Privacy policy
This page describes how the site is managed with reference to the processing of personal data of users who consult it.
This is an information that is made pursuant to articles 7 and 13 - 22 of the GDPR 2016/679 - to those who interact with the services of the Diocese of Bergamo electronically starting from the address [site url] and corresponding to the home page.
The information is provided by the Diocese of Bergamo only for the portal [site url] and its subdomains and not for other websites that may be consulted by the user through links.
 
The "Owner" of the treatment
Following consultation of this portal, data relating to identified or identifiable persons, including their images, may be acquired. The holder of their treatment is Diocese of Bergamo - piazza Duomo, 5 - 24129 Bergamo - tel. 035278111 – C.F. 01072200163
 
Place of data processing
The treatments connected to the web services of this portal take place at the aforementioned seat of the Diocese of Bergamo and are handled by the staff in charge of the treatment, or by any persons in charge of occasional maintenance operations.
 
Types of data processed
Navigation data. During their normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used that connect to the site, the addresses in URI (Uniform Resource Identifier) ​​notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.
The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.
 
Cookies
No personal user data is acquired by the site in this regard.Cookies are not used for the transmission of personal information, nor are persistent cookies of any kind used, or systems for tracking users.
The use of session cookies used on this site avoid the use of other IT techniques that are potentially detrimental to the confidentiality of users' browsing and do not allow the acquisition of the user's personal identification data.
Cookies are portions of code installed within the browser that assist the Owner in providing the service. This site uses only technical cookies, which have the function of allowing the performance of activities strictly related to its operation:
  • Navigation cookies, through which you can save your browsing preferences and improve the User's browsing experience;
  • Analytics cookies, which acquire statistical information on the browsing methods of the Users. This information is processed in an aggregate and anonymous form;
  • Functionality cookies, including those of third parties such as  Google, Facebook, Twitter , Youtube, Vimeo, Soundcloud, Linkedin used to activate specific features of this online space and necessary to provide the service or improve it.
These cookies do not require the prior consent of the User to be installed and used. In any case, the User has the option to refuse cookies by changing the browser settings.
 
Instructions for managing cookies
If you have a different type or version of browser, please refer to the browser's "Help" menu.

Internet Explorer
1. Click on the Tools menu, and select Internet Options
2. Click on the Privacy tab
3. Move the cursor to choose your preferred settings
4. For more specialized cookie settings, Click on Sites or Advanced
5. For instructions regarding the elimination of cookies on Internet Explorer, click here

Microsoft Edge
1. In the Microsoft Edge browser go to More> Settings.
2. More button in Microsoft Edge
3. Under Clear browsing data, select Choose items to clear.
4. Select the Cookies and website data saved checkbox, then select Clear.
5. For instructions regarding the elimination of cookies on Internet Explorer, click here

Google Chrome
1. Click on the Chrome menu, and then select Settings
2. Click on Show advanced settings
3. Click Content Settings to choose your preferred settings
4. For instructions on how to delete cookies on Chrome, click here

Mozilla Firefox 14, 15, e 16
1.    Cliccare sul pulsante Firefox ( o menu Strumenti), quindi selezionare Opzioni. Per gli utenti di Mac OS X , cliccare sul menu Firefox, e poi selezionare Preferenze
2.    Cliccare sul pannello Privacy per scegliere le impostazioni preferite
3.    Per le impostazioni dei cookie più specializzati, impostare Firefox: utilizzare le impostazioni personalizzate per la conservazione dei dati di navigazione
4.    Per le istruzioni riguardanti l’eliminazione dei cookie su Firefox, clicca qui

Safari 5.1 e versione successive (Mac OS X)
1. Click on the Safari menu, and then select Preferences
2. Click on the Privacy tab to view the cookie settings
3. Choose your preferred settings
4. For more specialized cookie settings, click on Details
5. For instructions regarding the elimination of cookies in Safari,  click here

Opera
1. Open the Tools menu, and then select Preferences
2. Click on the Advanced tab
3. In the Cookies section: click Manage cookies
4. Select the desired options
5. For instructions regarding the elimination of cookies in Opera, click here
 
Optional supply of data
Apart from what is specified for navigation data, the user is free to provide the data shown in the request forms.
Their absence can make it impossible to obtain what is requested.
For completeness, it should be remembered that in some cases, the Authority (Guarantor or delegates) may request news and information pursuant to art 157 of Legislative Decree no. 196/2003 and art. 15 of the GDPR 2016/679, for the purpose of checking the processing of personal data. In these cases, the reply is mandatory under penalty of an administrative penalty
 
Processing methods
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access
 
Rights of the interested parties
The subjects to whom the personal data refer have the right at any time to obtain confirmation of the existence or otherwise of the same data and to know its content and origin, verify its accuracy or request its integration or updating, or the correction or limited use of the same (articles 16 - 18 of the GDPR 2016/679). Pursuant to the same articles, you have the right to request cancellation, transformation into anonymous form or blocking of data in violation of the law, and to oppose in any case, for legitimate reasons, to their treatment. For your convenience we reproduce the aforementioned items in full:
 
GDPR 2016/679

Article 16
Right to rectification

The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

Article 17
Right to erasure ("right to be forgotten")

The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller has the obligation to delete personal data without undue delay, if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the treatment is based in accordance with article 6, paragraph 1, letter a), or with article 9, paragraph 2, letter a), and if there is no other legal basis for the treatment ;
c) the interested party opposes the treatment pursuant to Article 21, paragraph 1, and there is no prevailing legitimate reason to proceed with the treatment, or opposes the treatment pursuant to Article 21, paragraph 2;
d) personal data have been unlawfully processed;
e) personal data must be erased to fulfill a legal obligation under Union or Member State law to which the data controller is subject;
f) personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1.
If the data controller has made personal data public and is obliged, pursuant to paragraph 1, to delete it, taking into account the available technology and the implementation costs, he adopts reasonable measures, including technical measures, to inform the data controllers who are by processing the personal data of the request of the interested party to delete any link, copy or reproduction of his personal data.
Paragraphs 1 and 2 do not apply to the extent that processing is necessary:
a) for the exercise of the right to freedom of expression and information;
b) for the fulfillment of a legal obligation that requires the treatment provided for by Union or Member State law to which the data controller is subject or for the execution of a task carried out in the public interest or in the exercise of public powers with which the data controller is invested;
c) for reasons of public interest in the public health sector in accordance with article 9, paragraph 2, letters h) and i), and article 9, paragraph 3;
d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 risks making it impossible or seriously prejudicing the achievement of the objectives of such treatment; or
e) for the assessment, exercise or defense of a right in court.

Article 18
Right to limitation of treatment

The interested party has the right to obtain the limitation of the processing from the data controller when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the treatment is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
c) although the data controller no longer needs it for processing purposes, personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
d) the interested party has opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
If the processing is limited pursuant to paragraph 1, these personal data are processed, except for storage, only with the consent of the interested party or for the assessment, exercise or defense of a right in court or for protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State.
The interested party who obtained the limitation of treatment pursuant to paragraph 1 is informed by the data controller before said limitation is lifted.
In any case, for any clarification, you can send an email to the address: privacy@diocesi.bergamo.it
Need more information?
Do you need information on rooms availability, would you like to add an extra bed, simply book for a few days or escursion? No problem, we are at your service.