This page describes the processing methods the site uses for processing the personal data of the site’s users. This information is also provided pursuant to art. 13 of Legislative Decree 196/2003, ‘Civil code regarding the protection of personal data’, for those who interact with the site for the protection of personal data electronically accessible from the address and not for other websites that are accessible from links.

Owner of the processing, internal managers and third parties and categories of appointees
Following a visit to this site, data related to identified or identifiable persons may be processed. The owner of this processing is the Council of the Lombardy Region, in the person of its legal representative. The data processing manager for the Lombardy Region is the acting General Manager of Economic Development Senior Management; the external processing manager is Unioncamere Lombardia in the person of its acting legal representative. In addition to the employees of the Lombardy Region, this data is processed by employees of the implementing party, Unioncamere Lombardia, and by other parties specially charged by the latter with the performance of management and maintenance activities for its computer systems.

In this case, the parties will be assigned as Managers or Employees for processing. Unioncamere Lombardia will provide appropriate operating instructions to these Managers or Employees, if assigned, with special reference to the adoption of minimal security measures in order to ensure the confidentiality and security of the data.
The data may also be communicated, if requested, to the competent authorities, in fulfilment of obligations deriving from unavoidable legal requirements.

Location of data processing
The processing related to the web services on this site take place at the Lombardy Region. No data deriving from the web service will be communicated or distributed, except in cases expressly provided for by law. The personal data provided by users is used only for the purposes of performing the service requested and are communicated to third parties only as necessary to do so.

Types of data processed
Navigation data - The computer systems and software processes used for the functioning of this website will, during the course of their normal operation, collect some personal data, the transmission of which is implicit in the use of Internet communications protocols.
This is information that is not collected in order to be associated with identified parties, but that by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by the users who connect to the website, addresses in URI (Uniform Resource Identifier) notation for the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.
This data is only used to obtain anonymous statistical information about site usage and to monitor its proper functioning and are kept for the shortest period required by the regulations in force. The data may be used to determine responsibility in case of any computer crimes that damage the site.

Data voluntarily provided by the user - The optional or explicit and voluntary sending of email to addresses listed on this site entail the necessary acquisition of the sender’s email address, which is necessary for responding to requests, as well as any other personal data provided in the message. This excludes the processing of sensitive and legal data which, if provided by the user, will be deleted.

Cookie Policy - For information related to the cookies used on this portal, please see our specific Cookie Policy.

Voluntary data provision
Aside from what is specified for navigation data, the user is free to provide personal data in the registration forms for services on the site or, in any case, indicated in telephone contacts with the responsible facilities. A failure to provide this data may result in our inability to fulfil the request.

How to withdraw your consent

To withdraw specific consent related to electronic communications (institutional or customer satisfaction communications, etc.) granted with the act of requesting the various services performed through the Lombardy Region’s portal, contact the data processing owner at the address provided for exercising your rights under art. 7 of L.D. 196/2003 set forth in the next section of this information statement.
Furthermore, with reference to individual newsletter services, it is possible to cancel your subscription using the links provided at the bottom of the emails used to send those newsletters.

Your rights
You can exercise your rights at any time as provided by art. 7 of the Privacy Code, including obtaining the confirmation of the existence of data regarding you and asking for its source; obtaining the updated list of managers; verifying the accuracy of this data, asking for its correction, updating or consolidation or its deletion or stopping any processing in violation of the law or denying its use for legitimate reasons to be highlighted in the request, by contacting the data processing owner at this email address: