Privacy Policy

Privacy Policy

Privacy Policy

How We Protect Your Personal Data and Respect Your Privacy

This privacy policy describes how we collect, use, and protect the personal data of users who interact with our website. We process data in compliance with the General Data Protection Regulation (GDPR) and applicable regulations, ensuring transparency and security. For more details on data processing methods and user rights, please read the following sections carefully.


Data Controller

Salvatore Mazzone
Corso Padre Pio, 33
82020 Pietrelcina (BN),Italy
Data Controller’s email address: info@comune.pietrelcina.bn.it

Personal Data Collected

The Personal Data collected by this Website, either independently or through third parties, includes: Tracking Tools; usage data; email; first name; last name; phone number; unique device identifiers for advertising (e.g., Google Advertiser ID or IDFA); number of users; city; device information; session statistics; latitude (of the city); longitude (of the city); browser information; data communicated while using the service; answers to questions; user-generated content; message or email content; profile picture; message date; time the message was sent; message sender; IP address.

Full details on each type of Personal Data collected are provided in the specific sections of this privacy policy or by specific information texts displayed before the data is collected.

Personal Data may be freely provided by the User or, in the case of usage data, collected automatically during the use of this Website.

Unless otherwise specified, all Data requested by this Website is mandatory. If the User refuses to provide them, it may be impossible for this Website to provide the Service. Where this Website specifically states that some Data is not mandatory, Users are free to refrain from communicating such Data without consequences to the availability or operation of the Service.

Users who are unsure about which Personal Data is mandatory are welcome to contact the Data Controller.

The use of Cookies – or other tracking tools – by this Website or by the owners of third-party services used by this Website is intended to provide the Service requested by the User, in addition to the other purposes described in this document and in the Cookie Policy.

The User assumes responsibility for Personal Data of third parties published or shared through this Website.

Methods and Place of Data Processing

Processing Methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

Data processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes. In addition to the Data Controller, in some cases, other subjects involved in the operation of this Website (administrative, sales, marketing, legal staff, system administrators) or external parties (such as third-party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) may have access to the Data. If necessary, these parties may be appointed as Data Processors by the Data Controller. An updated list of these parties can be requested from the Data Controller at any time.

Place

The Data is processed at the Data Controller’s operating offices and in any other places where the parties involved in the processing are located. For more information, please contact the Data Controller.

The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information about the place of processing, the User can refer to the section detailing the processing of Personal Data.

Retention Period

Unless otherwise stated in this document, Personal Data is processed and stored for as long as required by the purpose for which it was collected and may be retained for a longer period due to legal obligations or based on the User’s consent.

Purpose of the Data Collected

User Data is collected to allow the Data Controller to provide the Service, fulfill legal obligations, respond to enforcement requests, protect its rights and interests (or those of Users or third parties), detect any malicious or fraudulent activity, and for the following purposes: Analytics, SPAM protection, Contacting the User, Displaying content from external platforms, Tag management, Advertising, A/B testing, Interaction with live chat platforms, Registration and authentication provided directly by this Website, Website creation and management, Managing support and contact requests, and Collecting privacy preferences.

For detailed information on the purposes of processing and the Personal Data processed for each purpose, Users can refer to the section “Details on the processing of Personal Data.”

Details on the Processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Contact Form (this Website)

By filling in the contact form with their Data, the User authorizes this Website to use such information to respond to requests for information, quotes, or any other kind of request indicated in the form’s header.

Personal Data processed: last name; email; first name; phone number.

Tag Management

This type of service helps the owner manage the tags or scripts used on this Website in a centralized fashion.

The use of these services involves the flow of the User's Data through them and, if applicable, their retention.

Google Tag Manager (Google Ireland Limited)

Google Tag Manager is a tag management service provided by Google Ireland Limited.

Personal Data processed: Tracking Tools.
Place of processing: Ireland – Privacy Policy.

