Privacy Policy

Privacy Policy pursuant to art. 13-14 of Regulation (EU) 2016/679 of the European Parliament and of the Council

This page provides information concerning the processing of personal data of users who browse this website. The information provided does not concern other sites, pages or online services accessible via hypertext links referring to resources external to the domain

More specific policies are provided or referenced for specific services.

Data Controller

AGID – Agenzia per l’Italia digitale

Address: Via Liszt 21 - 00144 Rome, Italy

PEC address:

Contact details of the Data Protection Officer

Address: Via Liszt 21 - 00144 Rome, Italy

Email address:

Italian Data Protection Authority


Categories, sources, and purposes of personal data processing

During their normal operation, the ICT systems and software procedures used to operate the website acquire, through technical cookies or automatic logs, personal data whose transmission is implicit in the use of Internet communication protocols.

These data, necessary for the use of the web services, are processed exclusively for the technical management of the site.

Cookies and other tracking systems

Cookies are small text files that the website sends to the user’s terminal, where they are stored, and then retransmitted to the same website on the next visit.

This site uses:

  • technical cookies;

  • analytics cookies used to collect information, in aggregate form, on the number of users and how they visit the website

The cookies used by the website do not allow any identification or profiling of the user, who can, in any case, choose to enable or disable cookies, by appropriately settings their navigation browser according to the instructions made available by the relevant suppliers as follows:

Third-party services

This website uses the following third-party services:

  • GitHub Pages is a platform for the publication of static web pages generated from source code hosted on a GitHub repository. Please refer to the privacy policy for GitHub products for further details.

  • Google Search Console is a Google service that allows website managers to measure SEO positioning and optimise visibility. Please refer to the privacy policy for Google products for further details.

  • Web Analytics Italia is a platform that offers real-time statistics about interactions with a public administration website, providing operators with detailed reports. The data are collected and processed by the centralised platform Web Analytics Italia (WAI). WAI hosts the statistical data of the websites of the Italian public administrations participating in the project. Please refer to the WAI privacy policy for further details.

Data provided by the data subjects

Sending messages to the contact addresses advertised on the website involves the acquisition of all personal data voluntarily included by the sender in the text of their communication, processed for the sole purpose of the requested response. Personal data are processed for institutional activities related to the role of AGID as national PEPPOL Authority. As far as the email box is concerned, AGID is supported by Intercent-ER, Agenzia per lo sviluppo dei mercati telematici of the Emilia-Romagna Region, as a data processor pursuant to art. 28 of the Regulation.

The legal basis is identified in the execution of the tasks of public interest or in any case connected to the exercise of public powers by AGID, pursuant to article 14-bis of Legislative Decree no. 82/2005 (“Codice dell’Amministrazione Digitale”), as well as in AGID’s role as national PEPPOL Authority. AGID, indeed, is the Italian national PEPPOL Authority as a result of joining OpenPEPPOL, an international association whose members belong to both the public and private sectors and which is responsible for developing and maintaining the PEPPOL technical specifications, building blocks, services, and implementation across Europe.

Categories of processors of personal data

AGID will process personal data independently through its own staff.

The personal data processors are also providers of technical and telematic services if they are designated as such.

AGID, as national PEPPOL Authority, does not transfer any personal data to third countries or to international organisations.

Retention period of personal data

Browsing data are deleted immediately after the related statistical processing and, in any case, are not kept for more than 15 days from the time of collection, without prejudice to any need for the detection of crimes by the judicial authority.

The personal data provided by the data subjects are kept for the time strictly needed for the management and feedback of the communication received.

Rights of the data subjects

Data subjects have the right to obtain access, correction or cancellation access to their personal data, the limitation of the related processing, the right to object and the right to data portability, where the conditions exist.

Without prejudice to any other administrative or judicial appeal, it is the right of the data subject to file a complaint with the Data Protection Authority if it is deemed that the processing of their data violates the Regulation.

AGID guarantees that no exclusively-automated form of decision-making that entails legal effects on the data subjects is in place.