Pursuant to Legislative Decree 196/2003 and GDPR 679/2016 regarding the processing of personal data, the following is communicated:
The processing of personal data will be carried out in accordance with the principles of fairness, lawfulness, transparency, and the protection of your privacy and your rights, as indicated by the aforementioned legislation. Pursuant to Article 13 of GDPR 2016/679, we therefore provide you with the following information.
Data controller, data processing officers, and data protection officer
The data controller of personal data is Cistite.info APS with registered office in Bolzano Via Parma, 1/C, Italy.
The person responsible for the processing of personal data provided during registration on the forum (https://cistite.info/forum), newsletter subscription (https://cistite.info/list/?p=subscribe), donation submission, and/or membership application is the President of Cistite.info APS, to whom you may turn to exercise the rights under Article 12 and/or for any clarifications regarding the protection of personal data. They can be reached at the following address: cistite.info@pec.it
Types of data collected
Personal data (first name, last name, email address, residential address, place and date of birth, Tax Code, etc.) will be provided at the time of applying for membership in the Association, or during registration on the forum (https://cistite.info/forum), newsletter subscription (https://cistite.info/list/?p=subscribe), or when making a donation.
Purpose and methods of processing
The personal data provided will be subject to:
In relation to legal, fiscal, and statutory obligations:
- processing related to the institutional purposes carried out by the Association;
- processing aimed at enabling the associative life within the Association;
- processing related to the collection and payment of membership fees, and registration for events of any national affiliated bodies, including those arising from specific agreements made with them;
- processing aimed at fulfilling the administrative, fiscal, and accounting obligations of the Association itself (including the issuance of receipts, the production of electronic certifications, the maintenance of the Members’ register, etc. etc.).
in relation to the need to communicate the activities of the Association, the forum, and the newsletter:
- processing connected to the need to understand, for the achievement of the common statutory institutional purposes, which activities are most suitable for members/subscribers/users;
- processing connected to the need to propose the most suitable activities to members/subscribers/users;
- collection of statistical data for study and research purposes;
- to carry out the newsletter service, updating the data subject on all projects, initiatives, agreements, information, and events related to the area of competence, in any case promoted by Cistite.info APS. The newsletter service will be provided through automated tools.
in relation to the need to carry out fundraising activities as provided for in Article 7 of the Statute:
- processing during the phases connected to donations, participation in projects, and appeals promoted by the Data Controller, including other related activities (e.g., communications regarding payments, donation summaries, reporting);
- processing for the sending of informational, promotional, and fundraising communications related to the activities and initiatives of Cistite.info APS, with possible customization based on the interests and preferences expressed by participating in our initiatives.
The data provided by the data subjects will be processed mainly using IT tools under the authority of the data controller, by persons specifically appointed, authorised, and trained in data processing pursuant to Article 30 of the Privacy Code and Articles 28 and 29 of the Privacy Regulation. Appropriate security measures will be observed, also pursuant to Articles 5 and 32 of the Privacy Regulation, to prevent data loss, unlawful or incorrect use, and unauthorized access. All this is to ensure the security, integrity, and confidentiality of the data in compliance with the organisational, physical, and logical measures provided for by current regulations.
Mandatory or optional nature of data provision, consequences of any refusal, and legal basis for processing
Please be informed that, taking into account the purposes of processing as described above, the provision of data is mandatory, and any failure, partial, or incorrect provision may result in the impossibility of carrying out the activities of the Association, fulfilling the obligations provided for in the Statute, as well as accessing the forum or receiving the newsletter.
To whom and in what context the Data Controller may transfer the personal data of the Data Subjects
The personal data of the Data Subjects may be communicated within the EU, in full compliance with the provisions of the Privacy Code and the Privacy Regulation, to the following subjects:
- to public authorities, where this is required by law or at their request;
- to external structures and/or companies used by the Data Controller for fiscal, legal, IT, and social activity purposes. These subjects, to whom the personal data of the Data Subjects may be communicated (as they are not appointed in writing as Data Processors or are not joint controllers), will process the personal data of the Data Subjects as independent data controllers under the applicable legislation, acting autonomously and being separate from the original processing carried out by Cistite.info APS;
- The aforementioned data are not accessible to search engines (Google, Yahoo, Bing, etc.) and will therefore never be indexed or appear in them;
Please be informed that the member’s data and information relating to their activities are managed and stored, using appropriate procedures, on platforms that may also operate outside the national territory (including outside the EU), such as Google, Keliweb, etc.
Duration of processing
Personal data are kept for the entire duration of the membership and/or mandate and, in the event of revocation and/or any other type of termination of the relationship, for the periods prescribed in Article 2220 of the Civil Code. Notwithstanding the above, Cistite.info APS may retain certain personal data of the Data Subjects even after the request to terminate processing, exclusively to defend or assert its own rights or in cases provided for by law or by order of a judicial or administrative authority.
