CityOpenSource collects, uses and is responsible for certain personal information about users in order to provide its services through the platform and its services (website and app), either directly or through third parties. When we do so, we are regulated by the General Data Protection Regulation that applies throughout the European Union, and we are responsible as "controllers" of such personal information for the purposes of those laws. Protecting personal data is of the utmost concern for CityOpenSource. Below, we explain what information we collect and how it is used.

Personal Data Controller and Data Processor

CityOpenSource srl, via G. Carducci 29, 80121 - Napoli, Italy – P.IVA 09544141212, REA NA 1039775.

Mail: hello@cityopensource.com

CityOpenSource collects, uses, and is responsible for certain personal information about users in order to provide its services through the platform and its services (website and app), either directly or through third parties. When we do so, we are regulated by the General Data Protection Regulation that applies throughout the European Union, and we are responsible as "controllers" of such personal information for the purposes of those laws. Protecting personal data is of the utmost concern for CityOpenSource. Below, we explain what information we collect and how it is used.

Data collection

CityOpenSource collects and stores any information that you voluntarily and explicitly provide through our services or that you provide to us in any other way using our services. Personal data is freely provided by the user, while usage data is collected automatically during the use of the website and/or app, also through permissions enabled on the user's device. If not otherwise specified, all required data are mandatory (indicated by an asterisk). If you refuse to provide them, it may be impossible to use the Service offered by CityOpenSource. In cases where some data are indicated as optional, users are free to refrain from providing the data, but this may affect the use of some services, limiting the functionality of the applications. In order to use our services with all the features, the user must first register, and during registration he must provide his e-mail address and choose a username. Additionally, you may choose to voluntarily add additional information to your profile, such as your first name, last name, a profile photo, biography, and links to your personal social media profiles and website.

Information we collect from other sources

We obtain information from third-party sources. For example, log data such as IP address, operating system, browser type, and cookies are also collected for system administration and monitoring purposes, particularly to combat SPAM or malware. These are statistical data about our users' browsing actions and patterns. We will use this data anonymously to improve and evaluate our range of services.

When using location-based services, CityOpenSource collects and processes information about the location of the receiving device. This is used in particular to improve and personalize our service.

Purpose of the processing of the collected data

User data is collected to allow the Data Controller to provide their Services, comply with legal obligations, respond to requests or executive actions, protect their rights and interests (or those of users or third parties), detect fraudulent or malicious activities, as well as for the following purposes: registration and authentication, contact management, sending messages and notifications, location-based interactions, content preferences and commenting, interaction with social networks and external platforms, access to third-party service accounts, user database management, tag management, hosting and backend infrastructure, application and infrastructure protection, security and monitoring, traffic optimization and distribution, permissions for accessing personal data on the user's device, protection against SPAM, advertising, remarketing and behavioral targeting, platform and hosting services, statistics and analysis, display of content from external platforms

The use of Cookies - or other tracking tools - by this Application or by the third-party service providers used by this Application, unless otherwise specified, is to provide the Service requested by the User, as well as for the additional purposes described in this document and in the Cookie Policy.

We will also use personal data to:

• verify identity and validate registration to our applications;
• allow access and/or contribution to our collaborative mapping project and use interactive features of our service, when the user chooses to do so;
• receive feedback and comments on content and ensure that our website's content is presented in the most effective way;
• provide, maintain, and improve our products and services, including improving the technology and algorithms that power our services and developing new products and services;
• personalize and enhance the experience on our services;
• send notifications, messages, and technical, security, support, and administrative alerts;
• respond to comments and questions and investigate content flagged by users;
• communicate information about products, services, and events that we or others offer and provide information we believe may interest you;
• monitor and analyze trends, usage, and activity in relation to our services and products, including through automated processes
• facilitate contests, challenges, games, and promotions and process and provide registrations and prizes;
• detect, investigate, and prevent security incidents and other harmful, deceptive, fraudulent, or illegal activities and protect the rights and property of CityOpenSource and others
• debug to identify and repair errors in our services;
• pursue any other purpose described to the user at the time of participation in projects.

When the user registers with CityOpenSource, we ask for consent to process their data as described above. We rely on this consent as the legal basis on which we collect and use your personal data.

Information sharing

We share information about you in the following circumstances or as otherwise described in this policy.

CityOpenSource shares information with vendors, service providers, and affiliates that provide services for us, such as companies that assist us with web hosting, data annotation and processing, email delivery, and customer service. Such sharing occurs between CityOpenSource and our current and future parent, affiliate, and subsidiary companies and other companies under common control and ownership.

We share information if we believe disclosure is in accordance with, or required by, any applicable law or legal process, including legitimate requests by public authorities to meet national security or law enforcement requirements.

We share information if we believe your actions are inconsistent with our user agreements or policies, or if we believe it is necessary to protect the rights, property, and safety of Cityopensource or others.

With your consent or at your direction. For example, if you submit images or post content in a public area of our Services, we share this information (e.g., through our APIs or publicly on our Services).

We also share aggregated and anonymized information that cannot reasonably be used to identify the user.

We share information, upon request, with the user-administrator who can use it in accordance with the aforementioned privacy policy.

to obtain further detailed informations on data sharing the user can refer to the relevant sections on the website www.cityopensource.com

Place of data storage

The user's personal data will be stored on servers located within the European Union. Your personal data may be transferred to a country other than the one in which you are located. To obtain further information on the place of processing, the User can refer to the section relating to the details on the processing of Personal Data.

