Privacy Policy

Pro Loco di Cagliari

Information on the processing of users’ personal data when using the website and online services

Last updated: 5 May 2026

This policy describes how the personal data of users who visit the Pro Loco di Cagliari website and use the online services available, such as contact forms, tourist information requests, guided tour bookings, newsletter subscriptions, document downloads and requests relating to association activities, are processed.

Pro Loco di Cagliari processes personal data in accordance with EU Regulation 2016/679, known as the GDPR, and the applicable national legislation on personal data protection.

Contents

1. Data controller

2. Types of data processed

3. Purposes of processing

4. Legal basis for processing

5. Processing methods

6. Provision of data

7. Recipients of personal data

8. Transfer of data outside the European Union

9. Data retention period

10. Newsletter

11. Cookies and tracking tools

12. Third-party services

13. Children’s data

14. Photographs, videos and public events

15. Automated decision-making processes

16. Data subject’s rights

17. Complaints to the supervisory authority

18. Changes to this policy

19. Privacy contacts

Appendix – SEO copy and operational notes for WordPress

1. Data controller

The data controller is Pro Loco di Cagliari, with its registered office at Via Baronia 19, 09121 Cagliari.

For any request relating to the processing of personal data, the data controller can be contacted using the following details:

• Email: info@prolocodicagliari.org
• Certified email (PEC): prolocodicagliari@legalmail.it
• Telephone: +39 070 763 00 74
• Website:

2. Types of data processed

The following categories of personal data may be processed while browsing and using the website.

Browsing data

The IT systems and software procedures used to operate the website may, during their normal operation, acquire certain technical data whose transmission is implicit in the use of Internet communication protocols.

• IP address;
• browser type used;
• operating system;
• date and time of access;
• pages visited;
• addresses of requested resources;
• technical data relating to browsing the website.

This data is used to ensure the website operates correctly, obtain aggregated statistical information, improve online services and protect IT security.

Data provided voluntarily by the user

Users may voluntarily provide personal data through the forms on the website or in communications sent to Pro Loco.

• first name and surname;
• email address;
• telephone number;
• residential or home address, if requested;
• data relating to membership;
• data relating to participation as a volunteer;
• data relating to requests for tourist information;
• data relating to guided tour bookings;
• data relating to sponsorship or collaboration requests;
• any information freely entered in the message field.

The optional, explicit and voluntary sending of messages to Pro Loco’s contact addresses entails the acquisition of the data necessary to respond to the request.

Data for newsletters and information communications

If users choose to subscribe to the newsletter, the following may be processed:

• name, if requested;
• email address;
• communication preferences;
• technical data relating to subscription and consent management.

Newsletter subscription is optional and may be withdrawn at any time.

Data relating to events, images and photographic materials

On the occasion of events, guided tours, public gatherings or public activities promoted by Pro Loco, photographs or video recordings may be made. Any use of recognisable images for promotional, informational or communication purposes will be managed in accordance with the legislation in force and, where necessary, on the basis of specific consent.

Special categories of data

The website does not normally require the provision of special categories of personal data. Users are asked not to enter unnecessary information in free-text fields, such as health data, religious beliefs, political opinions or other sensitive information. If such data is provided voluntarily, it will be processed only to the extent strictly necessary to manage the request.

3. Purposes of processing

Personal data collected through the website is processed for the following purposes.

Responding to user requests

Data provided through contact forms, email or telephone is used to respond to requests for information, clarification, tourist assistance, collaboration proposals or communications relating to Pro Loco activities.

Managing requests for tourist information

Data entered in the “Tourist Information Request” form is used to provide information on events, itineraries, guided tours, services, places to visit and initiatives promoted in the area.

Managing guided tour bookings

Data collected through the “Guided Tour Booking” form is used to organise participation in visits, tours, cultural itineraries and experiential activities.

Managing membership and volunteering applications

Data collected through membership forms or volunteer applications is used for administrative, organisational, association-related and internal communication purposes connected with the life of Pro Loco.

Managing sponsorship, collaboration or event participation requests

Data provided through sponsorship or collaboration request forms is processed to assess proposals received, organise any joint activities and maintain relations with organisations, associations, schools, operators and local partners.

Sending newsletters and information communications

Subject to the user’s consent, data may be used to send updates on events, initiatives, projects, cultural activities, guided tours and institutional communications from Pro Loco di Cagliari.

