pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)

Last updated: July 31, 2026

1. Data Controller

The Data Controller is:

Municipality of Monte Sant’Angelo
Piazza Municipio No. 2
71037 Monte Sant’Angelo (FG)

Email: protocollo@montesantangelo.it
Certified Email (PEC): protocollo@cert.montesantangelo.it

Data Protection Officer (DPO)

PA 3.26 S.r.l.
Contact: Dr. Alfredo Gaeta
Email: alfredo.gaeta@pa326.it

2. Purpose of This Privacy Notice

This privacy policy governs the processing of personal data by the Municipality of Monte Sant’Angelo in connection with the digital services provided through:

• the official website;
• the Biblify mobile app.

The two platforms perform different functions and process personal data in different ways.

PART I

Website Privacy Policy

3. Data Processed

While browsing the site, the following may be processed:

• browsing data;
• IP address;
• browser data;
• operating system;
• date and time of the request;
• pages viewed;
• data provided voluntarily through contact forms;
• name;
• last name;
• email address;
• phone number;
• any information contained in the messages sent.

4. Purposes of the Processing

The data is processed for the following purposes:

• to enable navigation of the site;
• provide the requested services;
• respond to requests submitted by users;
• ensure the security of the site;
• to comply with legal obligations;
• prevent unauthorized use.

5. Legal Basis

The processing is carried out in accordance with Article 6, paragraph 1 of the GDPR, and specifically:

• subparagraph (c) compliance with legal obligations;
• subparagraph (e) performance of a task in the public interest;
• Subparagraph (a): consent of the data subject, where required.

6. Cookies and Tracking Tools

This website uses technical cookies that are necessary for it to function properly.

Any use of analytical or third-party cookies is governed by the dedicated Cookie Policy.

7. Third-Party Services

The website may use services such as:

• Google Fonts;
• Font Awesome;
• any platforms used to send newsletters (e.g., Mailchimp);
• hosting services.

The relevant suppliers process the data as data processors or independent data controllers, in accordance with their respective privacy policies.

8. Storage

The data are retained for as long as necessary to fulfill the purposes indicated above and, in any case, in compliance with applicable law.

PART II

Biblify App Privacy Policy

9. What is Biblify?

Biblify is the official app of the “Ciro Angelillis” Municipal Library of the City of Monte Sant’Angelo.

The app guides visitors through the tour, allowing them to access multimedia content related to the points of interest in the library.

The app does not require registration and does not involve creating user accounts.

10. Data stored exclusively on the device

The following data remains exclusively on the user’s device and is not transmitted to the municipality:

• selected language;
• age group;
• display and accessibility preferences;
• demo mode status;
• list of places visited;
• progress of the program;
• Bluetooth identifiers detected nearby;
• Images captured by the camera solely for the purpose of scanning QR codes.

Images are neither saved nor transmitted.

Your geographic location is used solely while you are using the app to check your proximity to the library; it is neither stored nor transmitted to the city’s servers.

The app does not continuously track the user’s location.

11. Data Sent to the Server

For statistical purposes, only pseudonymized technical data is transmitted, such as:

• random session ID;
• date and time of the event;
• point of interest visited;
• selected route;
• app version;
• operating system;
• device model;
• selected language;
• Active demo mode.

The following are not transmitted:

• GPS coordinates;
• name;
• last name;
• email address;
• phone number;
• advertising identifiers;
• location data;
• photographs;
• personal files.

The app does not engage in profiling.

It does not use advertising SDKs.

It does not share data with advertisers.

12. Bluetooth, Location, and Camera

The app requests only the permissions necessary for the following features to work:

Bluetooth

to automatically identify points of interest within the library.

Location

solely to enable the Bluetooth search feature provided by mobile operating systems and to check for proximity to the library.

The location is not recorded or transmitted to the servers.

Camera

used exclusively for scanning QR codes.

The images are not saved.

13. Notifications

The notifications displayed during your visit are generated locally by the device.

The app does not use a remote push notification service.

14. Legal Basis

Data processing is carried out pursuant to Article 6, paragraph 1, subparagraph (e) of the GDPR, as an activity necessary for the performance of a task carried out in the public interest aimed at promoting and making accessible the cultural heritage of the Municipal Library.

Access to the device’s sensors (Bluetooth, location, and camera) is subject to the user’s express consent via the device’s operating system.

15. Recipients of the Data

Data may be processed exclusively by authorized individuals or by data processors appointed pursuant to Article 28 of the GDPR, including:

• the vendor responsible for developing and maintaining the application;
• Amazon Web Services EMEA SARL for hosting services.

The data is stored within the European Economic Area.

No transfers to third countries are planned.

16. Storage

The data on the device remains stored until the app is uninstalled or the cache is cleared.

Statistical data are retained for the time strictly necessary for the purposes of service analysis and, in any case, for no longer than 24 months, unless otherwise required by law.

PART III

Common Provisions

17. Methods of Processing

Data processing is carried out using electronic and IT tools, with appropriate technical and organizational measures in place to ensure the security, confidentiality, and integrity of personal data.

18. Rights of the Data Subject

The data subject may exercise the rights set forth in Articles 15–22 of the GDPR at any time, including:

• access;
• correction;
• deletion;
• restriction of processing;
• opposition;
• data portability (in cases provided for by law);
• Withdrawal of consent, where applicable.

Requests may be submitted to the Data Controller or the Data Protection Officer using the contact information provided in this privacy notice.

The data subject also has the right to file a complaint with the Data Protection Authority pursuant to Article 77 of the GDPR.

19. Changes to the Privacy Policy

The Municipality of Monte Sant’Angelo reserves the right to update this privacy policy at any time to bring it into compliance with regulatory, organizational, or technological changes. Any updates will be posted on this page, along with the date of the last update.