Privacy Policy APP CARIGOGREEN

Dear user,
We wish to inform you that the Cassa di Risparmio di Gorizia Foundation, as owner of the processing of personal data (hereinafter the "manager"), considers the confidentiality and protection of personal data one of the main objectives of its operation in compliance with the provisions of the law. of the European Union Regulation. 2016/679 (GDPR). This privacy policy, drawn up pursuant to Article 13 of the GDPR, is intended for this CARIGOGREEN mobile application (hereinafter: the "Application").

1. Data controller
Identification details of the Data Controller: the Data Controller is Fondazione Cassa di Risparmio di Gorizia with headquarters in via Carducci, 2 – 34170 Gorizia (GO). The Personal Data Protection Officer can be contacted at: dpo@fondazionecarigo.it. The personal data you provide may be processed by the Data Controller's employees or collaborators, duly authorized for processing as required by the GDPR. It will be the Data Controller's responsibility to give them specific instructions for correct data processing.

2. The data being processed
2.1 Device data

The software necessary for the operation of this App acquires, during its normal operation, some data whose transmission is implicit in the use of Internet communication protocols. The data collected is processed pseudonymously and it is therefore impossible to trace the identity of the User using the App. This category includes data useful for the operation of the app itself and the use of the features present therein:
  • Device ID: unique identifier for the device
  • Information regarding the operating system present on the device
  • Information regarding the model of the device on which the App is installed
2.2 Usage data
The App, during its normal operation, saves some data in a specific environment of the local memory of the user phone (called "sandbox"). This category of data includes:
  • Data relating to the geolocation of the device
  • Data relating to the time of use of the App
  • Information relating to the operation of the app (log): this data is saved for the sole purpose of obtaining anonymous diagnostic information on the use of the App and to check its correct functioning. The logs may be provided by the User to the Owner voluntarily, through a dedicated function within the App, which allows the transfer of log data from the device to the Owner.

3. Purpose of the Processing
The data collected by the App is necessary for the correct functioning of the App and for the use of all the features offered in it.

4.Retention time of collected data
Device data is saved indefinitely. The data saved in the phone's local memory is saved until the App is uninstalled: upon uninstallation, the folder used to save the data locally is deleted.

5. Data sharing with third parties 
The data will not be communicated to third parties other than those strictly necessary for carrying out the activities described above and with whom the Foundation has a specific contractual relationship in place which involves them as Data Controllers. 

6. Exercise of the rights of the interested party
In compliance with the provisions of the Regulation, as an interested party, you will be able to exercise the rights provided for by the articles towards the Foundation. from 15 to 21 and by art. 13, that is:
  • request the Data Controller to access, rectify and delete personal data;
  • updating or, when interested, integrating data;
  • the transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
  • request the limitation of the processing of data concerning him or to oppose their processing;
  • exercise your right to data portability.
Finally, we remind you that if you believe that the processing of your personal data is in violation of the provisions of the Regulation, you have the right to lodge a complaint with the Guarantor, as provided for by the art. 77 of the Regulation itself, or to take action in the appropriate judicial offices (art. 79 of the Regulation).