Privacy Policy

Privacy Notice pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR)

Parco Nazionale dell’Asinara – Marine Protected Area “Isola dell’Asinara” provides below the essential information on the processing of personal data of users who visit the institutional website and use the available digital services.

Categories of data processed

The Controller processes:

• browsing data (e.g. IP addresses, technical logs, data relating to interactions with the pages);
• identification and contact data voluntarily provided by the user through online forms and services;
• data necessary for the provision of the digital services requested by the user.

Purposes and legal bases of the processing

Personal data are processed for:

1. Operation of the website and of the digital services In performance of the tasks carried out in the public interest assigned to the Authority (Art. 6(1)(e) GDPR).
2. Compliance with legal obligations Connected with the institutional activities of the Park (Art. 6(1)(c) GDPR).
3. Management of communications and user requests Within the institutional functions of the Authority (Art. 6(1)(e) GDPR). The user’s consent is not required.
4. Activation of the newsletter service Of an informative nature concerning services, activities, events, seminars or training courses. The legal basis is the consent of the data subject (Art. 6(1)(a) GDPR).

Obligation to provide data

Failure to provide the data marked with an asterisk (*) in the online forms prevents the provision of the requested service.

Retention period

Personal data are retained:

• for the time necessary to provide the requested service and in accordance with the retention/disposal schedules indicated in the Authority’s Register of Processing Activities (Art. 30 GDPR);
• thereafter, in accordance with the periods established by the legislation on the retention of administrative records and by the Authority’s internal regulations.

Transfer of data to third countries

Data are not transferred to third countries. Any transfers, should they be necessary, will take place in compliance with Articles 44 to 49 GDPR.

Disclosure of data to third parties

Personal data may be disclosed exclusively to:

• staff authorised by the Controller;
• ICT service providers responsible for the technical management of the website;
• other public bodies in the cases provided for by law.

Personal data are not disseminated.

Rights of the data subject

The data subject may exercise the rights provided for by Articles 15 et seq. GDPR, including:

• obtaining information on the processing;
• accessing their personal data;
• requesting rectification or erasure;
• requesting restriction of processing;
• objecting to the processing.

Where the processing is based on consent, the data subject has the right to withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal. Activation of the newsletter service constitutes processing based on consent pursuant to Art. 6(1)(a) GDPR.

The data subject may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

Requests concerning the exercise of these rights may be sent to the contact details of the Controller or of the DPO.

Data Controller

Parco Nazionale dell’Asinara – Marine Protected Area “Isola dell’Asinara” Via Ponte Romano 81, 07046 Porto Torres (SS) Email: enteparcoasinara@pec.it

Data Protection Officer (DPO)

Dott.ssa Alessandra Conte Dedicated email: parco@asinara.org

Extended privacy notice

For more detailed information on the processing of data relating to specific services or administrative procedures, the Extended Privacy Notice published on the institutional website is available.

Update

Notice updated on 30/04/2026.