Information pursuant to art. 13 of Regulation (EU) 2016/679 – GDPR

The Municipality of Savona informs users of the methods used to process personal data related to the consultation of the website www.visitsavona.com and the use of the services available on the website.

1. Data controller

The Data Controller is the Municipality of Savona , with registered office in Corso Italia, 19 – 17100 Savona.

Email: urp@comune.savona.it
PEC: posta@pec.comune.savona.it

For information on tourist services: info@visitsavona.com .

2. DPO

The Data Protection Officer ( DPO ) can be contacted at dpo.comune.savona@compet-e.it for questions relating to data processing and the exercise of rights.

3. Data processed, purposes and legal bases

a) Navigation and security of the site

During navigation, technical data is acquired, such as IP addresses, resources consulted, date and time of access, information on the browser and device, and logs of IT events.

This data is used to enable consultation of the site, ensure its functioning, perform aggregate analyses, protect its security, and prevent abuse and unauthorized access.

The processing is based on the performance of the Municipality's public interest tasks related to the provision of digital information services, pursuant to Art. 6, paragraph 1, letter e), GDPR, and, for the security requirements required by law, Art. 6, paragraph 1, letter c), GDPR.

b) Requests for information and tourist assistance

Sending requests through the forms involves the processing of the data provided by the user, such as name, surname, email address, telephone number (if applicable), and information contained in the message.

The data is used to respond and provide assistance regarding the area, attractions, itineraries, events, accommodations, and tourist and cultural services.

The processing is necessary for the performance of the Municipality's public interest tasks relating to information, reception, and tourism and cultural promotion, pursuant to Art. 6, paragraph 1, letter e), GDPR and Art. 2-ter of Legislative Decree 196/2003, within the framework of the Institution's institutional functions and Liguria Regional Law No. 28/2006 and subsequent amendments.

Users are encouraged to provide only data relevant to the request, avoiding unnecessary health information or other particularly sensitive data.

c) Newsletter

If a newsletter subscription form is available, the data provided will be used to manage your subscription and send you emails containing information and promotional material about local events, shows, museums, and initiatives.

Processing is based on the data subject's consent, pursuant to Art. 6, paragraph 1, letter a), GDPR, expressed by ticking the appropriate box on the form.

Subscription is optional and independent of other services. You can withdraw your consent at any time by using the unsubscribe link in the newsletters or by writing to cultura@comune.savona.it . Revocation does not affect the lawfulness of any previous processing.

If city and province are optionally collected, this data may be used to compile aggregate statistics on the origin of subscribers, to support the planning of the Municipality's initiatives. This processing is based on Art. 6, paragraph 1, letter e), GDPR and Art. 2-ter of Legislative Decree 196/2003. Geographic data is not used to personalize communications.

d) Regulatory compliance

The data may be processed to comply with legal obligations, respond to competent authorities, and manage requests to exercise rights pursuant to Art. 6, paragraph 1, letter c), GDPR.

4. Data provision

Providing data in forms and communications is optional; however, failure to provide the required information may prevent us from processing your request. Required fields are identified in the forms.

Failure to consent to the newsletter does not limit access to other Municipality services.

5. Data processing methods and recipients

The data is processed mainly using IT and electronic tools, adopting appropriate technical and organizational measures to protect it.

Authorized Municipality personnel and suppliers involved in providing services such as hosting, website maintenance, IT support, newsletter management, and tourist reception may access it. Those operating on behalf of the Municipality are designated as data controllers pursuant to Article 28 of the GDPR, where applicable. The relevant list is available upon request.

The data may also be communicated to authorities and other entities in the cases provided for by law.

6. Conservation

The data is stored according to the following criteria:

• Browsing data and cookies: as per the cookie policy https://www.visitsavona.com/it/varie/cookies/informativa-cookies
• Information requests: for the time necessary to manage them and any follow-up, in compliance with the administrative documentation retention periods, where applicable, up to a maximum of 120 days.
• Newsletter: until consent is revoked, unsubscribed, or the service is terminated, subject to the limited retention necessary to document the interested party's choices.
• Geographic data for statistics: for the time necessary for processing, subsequently deleted or made anonymous.

7. Cookies and external services

Information on cookies, other tracking tools, and any integrated external content is available in the Cookie Policy .

Non-essential tools that require consent are activated only after the user's choice. Preferences can be changed through the "Cookie Preferences" command found at the bottom of each page of the site .

When the user accesses the websites of accommodation providers, event organizers, or other external parties via links, the processing carried out by these third parties is described in their respective privacy policies.

8. Transfers outside the European Economic Area

The Data Controller will not transfer personal data to a third country or to an international organization. However, it may use third-party providers based in the US for certain services. In this case, data transfer will occur exclusively to providers operating in countries deemed adequate pursuant to Art. 45, which have adhered to the EU-US Privacy Framework, or which have provided the guarantees required by Art. 46 of the GDPR.

9. Rights of interested parties

Pursuant to Articles 15 et seq. of the GDPR, the interested party may request access to, rectification, erasure, and restriction of processing of their data, as well as object to processing based on public interest for reasons related to their particular situation.

You may also withdraw your consent when the conditions are met. Data portability does not apply to processing necessary for the performance of the Municipality's public interest tasks.

Requests can be sent to the Data Controller or the DPO at the addresses indicated above.

The interested party has the right to lodge a complaint with the Italian Data Protection Authority , according to the methods available at www.garanteprivacy.it , and to contact the judicial authority.

Last modified: November 3, 2026