Privacy notice on data processing
(art. 19, Data Protection Federal Law, dated on September 25th, 2020)
The City of Lugano, as Data Controller, processes personal data in compliance with the general principles and special provisions of Data Protection Federal Law, dated on September 25th, 2020 (LPD or nLPD), modified by the Data Protection Ordinance of August 31st, 2022 (OPDa): in compliance with the provisions of article 19 of the aforementioned Federal Law, we inform you of the following characteristics of the processing, as well as the rights that the law guarantees you.
Personal data subject to processing
The Data Controller collects and processes the following personal data:
- - Personal data of the Data Subject (name and surname);
- - Contact details (e-mail, telephone number).
Purposes pursued in the processing and legal bases
The Data Controller collects and processes the personal information of the data subject for the following purposes:
- - allow the Data Subject to register on the platform, using the services;
- - assign personal authentication credentials to the interested party, which allow him to access the reserved area;
- - manage any problems relating to access to the reserved area (for example in the event of a password reset);
- - provide assistance and support to the interested party.
The Data Controller processes the identification and contact information of the interested party also for the purposes of commercial information, relating to the services offered: the legal basis of the processing can be found in the consent of the interested party.
The legal legitimacy of the processing can be found in the execution of contractual obligations between the Parties.
Methods of processing personal data and retention periods
The personal data of data subjects is processed electronically (e.g. through the use of databases, application software). The Data Controller retains the personal information of data subjects as long as needed to meet the purposes for which they were collected and in compliance to the Law.
Internal and external scope of communication of personal data
The personal data may be disclosed to employees of the Controller who need to know it in order to manage the platform, with particular reference to administrative, IT and marketing staff. Our employees have been trained and instructed in the legal requirements for protecting personal information.
The Data Controller shares the personal data of data subjects with certain suppliers who assist the Controller in the management of the platform: if the supplier becomes aware of the data, he shall do so in compliance with the legislation in force on data protection, and with the instructions given by the Controller in the relevant deeds of appointment as External Data Processor. The Data Controller does not disclose personal information to other third parties without the consent of the data subjects, unless required to do so by law or by an Authority (e.g. where it is necessary for reasons of national security, public interest).
Transfer of data outside the EEA
Your data will not be transferred outside the Switzerland and European Economic Area.
Rights of the data subject and how to exercise them
LPD guarantees data subjects specific rights. For each processing, in particular: right of access, right to rectification, right to object to the processing of personal data for commercial purposes, right to object to decisions based on purely automated processes, right to withdraw a consent given, at any time, right to apply to the Data Protection Authority if they have doubts about the processing of personal data by the Controller. The following rights may also be exercised, subject to certain circumstances: right to erasure, right to object to processing, right to limit the processing, right to data portability.
The Data Subject may, at any time and in any manner, exercise his or her rights under the law by contacting:
Contatti:
Divisione eventi e congressi, Città di Lugano
Via Trevano 55
CH – 6900 Lugano
T.: +41 58 866 74 40 (dalla Svizzera)
E-mail: eventi@lugano.ch
The Data Controller shall take care to reply within the time limits laid down by law.