In accordance with art. 13 of European Regulation n. 679/2016.


In accordance with art. 13 of European Regulation n. 679/2016, the Municipality of Parma, as “Data Controller”, is required to provide information about the use of personal data.

  1. Identity and contact details of the data controller

The Data Controller of personal data referred to in this Information notice is the Municipality of Parma, with registered office in Parma, Via Repubblica n.1. In order to simplify the forwarding methods and reduce response times, we invite you to submit the requests referred to in point n. 10, to the Municipality of Parma, Public Relations Office, by e-mai

  1. The Data Protection Officer

The Municipality of Parma has designated the company Lepida ScpA (MAIL – PEC ) as Data protection officer.

  1. Data controllers

The Institution may use third parties to perform activities and related processing of personal data of which ot has ownership. In accordance with the rules, these subjects guarantee high levels of experience, expertise and reliability in compliance with the current provisions on processing, including the data security profile.

Instructions, tasks and obligations for these third parties are formalized by the Organization with the designation of the same as “Data Processors”. These are subjected to periodic checks in order to verify the maintenance of the guarantee levels recorded when the initial task was assigned.

  1. Persons authorized to process

Your personal data are processed by internal and external personnel previously authorised and designated as in charge of the processing, to whom are given suitable instructions regarding measures, precautions and modus operandi, all aimed at the protection of your personal data.

  1. Purpose and legal basis of the processing

The processing of your personal data is done by the Municipality of Parma for the performance of institutional functions and therefore, according to the art. 6 comma 1 lett. e) of the above-mentioned Regulation and does not need your consent. Personal data are processed for these purposes:

  • Allow the interested party to register and access the Parma Welcome app and to use the services offered
  • Allow the interested party to book the events proposed in the app.
  • Management and maintenance of the App and improvement of its performance;
  • Allow the Data Controller to send the interested party necessary communications related to the creation of the account (e.g. account activation notification, password change, etc.);
  • Sending necessary communications about the events for which the interested party has made a reservation (e.g. booking confirmation, communications regarding the location, date and other essential elements of the event, etc.).
  1. Recipients of personal data

Personal data may be processed by means of digital systems and software managed by third parties or by means of digital systems and software managed or programmed directly. All processing takes place in compliance with the methods set out in the articles. 6 and 32 of the GDPR and through the adoption of the appropriate security measures.

Personal data may be communicated to external parties for correct management of the relationship, such as web service providers for the management and maintenance of the platform, appointed as external Data Processors as well as to third parties promoters of events/activities/attractions accessible in the App, limited to the management of personal data provided by the interested party when booking an event.

We may also communicate personal data to public and government authorities in fulfilment of the obligations established by law or regulations and upon request by the competent authorities.

Personal data will not be disclosed in any way.

  1. Transfer to third parties and abroad

Personal data will be processed within the borders of the European Union. If the transfer to non-EU countries becomes necessary, this will take place within the limits and conditions as in the artt. 44 and s.s. of the Reg. UE 2016/679.

  1. Data conservation period

Your data are stored for a period no longer than is necessary to pursue the aforementioned purposes. For this purpose, also through periodic checks, the strict relevance, non-excess and indispensability of the data is constantly verified with respect to the relationship, performance or assignment in progress, to be established or terminated, also with reference to the data that you provide on your own initiative.
The data, which, also after verification, are found to be excessive, irrelevant, or not indispensable, are not used, except for the possible conservation, in accordance with the law, of the deed or document containing them.

Limited to the purpose of booking events, personal data will be kept for the time necessary to manage the event, and in any case for a maximum of 15 days from the conclusion of the same.

  1. Your rights

As an interested party, you have the right:

  • to access your personal data;
  • to obtain the modification or cancellation of the same or the limitation of the processing concerning it;
  • to oppose to the processing;
  • to lodge a complaint with the Data Protection Authority
  1. Data provision

The provision of your data is optional, but necessary for the above-mentioned purposes. Failure to provide data will result in partial operation of the App.

  1. Consent

In the light of this information, the undersigned expresses consent to the processing of the following personal data:

  • personalized content related to the preferences expressed, in order to propose events in line with your interests and focused on needs and habits, based on the contents displayed and the information provided during registration.
  • consent to the display of events/activities/attractions near the place where you are located, as well as the results close to the detected position.