Privacy Policy
Last update: 11 August 2026
This Privacy Policy describes how the site uses Cesi Umbria processes the personal data of users who consult the cesi website. umbria.it, in compliance with the Regulation (EU) 2016/679 ("GDPR") and the Italian legislation applicable to the protection of personal data.
1. Data controller
The Data Controller collected through the site is:
Cesi Umbria
Via Angelo Cesi, 51
05100 Cesi, Terni – Italy
E-mail: info@cesi.umbria.it
For any information relating to the processing of personal data or to exercise the rights provided by applicable legislation, please contact the Data Controller at the email address above.
2. Types of processed data
Several categories of personal data may be collected when browsing the site.
Navigation data
The computer systems and software procedures used for the operation of the site acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols.
These may include:
- IP address;
- type of browser and device used;
- operating system;
- date and time of visit;
- pages visited;
- technical information regarding navigation and requests made to the server.
This data is mainly used to ensure the proper functioning, security and integrity of the site and, where applicable, to obtain statistical information on the use of the site.
Data provided voluntarily by the user
Voluntary sending of communications to the email addresses indicated on the site involves the acquisition of the data provided by the user, such as the email address and any other information contained in the message, necessary to respond to the request.
You are invited not to transmit unnecessarily personal data regarding your request.
Cookies and similar technologies
The site uses technical cookies and, after consent, statistical cookies or other similar technologies.
For detailed information on the types of cookies used, the related purposes and the methods of managing consent, please refer to Cookie Policy of the site.
3. Purpose of treatment
The personal data collected through the site may be processed for the following purposes:
- allow proper navigation and use of content;
- ensure technical operation and site safety;
- prevent unlawful use, abnormalities or unauthorized access attempts;
- respond to requests for information or communications sent voluntarily by users;
- fulfil any obligations under the law;
- process, after consent when necessary, statistical data relating to the use of the site.
The data will not be used for purposes incompatible with those indicated in this statement.
4. Legal basis for processing
The processing of personal data may be based, depending on the circumstances, on the following legal basis provided for in Article 6 of the GDPR:
- execution of measures requested by the data subject, for example to respond to a request sent by email;
- legitimate interest of the Data Controller, in particular to ensure the operation, safety and integrity of the site;
- fulfilment of legal obligations to which the Data Controller is subject;
- consent of the data subject, when required, for example for the use of certain categories of cookies or statistical tools not strictly necessary.
When the processing is based on consent, the user may revoke it at any time, without prejudice to the lawfulness of the processing performed before the revocation.
5. Methods of treatment and safety
Personal data are processed through computer and telematic tools by adopting technical and organizational measures to protect them from unauthorized access, loss, destruction, disclosure or unlawful use.
Access to data is limited to subjects who have the actual need to carry out the activities related to the management of the site.
6. Data retention
Personal data are stored exclusively for the time necessary to achieve the purposes for which they were collected.
In particular:
- technical and navigation data are kept for the period necessary for the operation, safety and technical management of the site, except for any illicit verification requirements;
- the data provided voluntarily by email are stored for the time necessary to manage the request and any subsequent reports;
- data collected through cookies and similar tools are stored according to the times indicated in the Cookie Policy and its consent settings.
Longer retention periods may be applied if required by legal obligations or necessary for the protection of the rights of the Data Controller.
7. Data controllers
Personal data may be processed, as well as by the Data Controller, by external entities providing services necessary for the operation and management of the site, such as, for example:
- hosting providers and server services;
- suppliers of technical services and maintenance of the site;
- IT service providers;
- security, backup and management of web infrastructure;
- any provider of statistical services or analytics.
When required by law, such entities operate as Data Processors under Art. 28 GDPR.
The data may also be communicated to the competent authorities if required by law.
Personal data are not disclosed, unless expressly provided by law.
8. Third-party services and content
The site may contain links to websites, social platforms or services managed by third parties.
The interaction with these services may result in the processing of personal data by their suppliers according to their own privacy policies.
The site can also integrate content from external platforms. When such integrations involve the use of cookies or tracking technologies that are not strictly necessary, they are activated in accordance with the procedures laid down by applicable law and user preferences through the consent management system.
The Data Controller is not responsible for the processing of data carried out independently by the external sites or services reached through links present on the site.
9. Transfer of data to non-EU countries
Some service providers used by the site may process personal data outside the European Economic Area.
If this happens, the transfer will be carried out in accordance with the conditions laid down by the GDPR, on the basis of a decision of adequacy of the European Commission or through other guarantees provided by applicable law, such as the Standard Contractual Clauses.
10. Rights of the data subject
Pursuant to Articles 15-22 of the GDPR, you may, in the cases provided for by law, exercise the following rights:
- obtain confirmation of the existence or otherwise of personal data concerning him;
- obtain access to your personal data;
- request inaccurate data rectification or incomplete data integration;
- request the deletion of personal data;
- request restriction of processing;
- object to the processing in cases provided by law;
- request data portability, where applicable;
- revoke the prior consent at any time.
The exercise of such rights may be requested by contacting the Data Controller at:
11. Right of complaint
If you believe that the processing of your personal data is carried out in violation of applicable legislation, you have the right to lodge a complaint with the competent supervisory authority.
In Italy, the competent authority is the Guarantee for the protection of personal data.
It is still possible to contact the competent judicial authorities.
12. Links to external sites
The site may contain links to external websites.
This Privacy Policy applies exclusively to the processing of data carried out through transfer. umbria.it and does not apply to third party websites that may be accessed through links on the pages.
We therefore invite you to consult the relevant privacy statements before providing personal data to such subjects.
13. Changes to this Privacy Policy
The Data Controller reserves the right to modify or update this Privacy Policy at any time, even as a result of changes in regulations, techniques or services offered through the site.
The updated version will be published on this page indicating the date of the last update.
14. Contact
For questions, requests or clarifications concerning this Privacy Policy and the processing of personal data:
Cesi Umbria
Via Angelo Cesi, 51
05100 Cesi, Terni – Italy
E-mail: info@cesi.umbria.it