Rights of the data subjects
You may, at any time, exercise the following rights:
- to access personal data;
- to obtain the rectification or deletion of the data, or the restriction of processing concerning them in cases where this does not conflict with other legal provisions;
- to object to the processing;
- to object to the portability of data;
- to withdraw consent, where applicable, in cases where this does not conflict with other legal provisions: the withdrawal of consent does not affect the lawfulness of processing based on consent given before its withdrawal;
- to lodge a complaint with the supervisory authority (Privacy Guarantor);
- to confirm whether or not personal data relating to the Data Subjects exist, to verify their accuracy, or to request their update and completion;
The exercise of your rights may be carried out by sending a request via email to the address cistite.info@pec.it
Security measures
The personal data of the Data Subjects are processed in compliance with the applicable law and using appropriate security measures, in accordance with current legislation, including Articles 5 and 32 of the Privacy Regulation.
In this regard, it is confirmed, among other things, that appropriate security measures have been adopted to prevent unauthorized access, theft, disclosure, modification, or unauthorized destruction of the Data Subjects’ data.
Changes to the privacy notice
This privacy notice is subject to changes by the Data Controller; Cistite.info APS will communicate any changes to the Data Subjects by email, with at least 15 days’ notice prior to the date on which the new notice will take effect.
Forum rules and privacy
Regarding registration data, it is specified that:
- the use of a nickname allows you to maintain anonymity; it is therefore advisable not to choose your real first and last name as a nickname, but to use a fictitious name instead;
- contact data (email address) provided at the time of forum registration are not automatically published on the site along with the user’s comments;
- no health-related data are requested
- In order to establish possible treatment pathways (for example, suggestions of doctors near the user’s place of residence), the year of birth and the province of residence will be indicated on the forum, associated exclusively with the fictitious nickname chosen by the user at the time of registration.
Regarding the content posted on the forum, the user must pay particular attention to:
- what they publish in forum posts, which is freely accessible to anyone on the web;
- the appropriateness, in their posts, of including or not including personal data (email address, references to places and people) that could reveal, even indirectly, their identity;
- the appropriateness of publishing or not publishing photos or videos that may identify or make identifiable people and places;
- the possibility of including in their posts data that could reveal, even indirectly, the identity of third parties;
- content published on the forum will not be deleted in the event of an account deletion request.
It is also specified that:
- the data entered on the forum can be accessed by any user who visits the site (data retrievable through the site’s internal search functions);
- the data entered on the forum can be indexed and retrieved by general search engines (Google, etc.),
- Cistite.info APS reserves the right to republish/reuse the data entered on the forum in other media without the user’s consent;
- Cistite.info APS may at any time remove unwanted forum posts (at the sole discretion of the moderators and administrators) even without notifying the user;
- experiences published on the site may be reproduced through other means of communication for study, research, or educational/informative purposes, even without the user’s consent.
Technical and service notice
The following points are also highlighted.
- The IT systems and applications dedicated to the operation of this Site, during their normal functioning, collect certain data (the transmission of which is implicit in the use of Internet communication protocols) not associated with directly identifiable Users. Among the data collected are IP addresses and domain names of the computers used by Users connecting to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server’s response (success, error, etc.), and other parameters concerning the operating system and IT environment used by the User. These data are processed, for the strictly necessary time, solely for the purpose of obtaining anonymous statistical information on the use of the Site and to monitor its proper functioning. The “Site Administrators” shall have the right to use such data for anonymous statistical evaluations, to ensure service continuity, and to improve their website/forum. Please do not use the service if you disagree with this practice.
- The voluntary and explicit sending of emails to the addresses indicated on this Site, and the completion of specifically prepared forms, entails the subsequent collection of the sender’s/User’s address and data, necessary to respond to the requests submitted and/or provide the requested service. The data received from the user will not be stored or used in any way other than for the fulfilment of the content of the message itself.
- The Site allows access without identification/registration of the visitor. For parts or sections of the Site that may require the registration of personal data, a specific privacy notice and the related request for consent to data processing will be provided, in accordance with Legislative Decree 196 of 30 June 2003 and GDPR 679/2016.
- Part of this site uses technical cookies (non-profiling) to exchange information between the server and the user. No sensitive data is exchanged via cookies. This system allows the automation of certain operations, saving the user from complex procedures. Furthermore, it does not pose any risk to the user.
- This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies" (non-profiling), which are text files placed on your computer to allow the website to analyse how users use the site. The information generated by the cookie regarding your use of the website (including your IP address) will be transmitted to and stored on Google’s servers in the United States. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for website operators, and providing other services related to website activity and Internet usage. Google may also transfer this information to third parties where required to do so by law or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings on your browser, but this may prevent you from using all the features of this website. By using this website, you consent to the processing of your data by Google in the manner and for the purposes described above.
- CISTITE.INFO may use the email address provided by the user to send informational messages, strictly related to the site and the services offered. The user can request the cessation of these communications by visiting http://cistite.info/list/p=unsubscribe&id=1 or by writing to amministratore@cistite.info.
- CISTITE.INFO may activate any protection mechanism against spam abuse, to ensure that the consultation of the forum site and registration on the forum are actually carried out by human beings and not by software robots or similar, and to automatically verify that posts, comments, etc., considered spam are not submitted. Therefore, verification mechanisms of the IP address, email, or username may be activated, including cross-checks with other databases.
IT 
DE