Privacy information Social Service - Second level

Information pursuant to art. 14 of EU Regulation no. 2016/679
Pursuant to art. 14 of EU Regulation no. 2016/679 (General Regulation on the Protection of Personal Data), the following information is provided.

Data controller
The Data Controller is the Municipality of Milan with headquarters in Piazza della Scala, 2 – 20121 Milan.

Responsible for the protection of personal data
The Data Protection Officer - “DPO”) of the Municipality of Milan can be reached at the following e-mail address: dpo@comune.milano.it 

Purpose and legal basis 
The processing of data is aimed at carrying out the tasks assigned by the Judicial Authority and any related act within the scope of the provisions of the civil code and the special laws regarding the competences of municipal territorial social services. 

Personal data, including particular data relating to convictions and crimes, are processed in compliance with the conditions set out in EU Regulation 2016/679 and in particular:

  • from the art. 6 – par. 1 letter e) EU Reg. 679/2016 - and art. 2 ter of the Legislative Decree. 196/2003 “Code regarding the protection of personal data”, for the execution of a task of public interest or connected to the exercise of public powers in accordance with Presidential Decree no. 616/77 
  • from the art. 9 par. 2 lett. g) EU Reg. 679/2016 in accordance with the art. 2 sexies paragraph 2 letter. s) Legislative Decree 196/2003
  • from the art. 10 EU Reg. 679/2016.

Types of data processed 
The level II social service procedure/service/activity involves the collection of the following personal data: 

  • Personal data (name, surname, domicile, residence, family unit, family status)
  • Judicial data
  • E-mail address: Ordinary Mail or PEC.

Source from which the personal data originates
The personal data subject to the processing activity were obtained from provisions/acts of the Judicial/Public Security Authority.

Mode of treatment 
The processing takes place in compliance with fundamental rights and freedoms and is based on the principles of correctness, lawfulness, transparency and protection of confidentiality. It is also carried out with the aid of electronic instruments consistently with the operations indicated in the art. 4, point 2, of EU Regulation 2016/679.

Nature of treatment
The provision of data is mandatory and failure to provide it precludes the possibility of carrying out the obligations relating to social assistance for the office.

Communication and dissemination 
Personal data may be communicated to third parties or disseminated in the cases provided for by the applicable regulatory provisions and always for reasons inherent to the performance of activities relating to second level social assistance.

Categories of data recipients
The processing is carried out by authorized persons committed to confidentiality and responsible for the related activities in relation to the purposes pursued. 
The data processing can also be carried out by external parties designated as responsible pursuant to art. 28 reg. EU 679/2016 whose list is available at the Welfare and Health Directorate located in via Sile, 8.

Data retention
The data will be kept for the time necessary to achieve the purposes for which they were collected.

Data transfer to third countries 
The data processed for the aforementioned purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organisations. 

Rights of interested parties 
Interested parties can exercise the rights provided for by the art. 15 and following of EU Regulation 2016/679 and in particular the right to access one's personal data, to request rectification or limitation, updating if incomplete or incorrect and cancellation if the conditions exist as well as to oppose the processing by contacting the request should be addressed to:

Right of complaint
Finally, we inform you that interested parties, if they believe that the processing of personal data relating to them occurs in violation of the provisions of EU Regulation 2016/679 (art. 77) have the right to lodge a complaint to the Guarantor, or to take action in the appropriate judicial offices (art. 79 of the Regulation).
 

Updated: 09/01/2024