Google reCAPTCHA (Google Ireland Limited)

This site uses Google reCAPTCHA to protect forms and pages from spam and abuse. This service analyzes user behavior to distinguish between humans and bots. The data collected may include IP address, browser information, cookies, user interactions with the page, and mouse movements, and may be shared with Google.

Personal Data processed: IP address, usage data, tracking tools.
Place of processing: Ireland – Privacy Policy.

The use of reCAPTCHA is subject to Google’s Terms of Service and Privacy Policy. If you do not wish this data to be collected, avoid interacting with forms protected by reCAPTCHA.

Analytics

The services in this section allow the Data Controller to monitor and analyze web traffic and track User behavior.

Google Analytics (Universal Analytics) (Google Ireland Limited)

Google Analytics (Universal Analytics) is a web analysis service provided by Google Ireland Limited ("Google"). Google uses the collected Personal Data to track and examine the use of this Website, to compile reports, and to share them with other Google services. Google may use the collected Personal Data to contextualize and personalize ads on its advertising network. To understand how Google uses data, please refer to Google’s Partner Policy.

Personal Data processed: Usage data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.

Google Analytics (Universal Analytics) with IP Anonymization (Google Ireland Limited)

Google Analytics (Universal Analytics) is a web analytics service provided by Google Ireland Limited (“Google”). Google uses the Personal Data collected to track and examine the use of this Website, compile reports, and share them with other Google services. Google may use the Personal Data to contextualize and personalize the ads of its own advertising network. This integration of Google Analytics anonymizes your IP address. The anonymization takes place by shortening the User's IP address within the member states of the European Union or in other countries that are part of the European Economic Area agreement. Only in exceptional cases will the IP address be sent to Google's servers and shortened within the United States. For more information on how Google uses data, please consult the Google Partner Policy.

Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.

Google Analytics Demographics and Interest Reports (Google Ireland Limited)

This is an advertising reporting feature that makes demographic and interest data available within Google Analytics for this Website (demographic data refers to age and gender information). Users can opt out of Google's cookie usage by visiting Google Ad Settings.

Personal Data processed: Unique device identifiers for advertising (e.g., Google Advertiser ID or IDFA); Tracking Tools.
Place of processing: Ireland – Privacy Policy.

Google Analytics for Firebase (Google Ireland Limited)

Google Analytics for Firebase, or Firebase Analytics, is an analytics service provided by Google Ireland Limited. For details on how Google uses data, please refer to the Google Partner Policy. Firebase Analytics may share data with other Firebase services such as Crash Reporting, Authentication, Remote Config, or Notifications. The User can consult this privacy policy for a detailed description of the other tools used by the Controller. To enable Firebase Analytics functionality, this Website uses some mobile device identifiers or technologies similar to cookies. Users can opt out of certain Firebase features via their mobile device settings. For example, they may modify advertising settings on their phone or follow the applicable instructions for Firebase provided in this privacy policy.

Personal Data processed: Tracking Tools.
Place of processing: Ireland – Privacy Policy.

Google Analytics 4 (Google Ireland Limited)

Google Analytics is a statistics service provided by Google Ireland Limited ("Google"). Google uses the collected Personal Data to track and examine the use of this Website, compile reports, and share them with other Google services. Google may use the Personal Data to contextualize and personalize ads on its advertising network. In Google Analytics 4, IP addresses are used at collection time and then deleted before any data is recorded in any data center or server. For more information on how Google uses data, please refer to the Google Partner Policy.

Personal Data processed: City; browser information; device information; city latitude; city longitude; number of Users; session statistics; Tracking Tools.
Place of processing: Ireland – Privacy Policy.

Google Analytics Advertising Reporting Features (Google Ireland Limited)

Google Analytics on this Website has enabled advertising reporting features, which collect additional information from the DoubleClick cookie (web activity) and from the advertising IDs of devices (app activity). This allows the Controller to analyze specific data related to User behavior and interests (traffic data and interaction data with ads), and, if enabled, demographic data (information about age and gender). Users can opt out of Google's cookie usage by visiting Google Ad Settings.

