for giving effect to requests (see also below, at point 6).