Legal obligations

Some data may be processed to comply with obligations arising from laws, regulations, tax, accounting or administrative legislation, or requests from the competent authorities.

Website security and operation

Technical and browsing data may be processed to ensure website security, prevent abuse, attempts at unauthorised access, fraudulent activity or malfunctions.

4. Legal basis for processing

The processing of personal data is based on the following legal grounds:

• performance of pre-contractual or contractual measures, where processing is necessary to respond to the user’s requests, manage bookings, memberships or requested services;
• compliance with legal obligations, where processing is necessary for administrative, tax, accounting or regulatory obligations;
• the data subject’s consent, for sending newsletters, promotional communications, using recognisable images or carrying out optional processing;
• the data controller’s legitimate interest, to ensure security, website operation, protection of the association and organisational management of activities.

5. Processing methods

Personal data is processed using IT, electronic and, where necessary, paper-based tools, with appropriate technical and organisational measures adopted to protect data against unauthorised access, loss, disclosure, alteration or misuse.

Processing is carried out by authorised staff, appointed volunteers or external parties supporting Pro Loco with website management, digital services, communications, administration or association activities.

6. Provision of data

Providing data is optional, but necessary to use certain services.

Failure to provide the data requested in contact, information request, guided tour booking or membership forms may prevent Pro Loco from responding to the request or providing the requested service.

Providing consent for the newsletter or promotional purposes is always optional and may be withdrawn at any time.

7. Recipients of personal data

Personal data may be disclosed, to the extent necessary, to parties acting on behalf of Pro Loco or providing services connected with the website and the association’s activities.

• website hosting and maintenance service providers;
• email and newsletter service providers;
• providers of plugins, IT tools and digital platforms;
• administrative, tax, legal or technical consultants;
• authorised collaborators, volunteers and appointees;
• public bodies or competent authorities, where required by law;
• partners involved in organising events, guided tours or activities, to the extent necessary to manage the service.

Data will not be sold or transferred to third parties for commercial purposes unrelated to Pro Loco’s activities.

8. Transfer of data outside the European Union

Some digital services potentially used by the website, such as newsletter platforms, statistical analysis tools, maps, social networks or anti-spam systems, may involve transfers of data to countries outside the European Economic Area.

In such cases, the transfer will take place in accordance with the safeguards provided for by the applicable legislation, such as adequacy decisions, standard contractual clauses or other suitable measures provided for by the GDPR.

Any services active on the website, such as analytics tools, maps, anti-spam, newsletter or social network services, are managed in accordance with the safeguards provided for by the applicable legislation and, where necessary, the preferences expressed by the user.

9. Data retention period

Personal data is retained for the time necessary to achieve the purposes for which it was collected and subsequently for the period required by legal obligations or to protect the association.

Indicatively:

• data collected through the contact form is retained for the time necessary to manage the request and, as a rule, no longer than 24 months, except where needed for protection or required by law;
• data relating to guided tour or event bookings is retained for the time necessary to manage the activity and for any administrative requirements;
• members’ data is retained for the duration of the membership relationship and subsequently for the period required by administrative, accounting or tax obligations;
• volunteers’ data is retained for the period of collaboration and for any organisational, insurance or administrative obligations;
• newsletter data is retained until consent is withdrawn or deletion is requested;
• tax, accounting or administrative data is retained for the periods required by the legislation in force.

10. Newsletter

Users may voluntarily subscribe to the Pro Loco di Cagliari newsletter to receive updates on events, initiatives, guided tours, cultural activities, projects and information communications.

Subscription is based on the data subject’s consent. Users may withdraw consent at any time by using the unsubscribe link in the communications received or by writing to info@prolocodicagliari.org.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

11. Cookies and tracking tools

The website may use technical cookies necessary for the correct operation of its pages and, only if activated, analytical, statistical, functional or third-party cookies.

Technical cookies are used to enable browsing and ensure the website operates correctly. Any analytical or profiling cookies, or third-party tools, will be used in accordance with the applicable legislation and, where necessary, subject to the user’s prior consent.

For further details about the cookies used by the website, users may consult the cookie policy made available on the website and through the relevant preference-management banner.

Preferences expressed through the cookie banner may be changed in accordance with the procedures indicated on the website.

12. Third-party services

The website may integrate services provided by third parties. Interaction with these services may involve the processing of personal data by the respective providers, in accordance with their privacy policies.

