Privacy policy

Information For the Processing of Personal Data

pursuant to Article 13 of Regulation (EU) 2016/679 

(version updated on January 27, 2025) 

 

The Association Milano & Partners, as the data controller (hereinafter, "Controller"), informs you in accordance with Regulation (EU) 2016/679 ("GDPR") and Legislative Decree No. 196/2003, as amended by Legislative Decree No. 101/2018, that your personal data will be processed in the following ways and for the following purposes. 

 

Subject of Processing 

The Controller processes personal identification data and non-sensitive/special categories of data (hereinafter, "Personal Data" or also "Data") that you provide when navigating the website www.yesmilano.it (hereinafter, "Website"), requesting information, or subscribing to the newsletter. Specifically: 

  • name, surname, email address, and any other information you share when requesting information via the contact details on the Website; 

  • email address required for subscribing to the "Guida alla città" newsletter; 

  • browsing data, such as the IP addresses or domain names of the computers used by users connecting to the Website, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (success, error, etc.), and other parameters related to the user's operating system and computing environment. This information is collected through cookies as described in the Website's Cookie Policy. 

 

Purposes and Legal Bases of Processing 

The Controller will process your Personal Data for the following service purposes and legal bases: 

  • execution of the contract and/or fulfillment of pre-contractual obligations, i.e., to allow you to navigate the Website and manage contact and information requests; 

  • fulfillment of legal obligations by the Controller, i.e., to comply with obligations required by laws, regulations, or national and EU legislation or imposed by competent authorities; 

  • pursuit of a legitimate interest of the Controller, i.e., to exercise rights in legal proceedings, manage potential disputes, verify and prevent harmful events to the Website, maintain and update the Website, as well as to perform anonymous and aggregated statistics regarding Website use through cookies described in the Website's Cookie Policy. 

The Controller will also process your Data only with your explicit consent to send you the "Guida alla città" newsletter, i.e., to update you on news, events, and tips for living in Milano. In this case, consent is provided during newsletter subscription, after which you will receive a confirmation email containing a link to finalize the subscription. 

Finally, the Controller, only with your explicit consent by clicking on the appropriate icons, will communicate your Data to social networks such as Instagram, LinkedIn, and YouTube to enable the requested interactions. 

 

Methods of Processing 

The processing of Personal Data is carried out through electronic and paper methods, by means of operations such as collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. 

 

Data Retention 

The Controller will process your Personal Data for the time necessary to fulfill the purposes mentioned above and, in any case, unless a different retention period is specified in the Cookie Policy regarding processing through cookies, for no longer than 30 days from collection for service purposes and for no longer than 2 years from collection for the "Guida alla città" newsletter. 

Regarding the communication of Data to social networks, the Controller will not retain any of your Personal Data. 

 

Provision of Data 

Providing Data for service purposes is mandatory, and failure to provide them will prevent you from navigating the Website or requesting information. Providing Data for other purposes is optional, and without it, the Controller will not be able to process your Personal Data to update you on news, events, and tips for living in Milan or to enable interactions with social networks. 

 

Access to Data 

Your Data may be made accessible for the purposes mentioned above to: 

  • employees and/or collaborators of the Controller, in their capacity as data processors and/or internal references for processing and/or system administrators; 

  • third parties (e.g., Municipality of Milan, Parcam S.r.l., IT providers, etc.) performing outsourcing activities on behalf of the Controller, in their capacity as data processors. 

 

Communication of Data 

Unless communication occurs at your explicit request and consent, your Data may be communicated, even without your consent, to supervisory bodies, law enforcement, the judiciary, and competent authorities, upon their express request, who will process the data as independent data controllers for institutional purposes and/or as required by law during investigations and controls. Your Data may also be communicated to third parties (e.g., partners, freelancers, social network management companies in the case of consent, etc.) as independent data controllers, for carrying out activities instrumental to the purposes mentioned above. 

In case of interaction with social networks such as Instagram, YouTube, and LinkedIn, we invite you to review the privacy policies of each data controller. 

 

Transfer of Data 

The Data will not be disclosed or transferred to non-EU countries. However, your Data may be transferred to non-EU countries by social networks with which you interact. In such cases, the transfer will take place according to the methods and guarantees outlined in their respective privacy policies. 

 

Rights of the Data Subject 

The Controller informs you that, as the data subject, unless limited by law, you have the right to: 

  • obtain confirmation from the Controller as to whether or not your personal data exists, even if not yet registered, and that such data is made available to you in an intelligible form; 

  • obtain from the Controller an indication and, if necessary, a copy of: a) the origin and category of personal data; b) the logic applied in case of processing carried out with the use of electronic tools; c) the purposes and methods of processing; d) the identifying details of the controller and processors; e) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of them, particularly if they are recipients in third countries or international organizations; f) when possible, the data retention period or the criteria used to determine such period; g) the existence of automated decision-making, including profiling, and in that case, the logic used, the significance, and the consequences expected for the data subject; h) the existence of appropriate safeguards in case of transfer of data to a non-EU country or an international organization; 

  • obtain from the Controller, without undue delay, the updating and rectification of inaccurate data, or, when there is interest, the completion of incomplete data; 

  • withdraw at any time, easily and without hindrance, the consents given, using, if possible, the same channels used to provide them; 

  • obtain from the Controller the deletion, transformation into anonymous form, or blocking of data: a) processed unlawfully; b) no longer necessary for the purposes for which they were collected or subsequently processed; c) in case of revocation of the consent on which processing is based, if no other legal basis exists; d) if you object to processing and no legitimate overriding grounds for the processing exist; e) in the case of compliance with a legal obligation; f) for data concerning minors. The Controller may refuse to delete data only in the case of: a) exercising the right to freedom of expression and information; b) compliance with a legal obligation, execution of a task carried out in the public interest or the exercise of public powers; c) reasons of public health interest; d) archiving in the public interest, scientific or historical research, or statistical purposes; e) exercise of a right in judicial proceedings; 

  • obtain from the Controller the restriction of processing in the case of: a) contesting the accuracy of personal data; b) unlawful processing by the Controller to prevent its deletion; c) exercising a right in judicial proceedings; d) verifying the possible prevalence of the Controller’s legitimate grounds over those of the data subject; 

  • receive from the Controller, if processing is carried out by automated means, without hindrance and in a commonly used, structured, and readable format, the personal data concerning you to transmit them to another controller or, if technically feasible, obtain direct transmission by the Controller to another controller; 

  • object, in whole or in part: a) for legitimate reasons, related to your particular situation, to the processing of personal data concerning you; b) to the processing of personal data for communication material purposes via email and/or traditional methods via phone and/or postal mail; 

  • lodge a complaint with the Data Protection Authority. 

In the cases above, where necessary, the Controller will inform the third parties to whom your personal data are communicated about the possible exercise of your rights, except in specific cases (e.g., when such compliance proves impossible or involves a manifestly disproportionate use of resources). 

 

Methods of Exercising Rights 

You may exercise these rights at any time by contacting the Controller: 

  • by sending a registered letter to the Controller's address; 

  • by emailing info@yesmilano.it 

Consent to receive the "Guida alla città" newsletter may also be revoked at any time through the unsubscribe function in each email sent. 

 

Controller and Data Processors 

The data controller is Associazione Milano & Partners, with registered office at Piazza della Scala 2, 20121 – Milan (MI), VAT number IT11016320969. The updated list of data processors is kept at the Controller's headquarters. 

The Controller has also appointed a Data Protection Officer (DPO) who will oversee the measures adopted to protect your Data and can be contacted by writing to dpo@yesmilano.it.