Institutional portal - Municipality of Milan

Information pursuant to art. 13 of EU Regulation no. 2016/679

Pursuant to art. 13 of EU Regulation no. 2016/679 (General Regulation on the Protection of Personal Data, hereinafter the “Regulation”), the following information is provided.

Art. 1 - Data controller

The Data Controller is the Municipality of Milan with headquarters in Piazza della Scala, 2, 20121 Milan (MI) – Technological and Digital Innovation Directorate, located in via GB Vico, 18 – Milan 20123; email address ited@comune.milano.it

Art. 2 - Responsible for the protection of personal data

The Data Protection Officer - “DPO”) of the Municipality of Milan can be reached at the email address dpo@comune.milano.it.

Art. 3 - Purpose and legal basis

The data processing is aimed at allowing access to the Site via SPID (Public Digital Identity System) and CIE (Electronic Identity Card) to manage the requests of interested parties regarding the online services provided by the Municipality, e.g. electronic bill for the TARI (Waste Tax) replacing the paper document; reminder of the expiration of the Identity Card; news and information on the new services offered by the Municipality.

Personal data are processed in compliance with the conditions established by the Regulation and in particular by art. 6 – par. 1 letter e) - and by art. 2 ter of the Legislative Decree. 196/2003 “Code regarding the protection of personal data”, for the execution of a task of public interest and connected to the exercise of public powers vested in the Municipality, in accordance with the Legislative Decree. n. 82/2005 “Digital Administration Code”.

Membership of the chosen services may be revoked at any time independently using the same membership method. The revocation does not affect the lawfulness of the processing already carried out on the basis of the consent expressed before the revocation itself.
 

Art. 4 - Types of data processed

The management of the procedure involves the processing of the following personal data:

     1. SPID Authentication:

1. First name & Last name

2. Tax Code

3. Contacts: telephone, email

     2. CIE authentication:

1. First name & Last name

2. Tax Code

3. Date of birth

    3. Information related to the management of online services

1. Membership of services

2. Contact details and addresses indicated for sending communications by the Municipality

Art. 5 - Processing methods

The processing takes place in compliance with fundamental rights and freedoms and is based on the principles of correctness, lawfulness, transparency and protection of confidentiality, ensuring the relevance and proportionality of the information collected and used with respect to the purpose described.

The processing is also carried out with the aid of electronic tools consistently with the operations indicated in the art. 4, point 2, of EU Regulation 2016/679.

Art. 6 - Nature of the processing

Membership of online services is voluntary. However, to access them, the provision of data is mandatory, as failure to provide them precludes the user's access to the site via SPID and CIE and consequently prevents the provision of the requested services electronically.

It is specified that failure to subscribe to the online services does not prejudice their provision by the Municipality of Milan which will in any case take place according to the ordinary methods established for each by law (e.g. sending payment notices and/or communications by post).

Art. 7 - Communication and dissemination

Personal data are not disclosed or communicated, except in the cases and ways provided for by law (e.g. judicial authority).

Art. 8 - Categories of data recipients and data controller

The processing is carried out by authorized persons committed to confidentiality and responsible for the related activities in relation to the purposes pursued.

The data processing will also be carried out by the company Enterprise Service Srl Italia Via A. Grandi 4, 20063 Cernusco sul Naviglio which assumes the function of Data Controller pursuant to art. 28 of EU Regulation 2016/679

Art. 9 - Data retention

The data will be kept for the time necessary to achieve the purposes for which they were collected and in any case for a maximum period of 2 (two) years from the last interaction of the citizen with the online services of the Municipality of Milan, beyond which the data they will be eliminated.

Art. 10 - Data transfer to third countries

The data processed for the aforementioned purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organisations.

Art. 11 - Rights of interested parties

Interested parties can exercise the rights provided for by the art. 15 and following of Rules and, in particular, the right to access one's personal data, to request rectification or limitation, updating if incomplete or incorrect if the conditions exist, as well as to oppose processing by sending the request:

- to the Municipality of Milan as Owner, via G. Vico, n. 18 - 20123 Milan - Technological and Digital Innovation Directorate at the email address specified in the previous art. 1;

- to the Personal Data Protection Officer of the Municipality of Milan (Data Protection Officer - “DPO”) at the email address specified in the previous art. 2;

Exclusively for the exercise of the right to delete data pursuant to art. 17 of Rules the interested party must formulate a specific request by accessing the following link https://servizicrm.comune.milano.it/Cittadino/Cancellazionedati

Art. 12 - Right to complain

Finally, we inform you that the interested parties, if they believe that the processing of personal data relating to them occurs in violation of the provisions of the Rules (art. 77) have the right to lodge a complaint with the Guarantor, (www.garanteprivacy.it) or to take action in the appropriate judicial offices (art. 79 of the Regulation).

Art 13. - Modification

The Owner reserves the right to make to this Information, at its sole discretion and at any time, all changes deemed appropriate or made mandatory by the regulations in force from time to time, giving adequate publicity to interested parties.