Institutional portal - Municipality of Milan

Information pursuant to art. 13 of EU Regulation no. 2016/679

Pursuant to art. 13 of EU Regulation no. 2016/679 (General Regulation on the Protection of Personal Data), the following information is provided.

Data controller
The Data Controller is the Municipality of Milan with headquarters in Piazza della Scala, 2 – 20121 Milan – Welfare and Health Directorate located in via Sile 8 – 20100 Milan – e-mail address: DC.PoliticheSocialieSalute@comune.milano.it .

Data Protection Officer (DPO) 
The Municipality of Milan has appointed its own Personal Data Protection Officer who can be contacted at the e-mail address: dpo@comune.milano.it .

Purpose 
The data processing is aimed at the statistical aggregation of certain personal data already in possession of the Municipal Administration and collected for the original purpose (management of administrative procedures relating to declarations of registration and/or change in personal details - Privacy information request for registration change of personal details - Municipality of Milan), in order to implement a more effective and widespread management of the welfare system for the inhabitants of the Municipality of Milan ("Welfare Intelligence"). 

Legal basis 
Personal data are processed in compliance with the conditions established by EU Regulation 2016/679 and in particular the condition of lawfulness identified by the Data Controller for Welfare Intelligence consists in the execution of a task of public interest, pursuant to articles 6(1) letter. e), 9(2) letter. g) GDPR and articles. 2-ter and 2-sexies Privacy Code, and in compliance with the provisions of article 89(1) GDPR as the personal data processed have been duly pseudonymised.

Types of data processed 
The processing involves the aggregation for statistical purposes, with consequent pseudonymisation in accordance with Article 89(1) GDPR, of certain personal data (name and surname, gender, date and place of birth and residence) previously collected for the original purposes above mentioned. Some of this data may be considered special data.

Mode of treatment 
The processing described above takes place in compliance with fundamental rights and freedoms and is based on the principles of correctness, lawfulness, transparency and protection of confidentiality. It is also carried out with the aid of electronic instruments consistently with the operations indicated in the art. 4, point 2, of EU Regulation 2016/679.

Categories of data recipients

The processing is carried out by authorized persons committed to confidentiality and responsible for the related activities in relation to the purposes pursued. Personal data may be communicated to third parties, in their capacity as independent data controllers (e.g. Authorities, following a request to this effect) or data controllers duly appointed pursuant to Article 28 GDPR, such as suppliers of technological solutions identified in order to implement Welfare Intelligence.

Data retention

The data collected for the original purposes are indicated in the relevant information mentioned above, to which reference should be made. The personal data following aggregation for Welfare Intelligence will be subject to constant updating and in any case will not be kept for a period beyond the retention terms indicated in the aforementioned information.

Data transfer to third countries

The data processed for the aforementioned purposes are not transferred to third countries outside the European Union or the European Economic Area (EEA) or to international organisations. Should this become necessary, such transfer will take place exclusively towards third countries in favor of which the European Commission has previously issued an adequacy decision, pursuant to Article 45 GDPR, or, failing that, in the presence of one of the guarantees of referred to in Chapter V of the GDPR, such as the standard contractual clauses pursuant to Article 46 GDPR.

Rights of interested parties

Interested parties can exercise the rights provided for by the art. 15 and following of EU Regulation 2016/679 and in particular the right to access one's personal data, to request rectification or limitation, portability, updating if incomplete or incorrect and cancellation if the conditions exist as well as to oppose the Processing by addressing the request should be addressed to:

- Municipality of Milan as Owner, via Sile 8- 20100 Milan - Walfare and Health Department - to the following e-mail address DC.PoliticheSocialieSalute@comune.milano.it 

or

- Responsible for the protection of personal data of the Municipality of Milan (Data Protection Officer - “DPO”) reachable at the following e-mail address: dpo@Comune.Milano.it 

However, as Welfare Intelligence is processing for statistical purposes pursuant to Article 89(1) GDPR necessary for the performance of a task of public interest, certain rights mentioned above may be subject to restrictions based on specific provisions of the GDPR.

Right of complaint

Finally, we inform you that interested parties, if they believe that the processing of personal data relating to them occurs in violation of the provisions of EU Regulation 2016/679 (art. 77) have the right to lodge a complaint with the Guarantor, (www.garanteprivacy.it ) or to take action in the appropriate judicial offices (art. 79 of the Regulation).

Modification

The Owner reserves the right to make to this Information, at its sole discretion and at any time, all changes deemed appropriate or made mandatory by the regulations in force from time to time, giving adequate publicity to interested parties.