Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (General Data Protection Regulation), Legislative Decree no. 196 of June 30, 2003, as amended by Legislative Decree no. 101 of August 10, 2018, and Regional Resolution no. 466 of July 17, 2018, we inform users about the processing of their personal data when interacting with the website www.campaniartecard.it, owned by Scabec SpA (hereinafter referred to as “the Site”), their rights, and how to exercise them.

This information does not apply to other websites, pages, or online services that may be linked to the Site but refer to external resources.

DATA CONTROLLER
Personal data of identified or identifiable individuals may be processed following access to the Site. The Data Controller is Scabec SpA, with registered office at Via Generale Giordano Orsini 30 – 80132 – Naples. Your data will be processed according to principles of lawfulness, fairness, transparency, security, and confidentiality, mainly using non-automated methods in compliance with Article 32 of EU Regulation 2016/679, by authorized personnel and in accordance with Article 29 of the same Regulation.

DATA PROTECTION OFFICER
Scabec SpA has appointed Dr. Maurizio D’Amico as its Data Protection Officer (DPO), who can be contacted at: tel. +39 081 5624561 – email: mdamico@scabec.it

PURPOSE AND LEGAL BASIS FOR PROCESSING
Personal data are processed by Scabec SpA in the execution of its tasks of public interest or related to the exercise of public authority, including the management and protection of cultural heritage and associated communication activities. Personal data provided by you are processed to enable Site functionalities or to respond to your requests, such as newsletter subscriptions or other inquiries.

Should the Data Controller intend to process personal data for purposes other than those for which they were collected, you will be informed in advance of the new purpose and any additional relevant information.

TYPES OF DATA PROCESSED AND PURPOSES

Browsing Data

During normal operation, the Site’s IT systems collect certain personal data whose transmission is implicit in Internet communication protocols. These data are not collected to identify users but may allow user identification through associations with data held by third parties. Examples include IP addresses, URI notation addresses, request times, server request methods, response file sizes, and error codes. These are used solely for statistical purposes and system checks, and deleted shortly thereafter. Such data may also be used to investigate potential cybercrimes.

Data Provided by Users

Voluntary and explicit submission of messages to the Site’s contact addresses, social media channels, or form submissions may lead to the acquisition of personal data. Specific privacy notices are provided on pages that deliver specific services.

Cookies

This Site uses technical cookies, which do not require user consent under Article 122 of the Privacy Code and the Italian Data Protection Authority's provision dated May 8, 2014. Scabec may use profiling data to manage Campania Artecard services. Cookies are used only as necessary for secure and efficient site navigation. For more, see the Cookie Policy.

DATA LOCATION, PROCESSING METHODS, AND RECIPIENTS
Personal data are processed at the Data Controller’s or Data Processor’s offices using automated tools for the time necessary to achieve the stated purposes, in compliance with confidentiality and security standards. Specific technical and organizational security measures are adopted. Only authorized staff or designated Data Processors handle personal data. No personal data from the Site is disclosed. Data may be shared with authorized personnel or other public/private entities only where legally required or necessary to fulfill your request.

DATA RETENTION PERIOD
Personal data will be retained in accordance with legal obligations (e.g., browsing data). Newsletter or mailing list data will be processed until users request deletion. For services resulting from contracts with Scabec SpA, data may be retained for the contract duration and 10 years thereafter. In case of legal proceedings, only necessary personal data will be processed for the time needed to pursue legal purposes.

DATA SUBJECT RIGHTS
Under applicable laws, you have the right to: access your data; request data transfer; request correction or deletion of inaccurate/incomplete data; request restriction of processing or deletion of data no longer needed. Specifically, you have the rights under Articles 15 (Access), 16 (Rectification), 17 (Erasure), 18 (Restriction), 20 (Data Portability), and 21 (Objection) of the EU Regulation 2016/679. Requests may be addressed to the DPO. You may also file complaints with the Italian Data Protection Authority: https://www.garanteprivacy.it.