Institutional portal - Municipality of Milan

Information pursuant to art. 13 of EU Regulation no. 2016/679

Pursuant to art. 13 of EU Regulation no. 2016/679 (General Regulation on the Protection of Personal Data), the following information is provided.

Data controller
The Data Controller is the Municipality of Milan with headquarters in Piazza della Scala, 2 – 20121 Milan.

Responsible for the protection of personal data
The Data Protection Officer - “DPO”) of the Municipality of Milan can be reached at the following e-mail address: dpo@Comune.Milano.it

Purpose and legal basis 
The processing of data is aimed at allowing the effective fulfillment of the right of civic access and/or activities connected and instrumental to the management of the related administrative procedure.  
Personal data are processed, pursuant to and for the purposes of article 5 of Legislative Decree no. 33/2013, in compliance with the conditions established by EU Regulation 2016/679 and in particular:

• to fulfill a legal obligation to which the owner is subject (art. 6 – par. 1 letter c); 
• for the execution of a task of public interest (art. 6 par. 1 letter e). 

Types of data processed 
The civic access procedure involves the collection of personal data requested with this form.

Mode of treatment 
The processing takes place in compliance with fundamental rights and freedoms and is based on the principles of correctness, lawfulness, transparency and protection of confidentiality. It is also carried out with the aid of electronic instruments consistently with the operations indicated in the art. 4, point 2, of EU Regulation 2016/679.

Nature of treatment
The provision of data marked with an asterisk is mandatory and failure to provide it precludes the possibility of carrying out the effective exercise of the right of civic access as well as the consequent obligations inherent to the proceeding/procedure. 

Communication and dissemination 
Personal data is not communicated to third parties, unless this operation is necessary to comply with relevant regulatory provisions. Personal data is not disclosed.

Categories of data recipients
The processing is carried out by authorized persons committed to confidentiality and responsible for the related activities in relation to the purposes pursued. 

Data retention
The data will be kept for the time necessary to achieve the purposes for which they were collected and for the period necessary to carry out the administrative procedure referred to in article 5 of Legislative Decree no. 33/2013 and in any case for the time provided for by the provisions regarding the conservation of administrative records and documents.

Data transfer to third countries 
The data processed for the aforementioned purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organisations. 

Rights of interested parties 
Interested parties can exercise the rights provided for by the art. 15 and following of EU Regulation 2016/679 and in particular the right to access one's personal data, to request rectification or limitation, updating if incomplete or incorrect and cancellation if the conditions exist as well as to oppose the processing by contacting the request to:

• Municipality of Milan as Owner, Piazza della Scala n. 2, - 20100 Milan to the following e-mail addresses protocol@postacert.comune.milano.it  - protocol@comune.milano.it 

or

• Responsible for the protection of personal data of the Municipality of Milan (Data Protection Officer - “DPO”)

Right of complaint
Finally, we inform you that interested parties, if they believe that the processing of personal data relating to them occurs in violation of the provisions of EU Regulation 2016/679 (art. 77) have the right to lodge a complaint with the Guarantor, (www.garanteprivacy.it) or to take action in the appropriate judicial offices (art. 79 of the Regulation).