1. Data Controller
The Data Controller is:
Legal entity name: Comune di Cassano d’Adda
Registered office: P.za Giacomo Matteotti, 1, 20062 Cassano d’Adda (MI), Italy
Tax Code: 03674570159
VAT number: IT03674570159
Email: info@comune.cassanodadda.mi.it
Certified email (PEC): protocollo@comune.cassanodadda.mi.legalmail.it
Phone: +39 0363 366 011
2. Types of Data Processed
The website may process the following categories of data:
a) Browsing data
The IT systems and software procedures used to operate the website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses, technical logs).
Such data are used solely for the purpose of obtaining anonymous statistical information and ensuring the proper functioning of the website.
b) Data voluntarily provided by the user
If contact forms, sponsorship requests or other communication tools are activated, personal data may be processed, including:
- first and last name
- email address
- phone number
- company name
- any other data voluntarily entered in the form
3. Purpose of Processing
Personal data are processed for the following purposes:
- management and operation of the institutional website
- handling requests submitted through any available forms
- organisation and promotion of events related to Stage 17 of the Giro d’Italia 2026
- compliance with legal obligations
4. Legal Basis for Processing
Processing is based on:
- the performance of a task carried out in the public interest (Art. 6(1)(e) of Regulation (EU) 2016/679)
- the data subject’s consent, where required
5. Methods of Processing
Data are processed using IT and telematic tools, in compliance with the principles of lawfulness, fairness, transparency and protection of confidentiality.
Appropriate technical and organisational measures are adopted to ensure data security.
6. Communication and Disclosure of Data
Data may be processed by:
- authorised personnel of the Municipality
- IT service and hosting providers
- entities entrusted with the technical management of the website
Data will not be disclosed.
7. Third-Party Services
The website may integrate external content (e.g. videos embedded via YouTube).
In such cases, interaction with these services may result in the collection of data by the respective providers, in accordance with their own privacy policies.
Users are therefore encouraged to consult the privacy policies of the individual services.
8. Data Retention Period
Data will be retained for the time strictly necessary to achieve the purposes for which they are collected and in compliance with legal obligations.
9. Data Subject Rights
Data subjects may exercise at any time the rights provided for in Articles 15–22 of Regulation (EU) 2016/679, including:
- right of access
- right to rectification or erasure
- right to restriction of processing
- right to object
- right to data portability
Requests may be sent to the Data Controller using the contact details provided above.
10. Updates
This Privacy Notice may be subject to updates. Users are invited to periodically review this page.