Privacy Policy

Privacy Policy Notice – Visit Tirano

Updated version as of December 30, 2025

The protection of users’ privacy and the security of personal data are important. Personal data is collected and processed with care and appropriate security measures.

This notice describes how personal data of users who visit the Visit Tirano website is processed. The information notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and applies exclusively to the Website; it does not extend to any other websites that may be consulted via hyperlinks.

1) Data Controller

The Data Controller is Comune di Tirano, located at Piazza Cavour, 18 – 23037 Tirano (SO), email: ufficio.protocollo@comune.tirano.so.it.

2) Data Protection Officer (DPO)

For information about the DPO, contact the Controller at the contact details provided above.

3) Types of Data Processed

3.1 Browsing Data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This category includes, for example: IP addresses or domain names of the devices used by users, URI/URL addresses of the requested resources, time of the request, method used, size of the file in response, server response status code, and other parameters related to the user’s operating system and IT environment.

These data are processed to allow the use of the Site, for aggregated statistical purposes, and to verify the correct functioning and security of the services.

Retention: browsing/log data generally do not persist for more than 60 days and are deleted after aggregation, except for any need to ascertain crimes by the judicial authority.

3.2 Cookies and Similar Technologies

For detailed information on cookies and similar tools (types, purposes, retention times, disabling methods), users are invited to consult the Site’s Cookie Policy: Cookie Policy Page.

(If Visit Tirano uses the Municipality’s Cookie Policy, you can keep that reference. The Municipality’s cookie policy is published on the institutional website.)

3.3 Data Voluntarily Provided by the User

The optional, explicit, and voluntary sending of messages to the contact addresses indicated on the Site, as well as the filling out and forwarding of any forms present, entail the acquisition of the sender’s contact data and personal data included in the communication, necessary to respond to requests.

Providing such data is optional but necessary to receive a response.

The Controller does not intentionally collect or process personal data relating to minors. By accessing the Site and using the services offered, the user declares to be of legal age.

4) Purpose and Legal Basis of Processing

Personal data are processed by the Controller for the following purposes:

Management of requests submitted by the user (information, assistance, contacts).
Legal basis: performance of pre-contractual and/or contractual measures taken at the request of the data subject (Art. 6(1)(b) GDPR).
Operation, maintenance and security of the Website, and abuse prevention.
Legal basis: legitimate interest of the Data Controller (Art. 6(1)(f) GDPR).

5) Processing Methods and Recipients

Processing is carried out using electronic tools and in ways strictly related to the purposes indicated above. Appropriate security measures are adopted to prevent data loss, unlawful use, or unauthorized access.

The data may be processed by authorized personnel of the Data Controller and by appointed technical service providers, where applicable, acting as Data Processors (e.g. hosting, maintenance, technical support). The list of Data Processors may be requested from the Data Controller.

6) Retention Period

Data sent via contacts/forms: retained for the time necessary to handle the request.
Browsing/log data: generally retained for 60 days, unless exceptions indicated above.

7) Rights of the Data Subject

The data subject can exercise the rights provided by Articles 15 et seq. of the GDPR (access, rectification, erasure, restriction, objection, portability, where applicable) by contacting the Controller at ufficio.protocollo@comune.tirano.so.it or by writing to Comune di Tirano – Piazza Cavour, 18 – 23037 Tirano (SO).

It is also possible to lodge a complaint with the Data Protection Authority, if the conditions are met.