Privacy Notice

Information notice pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR).

This page is a technical draft describing how the platform actually works. It has not yet been reviewed by the Data Protection Officer or legal counsel of the Autorità di Sistema Portuale del Mar Tirreno Settentrionale, and must not be relied upon until it is finalised.

Data controller

The data controller is the Autorità di Sistema Portuale del Mar Tirreno Settentrionale.
Address: [TO BE COMPLETED BY THE ADSP: registered address]
Data Protection Officer contact: [TO BE COMPLETED BY THE ADSP: DPO contact email]

Cookies

This platform uses only cookies that are strictly necessary to provide the service:

  • sessionid — keeps you signed in (httpOnly, not readable by page scripts).
  • csrftoken — protects the site against cross-site request forgery.

No advertising, profiling, or third-party analytics cookies are used (for example, no Google Analytics or similar service is present).

Usage analytics

Analytics tracking applies only to users who are signed in. Visitors browsing the site while not logged in are not tracked.

For signed-in users, the platform records, per event:

  • the event type (e.g. page view, search, document opened, AI chat answer rated, feature entry);
  • the user account and the session identifier;
  • an optional reference to the item concerned (e.g. the document that was opened);
  • a small amount of related data (for example, the text of a search query);
  • the date and time of the event.

We do not store your IP address or browser/user-agent string.

Before storage, search queries are automatically scrubbed of obvious personal data (such as email addresses, phone numbers, or national-ID/IBAN-like strings). Please avoid typing personal data into search boxes.

This data is used to operate and improve the platform, to understand which content is useful, and to monitor the health and cost of the service. It is not used for advertising, and it is not used for any form of automated decision-making that produces legal or similarly significant effects on you.

Access to analytics is restricted to platform supervisors, through a dashboard limited to users in the supervisor group.

Legal basis: [TO BE COMPLETED BY THE ADSP / LEGAL COUNSEL: legal basis for this processing].

Retention

Analytics records are kept for 365 days from the date they are recorded and are then deleted automatically: a scheduled job purges expired records every night. Anonymous aggregate counts, which are no longer attributable to a person, are retained for long-term statistics; the text of searches is not.

Your rights

Under the GDPR, you may request access to, rectification, or erasure of your personal data, restriction of or objection to its processing, and data portability. To exercise these rights, contact the Data Protection Officer at [TO BE COMPLETED BY THE ADSP: DPO contact email].

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).