Information on Processing of Personal Data

This page describes how the site is managed with regard to the processing of personal data of users who consult it. It constitutes information provided pursuant to Art. 13 of EU Regulation 2016/679 (GDPR) and Art. 13 of Legislative Decree no. 196/2003 - (Personal Data Protection Code) to those who interact with the website services.

This information is provided only for the www.cospas-sarsat-italy.it website and not for any other sites that may be consulted via links that may be present.

1. Owner of the Treatment
Following consultation of this site, data relating to identified or identifiable persons may be processed.
The 'owner' of their processing is Stazione Satellitare Italiana Cospas Sarsat - Lungomare Starita, 5 - 70132 Bari.

2. Location of Data Processing
The processing operations connected to the web services of this site take place at Stazione Satellitare Italiana Cospas Sarsat - Lungomare Starita, 5 - 70132 Bari and are carried out only by personnel authorised to process data, under the direct authority of the owner, in order to perform maintenance operations on the site itself.

3. Purpose and Retention of Data
Personal data provided by users are used for the sole purpose of performing the web services on the site and to possibly receive information material (annual reports, acts and measures, etc.). The data will only be disclosed to third parties if this is necessary to provide the aforementioned services and to perform website maintenance operations.

4. Data Retention Period
No data resulting from the web service is communicated or disseminated, except in cases expressly provided for by law. The personal data provided by users will be retained for as long as they use the service. After the request for deletion from the service, the data shall be retained for a further period of 30 days. After this period, the data shall be permanently deleted.

5. Types of Data Processed
The only data processed on this site are navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server and other parameters relating to the user's operating system and computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning, and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the website: except for this possibility, at present the data on web contacts do not persist for more than a few days.

6. Data Voluntarily Provided by the User
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender's address, which is necessary to reply to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request.

7. Sending data via registration to the National Transmitter Database 406Mhz
Pursuant to art. 13 of EU Regulation 2016/679 (GDPR) and art. 13 of Legislative Decree no. 196/2003, the user is informed that sending data by registering with the National Transmitter Database 406 Mhz constitutes consent to their processing for the purpose of search and rescue activities. Therefore, in the event of activation of the transmitter, the data may be transferred to national and international authorities in charge of rescue, depending on their territorial competence with respect to the position of the transmitter.

8. Informational Cookies
This document, pursuant to Article 13 of the GDPR of Articles 13 and 122 of Legislative Decree 196/2003 and following the simplified procedures for the provision of information and acquisition of consent for the use of cookies, published in the Official Gazette No. 126 of 3 June 2014 and provided for in the general provision of the Privacy Guarantor of 8 May 2014, provides visitors with information on what cookies are, how they are used and how to manage them.

Cookies are small text strings that sites visited by the user send to the user's terminal (usually to the browser), where they are stored and then transmitted back to the same sites the next time the same user visits.

Cookies are portions of code installed inside the browser that assist the Controller in providing the service according to the purposes described, some of the purposes for which cookies are installed may also require the user's consent.

Only so-called "technical" cookies are used on this website for the sole purpose of "carrying out the transmission of a communication on an electronic communication network, or to the extent strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide such a service" (cf. art. 122, paragraph 1 of Legislative Decree 196/2003). So-called "profiling" cookies are not used (aimed at creating profiles of the user and are used in order to send advertising messages in line with the preferences expressed by the user while surfing the web). The site does not allow the sending of "third-party" cookies (installed by a different site through our site).
The use of so-called "session" cookies (that are not persistently stored on the user's computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (made up of random numbers generated by the server) necessary to allow a safe and efficient exploration of the site. The so-called session cookies used in this site avoid the use of other IT techniques potentially prejudicial to the confidentiality of users' browsing and do not allow the acquisition of personal data identifying the user. The user may at any time and at his or her discretion prevent the use of cookies by modifying the browser options.
Analytical' cookies (which are used to monitor the use of the site by users for the purpose of optimising the site) are used exclusively to collect information, in aggregate form, on the number of users and how they visit the site. The aforementioned cookies are created and used directly by this website, without the intervention of third parties.

9. Optionality of Data Submission
Apart from what is specified for navigation data, the user is free to provide the personal data indicated in the electronic request forms, in the sections of the website set up for particular services on request. Failure to provide them may make it impossible to obtain what has been requested.

10. Method of Treatment
Personal data are processed by automated means and not for as long as is strictly necessary to achieve the purposes for which they were collected. The necessary technical and organisational measures are taken to ensure, for the processing concerned, the implementation of existing legislation and that additional information for the attribution of personal data to a specific data subject is stored separately. The controller who processes personal data should indicate the authorised persons within the controller.
Specific security measures are observed to prevent loss of data, unlawful or incorrect use and unauthorised access.
Any designated data processors or appointees will receive adequate operational instructions, with particular reference to the adoption of minimum security measures, in order to be able to guarantee the confidentiality and security of the data. A detailed list of the aforementioned persons is available from the data controller.

11. Right to Complain
If a data subject considers that the processing of personal data relating to him or her is in breach of the GDPR, he or she has the right to lodge a complaint with a supervisory authority, namely the Member State in which he or she normally resides, works or where the alleged breach occurred.

12. Rights of interested parties
Data subjects have the right at any time to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed and, if so, to obtain: the right to withdraw consent to the processing of personal data (Art. 7 para. 3 GDPR) access to personal data and the information contained therein (Art. 15 GDPR), the right to rectification (Art. 16 GDPR), the right to erasure (Art.17 GDPR), the right to restriction of processing (Art. 18 GDPR), the right to personal data portability (Art. 20 GDPR) and the right to object (Art. 21 GDPR).

Pursuant to Art. 37 para. 7 GDPR we provide the contact details of the Data Protection Officer (DPO):
C.F. (CP) Giuseppe PASQUINO
email: director@cospas-sarsat-italy.it
whom you can contact in order to exercise the aforementioned rights, according to the modalities of Article 12 GDPR, and/or any clarifications regarding the protection of personal data.