The user has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization governed by public international law or constituted by two or more countries, such as for example the UN, as well as regarding the security measures adopted by the Data Controller to protect the data.

The User can check whether one of the transfers described above takes place by examining the section relating to the details on the processing of Personal Data or request information from the Data Controller by contacting him at the details indicated at the beginning.

Storage period

The Data are processed and stored for the time required by the purposes for which they were collected.

• Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.
• Personal Data collected for purposes attributable to the legitimate interest of the Data Controller will be retained until such interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the treatment is based on the User's consent, the Owner can keep the Personal Data for longer until said consent is revoked. Furthermore, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the Personal Data will be deleted. Therefore, upon expiry of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised

User rights

According to the General Data Protection Regulation (GDPR) as a user you have the right to:

• obtain the cessation of treatment in cases where your personal data are processed for direct marketing purposes, also in relation to services identical to those already provided by our company (so-called right of opposition);
• obtain information in relation to the purposes for which the personal data are processed, the period of processing and the subjects to whom the data are communicated (so-called right of access);
• obtain the rectification or integration of inaccurate personal data concerning the interested party (so-called right of rectification);
• obtain the cancellation of personal data concerning the interested parts;
• obtain that the personal data concerning the interested party are only stored, without any other use being made of them, in the following cases: the interested party disputes the accuracy of the personal data, for the period necessary to allow us to verify the accuracy of such personal data; the personal data are necessary for the assessment, exercise or defense of a right in court; the interested party has opposed the processing and is awaiting verification of the possible prevalence of our legitimate reasons for the processing with respect to those of the interested party (so-called right of limitation);
• receive, in a commonly used format, readable by an automatic and interoperable device, the personal data concerning the interested party, if they are processed by virtue of a contract or on the basis of your consent (so-called portability right).

The interested party also has the right to contact the Guarantor for the protection of personal data, in order to assert his rights in relation to the processing of personal data.

For questions regarding the collection, processing or use of personal data, disclosure, correction, blocking or deletion of data please contact: hello@cityopensource.com

Keep your personal information safe

We have adequate security measures in place to prevent your personal information from being accidentally lost, used or accessed in an unauthorized manner. We also have procedures in place to deal with any suspected data security breach. We will notify you and any applicable regulators of a suspected data security breach where we are legally required to do so.

This document contains information about the technologies that allow this Application to achieve the purposes described below. These technologies - defined as "Tracking Tools" - allow the Owner to collect and save information (for example through the use of Cookies) or to use resources (for example by running a script) on the User's device when the latter interacts with this Application. Some of the purposes for which Tracking Tools are used may also require the User's consent. If consent is given, it can be freely revoked at any time by following the instructions contained in this document.

This Application uses Trackers managed directly by the Owner (commonly called "first-party" Trackers) and Trackers that enable services provided by third parties (commonly called "third-party" Trackers). Unless otherwise specified herein, such third parties have access to their respective Trackers. Duration and expiry of Cookies and other similar Tracking Tools may vary depending on what is set by the Owner or by each third party provider. Some of them expire at the end of the User's browsing session.

In addition to what is specified in the description of each of the categories below, Users can obtain more detailed and updated information on the duration, as well as any other relevant information - such as the presence of other Trackers - in the privacy policies of the respective third-party providers (via the links made available) or by contacting the Data Controller. For more information about Californian consumers and their privacy rights, Users can consult the privacy policy.

Activities strictly necessary to ensure the functioning of this Application and the provision of the Service

This Application uses Cookies commonly called "technicians" or other similar Tracking Tools to carry out activities strictly necessary to ensure the functioning or provision of the Service.

Simple interactions and functionality

This Application uses Tracking Tools to allow simple interactions and activate features that allow Users to access certain resources of the Service and simplify communication with the Owner.

Contact the user

Mailing list or newsletter (this Application)

By registering with the mailing list or newsletter, the User's email address is automatically added to a list of contacts to which email messages containing information, including commercial and promotional information, relating to this Application may be sent. The User's email address could also be added to this list as a result of registering with this Application or after making a purchase. Personal Data processed: nickname, Cookie, usage data, email, name and surname (if provided)

Measurement

This Application uses Tracking Tools to measure traffic and analyze User behavior with the aim of improving the Service

Anonymous statistics services

The services in this section allow the Owner to process and manage statistics anonymously thanks to the use of first-party Tracking Tools. Google Analytics with anonymized IP (Google Ireland Limited) Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. This integration of Google Analytics makes your IP address anonymous. The anonymization works by shortening the IP address of the Users within the borders of the member states of the European Union or in other countries adhering to the agreement on the European Economic Area. Only in exceptional cases will the IP address be sent to a Google server and shortened within the United States. Personal Data processed: Cookies and Usage Data. Place of processing: Irlanda -

Statistics

The services contained in this section allow the Data Controller to monitor and analyze traffic data and are used to keep track of User behaviour. Google Analytics (Google Ireland Limited) Google Analytics is a web analytics service provided by Google Ireland Limited ("Google"). Google uses the Personal Data collected for the purpose of tracking and examining the use of this Application, compiling reports and sharing them with other services developed by Google. Google may use the Personal Data to contextualize and personalize the ads of its advertising network. Personal Data processed: Cookies and Usage Data. Place of processing: Irlanda –