Examples of third-party services potentially used:

• Google Maps, to show the location of the office or event venues;
• social platforms, such as Facebook, Instagram, YouTube or LinkedIn;
• anti-spam or security tools;
• newsletter services;
• WordPress plugins for contact forms, events, bookings or statistics.

Pro Loco invites users to consult the privacy policies of any external services used.

13. Children’s data

Pro Loco activities may involve schools, families, educational groups and children.

Where personal data relating to children is collected, it will be processed with particular care and, where necessary, with the prior authorisation of parents, guardians, educational institutions or legitimately authorised parties.

Children are not required to submit personal data through the website without the involvement of a responsible adult.

14. Photographs, videos and public events

During events, public gatherings, guided tours or public initiatives, Pro Loco may take photographs or videos to document the activities carried out and promote its association-related, cultural and tourism purposes.

Where images depict identifiable people in a way that is not merely incidental, their use for promotional or communication purposes will be managed in accordance with the legislation in force and, where necessary, on the basis of specific consent.

Data subjects may contact Pro Loco to request information about the use of images concerning them.

15. Automated decision-making processes

The website does not carry out automated decision-making processes or profiling activities capable of producing legal effects or similarly significantly affecting users.

Any statistical or analytical tools, if activated, will be used as indicated in the Cookie Policy and in accordance with the preferences expressed by the user.

16. Data subject’s rights

Data subjects may exercise the rights provided for by Articles 15 to 22 of the GDPR, including:

• the right of access to personal data;
• the right to rectification;
• the right to erasure;
• the right to restriction of processing;
• the right to object;
• the right to data portability, where applicable;
• the right to withdraw consent at any time;
• the right not to be subject to decisions based solely on automated processing, where applicable.

Requests may be sent to:

• Email: info@prolocodicagliari.org
• Certified email (PEC): prolocodicagliari@legalmail.it

The data controller will respond within the time limits provided for by the legislation.

17. Complaints to the supervisory authority

Data subjects who believe that their personal data is being processed in breach of the applicable legislation have the right to lodge a complaint with the Italian Data Protection Authority.

A complaint may be lodged in accordance with the procedures indicated by the Authority on its institutional website.

18. Changes to this policy

Pro Loco di Cagliari reserves the right to update this Privacy Policy at any time, including in response to regulatory, technical or organisational changes or the introduction of new services on the website.

Users are invited to consult this page periodically to check for any updates.

19. Privacy contacts

For questions, requests or clarification relating to this Privacy Policy or the processing of personal data, the following may be contacted:

• Pro Loco di Cagliari
• Registered office: Via Baronia 19, 09121 Cagliari
• Email: info@prolocodicagliari.org
• Certified email (PEC): prolocodicagliari@legalmail.it
• Telephone: +39 070 763 00 74
• Website:

Appendix – SEO copy and operational notes for WordPress

This appendix is intended as operational support for those publishing the page on the WordPress website. It may not be included in the public page.

Recommended SEO title

Privacy Policy | Pro Loco di Cagliari

Recommended SEO meta description

Read Pro Loco di Cagliari’s Privacy Policy: information on the processing of personal data, contact forms, newsletters, events and users’ rights.

Short text for the footer

Privacy Policy – Information on the processing of users’ personal data on the Pro Loco di Cagliari website.

Recommended slug

/privacy-policy/

Pre-publication checklist

• Check whether a cookie/banner plugin is active and link it to the Cookie Policy.
• Check whether Google Analytics, Google Maps, reCAPTCHA, anti-spam plugins or similar tools are active.
• Update the “Third-party services” section with the services actually used.
• Insert the correct link to the Cookie Policy.
• Check which newsletter service is actually used and whether the unsubscribe link is present.
• Check retention periods against the association’s internal procedures.
• Coordinate the website forms with the short notices and consent checkboxes required.
• Consider including a separate release for photographs/videos in the case of events, visits or activities involving children.

Official references used in drafting

EU Regulation 2016/679 – GDPR: https://www.garanteprivacy.it/il-testo-del-regolamento

Italian Data Protection Authority – Fundamental principles of processing: https://www.garanteprivacy.it/home/principi-fondamentali-del-trattamento

Italian Data Protection Authority – Exercising rights: https://www.garanteprivacy.it/home/diritti/come-agire-per-tutelare-i-tuoi-dati-personali

Italian Data Protection Authority – Guidelines on cookies and other tracking tools: https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/9677876

Italian Data Protection Authority – Cookie FAQ: https://www.garanteprivacy.it/faq/cookie