Personal Data processed: Unique device identifiers for advertising (e.g., Google Advertiser ID or IDFA); Tracking Tools; various types of Data as specified in the service’s privacy policy.
Place of processing: Ireland – Privacy Policy.

Displaying Content from External Platforms

This type of service allows you to view content hosted on external platforms directly from the pages of this Website and to interact with them.

Even if Users do not use the service, it may collect web traffic data relating to the pages in which it is installed.

Google Maps Widget (Google Ireland Limited)

Google Maps is a map visualization service provided by Google Ireland Limited that allows this Website to incorporate such content into its pages.

Personal Data processed: Usage Data; Tracking Tools.
Place of processing: Ireland – Privacy Policy.

YouTube Embed (Google Ireland Limited)

This site embeds videos via the YouTube service, managed by Google Ireland Limited. The integration of YouTube allows users to view videos directly from the site’s pages and interact with them. Even without interaction, YouTube may collect personal browsing data such as IP address, device information, and tracking tools for purposes like analytics and ad personalization.

Personal Data processed: Usage Data; Tracking Tools; IP address.
Place of processing: Ireland – Privacy Policy.

If you do not wish YouTube to collect your data, you can configure your preferences via the cookie banner or disable multimedia content from your browser settings.

Information on How to Opt Out of Interest-Based Advertising

In addition to any opt-out functionality provided by the services listed in this document, Users can learn more about how to disable interest-based advertising in the appropriate section of the Cookie Policy.

Additional Information for Users

Legal Basis for Processing

The Data Controller processes Personal Data relating to the User if one of the following conditions applies:

  • The User has given consent for one or more specific purposes.
  • Processing is necessary for the performance of a contract with the User and/or for any pre-contractual obligations.
  • Processing is necessary to comply with a legal obligation to which the Controller is subject.
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
  • Processing is necessary for the purposes of the legitimate interests pursued by the Controller or by a third party.

In any case, the Controller will gladly help clarify the specific legal basis that applies to the processing, and whether the provision of Personal Data is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

Additional Information on Data Retention Period

Unless otherwise specified in this document, Personal Data is processed and retained for as long as required by the purpose for which it was collected, and it may be retained for a longer period due to legal obligations or based on the User’s consent.

Therefore:

  • Personal Data collected for the performance of a contract between the Controller and the User will be retained until the contract has been fully executed.
  • Personal Data collected for the legitimate interest of the Controller will be retained as long as needed to fulfill that interest. Users may obtain further information regarding the legitimate interest pursued by the Controller in the relevant sections of this document or by contacting the Controller.
  • When processing is based on the User’s consent, the Controller may retain the Personal Data for a longer period until that consent is revoked. Additionally, the Controller may be required to retain Personal Data for a longer period to comply with legal obligations or by order of an authority.

Once the retention period expires, Personal Data will be deleted. Therefore, after this period, the rights of access, deletion, rectification, and data portability can no longer be exercised.

User Rights Under the General Data Protection Regulation (GDPR)

Users may exercise certain rights regarding their Data processed by the Controller.

In particular, to the extent permitted by law, Users have the right to:

  • Withdraw consent at any time. Users can withdraw previously given consent to the processing of their Personal Data.
  • Object to the processing of their Data. Users can object to the processing of their Data when it is carried out on a legal basis other than consent.
  • Access their Data. Users have the right to obtain information about the Data processed by the Controller and receive a copy of the processed Data.
  • Verify and request rectification. Users can verify the accuracy of their Data and request updates or corrections.
  • Obtain restriction of processing. Users can request the restriction of the processing of their Data. In this case, the Controller will not process the Data for any purpose other than storage.
  • Obtain deletion or removal of their Personal Data. Users may request that the Controller delete their Data.
  • Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used, and machine-readable format and, if technically feasible, to have it transferred to another controller without hindrance.
  • Lodge a complaint. Users may file a complaint with the competent data protection authority or take legal action.

