Institutional portal - Municipality of Milan

Privacy disclaimer
Pursuant to the articles. 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) we provide you with the information requested on the processing of personal data (“data”) carried out by the Municipality of Milan (“Municipality”).

Data Controller and Data Processor
The Data Controller is the Municipality of Milan, with headquarters in Piazza della Scala 2 – 20121 Milan.

Contact details of the Data Protection Officer – DPO

The Data Protection Officer - “DPO”) of the Municipality of Milan can be reached at the following e-mail address: dpo@Comune.Milano.it.

Categories of personal data

The Municipality will process the data (i.e. images and voice) referred to you in the audio/video/photographic recordings taken on the occasion of events such as, by way of example but not limited to, press conferences and round tables which will be held at the headquarters of the Owner and/or in areas of its availability.

Purpose of the processing and legal basis
The data processing is aimed at documenting and publicizing the events, also through the dissemination of audio/video/photographic footage, exclusively for institutional communication and promotion purposes. The audio/video/photographic footage will be disseminated via the following channels:

•  website of the Municipality of Milan (WebTV/Radio section);
•  active and/or future activation social channels of the Municipality of Milan.

The legal basis of the processing is constituted by the consent expressed by accessing the areas where the events will be held and the audio/video/photographic recordings carried out (art. 6 c. 1 l. a) of the GDPR) for subsequent dissemination through the aforementioned channels. Consent is optional, however failure to provide it prevents access to the areas dedicated to events.

Mode of treatment
The processing takes place in compliance with fundamental rights and freedoms and is based on the principles of correctness, lawfulness, transparency and protection of confidentiality. It is also carried out with the aid of electronic instruments consistently with the operations indicated in the art. 4, point 2, of EU Regulation 2016/679. The treatment in particular involves photographing, recording and/or video-filming people with the use of a camera and/or video camera.

Communication and Dissemination
The dissemination of audio/video/photographic footage will be carried out by adopting adequate technical and organizational measures. In any case, the data will not be communicated to third parties by the Data Controller.

Recipients or Categories of data recipients
The treatments are carried out by authorized persons committed to confidentiality, who have been given adequate operating instructions.

Data transfer to a third country and/or an international organization and guarantees

The data will not be transferred or stored by the Data Controller in a place other than the European Economic Area.

Data retention period or criteria for determining the period

The files containing the audio/video/photographic recordings will be retained and archived for subsequent consultation limited to what is necessary to pursue the purposes set out in this Policy. In particular, they will be retained for a period of time equal to the minimum necessary, quantified as 10 years, without prejudice to a further or different retention period that may be imposed or permitted by law.

Rights of interested parties
Interested parties, where the conditions are met, can exercise the rights provided for by the art. 15 et seq. of the GDPR, such as access, cancellation or opposition, by sending the request:

•  to the Municipality of Milan, as Owner, via Lupetta 8, 20123 Milan – Communication Area at the following e-mail address: dscom.servamministrativo@comune.milano.it or
•  to the Personal Data Protection Officer of the Municipality of Milan (Data Protection Officer - “DPO”) at the following e-mail address: dpo@Comune.Milano.it

Finally, we inform you that interested parties, if they believe that the processing of personal data relating to them occurs in violation of the provisions of the GDPR (art. 77) have the right to lodge a complaint with the Guarantor (www.garanteprivacy.it) or to appeal to the appropriate judicial offices (art. 79).