Users also have the right to obtain information regarding the legal basis for Data transfers to countries outside the EU or to international organizations such as the UN, and about the security measures adopted by the Controller to protect their Data.

Details on the Right to Object

Where Personal Data is processed in the public interest, in the exercise of official authority vested in the Controller, or for the purposes of the legitimate interests pursued by the Controller, Users may object to such processing for reasons related to their particular situation.

Users are reminded that, where their Data is processed for direct marketing purposes, they may object to that processing at any time, free of charge and without providing any justification. If a User objects to processing for direct marketing purposes, the Personal Data will no longer be processed for such purposes. To determine whether the Controller is processing Data for direct marketing purposes, Users may refer to the relevant sections of this document.

How to Exercise These Rights

To exercise their rights, Users may submit a request to the contact details of the Controller provided in this document. Requests are free of charge and will be answered by the Controller as soon as possible, and always within one month, providing all legally required information. Any rectification, deletion, or restriction of processing will be communicated by the Controller to each recipient, if any, to whom the Personal Data has been disclosed, unless this proves impossible or involves a disproportionate effort. The Controller will inform the User of such recipients upon request.

Additional Information About Data Processing

Legal Defense

The User's Personal Data may be used by the Controller in legal proceedings or in the stages leading to possible legal action arising from improper use of this Website or the related Services by the User.

The User declares to be aware that the Controller may be required to disclose Personal Data upon request of public authorities.

Specific Information

Upon the User’s request, in addition to the information contained in this privacy policy, this Website may provide Users with additional and contextual information regarding specific Services or the collection and processing of Personal Data.

System Logs and Maintenance

For operation and maintenance purposes, this Website and any third-party services it uses may collect system logs, which are files that record interactions and may also contain Personal Data, such as the User’s IP address.

Information Not Contained in This Policy

More details concerning the processing of Personal Data may be requested from the Controller at any time using the contact details provided.

Mobile App Data Processing (iOS and Android)

The Enjoy Pietrelcina mobile app, available for iOS and Android devices, collects and processes certain Personal Data to offer personalized features and improve user experience.

Types of Data Processed:

  • Geolocation: With the user’s explicit consent, used to suggest nearby events, tourist attractions, restaurants, and accommodations.
  • Registration/Login: Users can register or log in to save favorites. Data collected includes: First Name (required), Last Name (required), Gender (optional).
  • Device Identifiers: Unique device IDs are collected to send push notifications.
  • Push Notifications: Sent via Apple Push Notification Service (APNs) for iOS and Firebase Cloud Messaging (FCM) for Android.
  • Maps: The app integrates Google Maps to display location and markers for events, places, and facilities.

Purpose of Processing:

  • Suggest personalized content based on user location
  • Enable account registration and manage saved favorites
  • Display interactive maps and points of interest
  • Send informational and promotional notifications with user consent
  • Monitor app performance and stability

Legal Basis:

  • Consent: for geolocation, push notifications, processing gender, and use of device identifiers
  • Service execution: for registration and managing favorites
  • Legitimate interest of the Controller: to ensure security, stability, and content updates

Data Retention:

Data is retained only for as long as necessary to provide the service or until the user withdraws consent. If the app is uninstalled or the account is deleted, personal data will be erased within 30 days unless legal obligations require otherwise.

External Services Used:

  • Google Maps SDK: for displaying maps
  • Firebase Cloud Messaging (FCM): for sending push notifications on Android
  • Apple Push Notification Service (APNs): for notifications on iOS

For more information on Google’s data processing, please refer to their Privacy Policy.

Changes to This Privacy Policy

The Data Controller reserves the right to make changes to this privacy policy at any time by notifying Users on this page and, if possible, on this Website and/or—where technically and legally feasible—by sending a notification to Users via one of the contact methods held. Please check this page frequently, referring to the date of the last modification shown at the bottom.

If the changes affect processing activities based on the User's consent, the Controller will collect new consent from the User where required.