EXTENSIVE INFORMATION ON THE USE OF COOKIES
“OPEN 2.0”

In accordance with European Regulation 2016/679 (hereinafter referred to as “GDPR”) and national legislation, the Lombardy Region (hereinafter also referred to as the “Data Controller”), in its capacity as Data Controller, provides below the extended information on cookies installed on the “OPEN 2.0” website (hereinafter also referred to as the “Site”) with the aim of illustrating the types and methods of use as well as providing information on actions to refuse or eliminate present cookies.

1. What are cookies?

Cookies are small text files that web applications send to visitors for various purposes such as storing technical information and user preferences.
Cookies can be classified according to various considerations:

  • Depending on the site that generates them: first-party cookies installed directly by the operator of the site you are visiting or third-party cookies set by a website other than the one you are visiting.
  • Depending on the purpose of use: technical cookies, cookies used to manage the technical aspects necessary to provide a service requested by the user, such as the navigation of a website, the management of a user's session or the automatic recognition of the user's preferred language; profiling cookies, cookies used to track and monitor the user's navigation on the web and create profiles by studying their tastes, habits, choices, etc.. With these cookies, specific and personalised advertising messages can be transmitted to the user's terminal.
  • Depending on the duration: they can be stored in your device permanently and have a variable duration (so-called permanent or persistent cookies) or disappear when you close your browser or have a limited duration (so-called session cookies).

2. Which cookies are used on this Site and for what purposes

This Site uses the following categories of cookies

a) Type of cookies used: first-party cookies
Below is a list with identifier, type, description and purpose and duration for each of the cookies used:

Cookie identifier Cookie type Cookie description and purpose Cookie duration
_csrf-frontend Technical and functionality cookies They ensure the security of visitors' navigation by preventing the falsification of requests among sites Session
SESS# Technical and functionality cookies They preserve the user's status on the different pages of the site Session

b) Type of used cookies: third-party cookies
Below is a list with identifier, type, description and purpose and duration for each used cookie. The list also shows the relevant owners with links to the relevant privacy policy:

Cookie identifier Cookie type Cookie description and purpose Cookie duration Source and Link to Privacy Policies
rc::a Technical and functionality Used to distinguish between humans and robots Persistent Google (https://policies.google.com/privacy?hl=en-GB)
rc::c Technical and functionality Used to distinguish between humans and robots Session Google (https://policies.google.com/privacy?hl=en-GB)
_ga Anonymous third-party analytical cookie Unique ID registration to generate statistical data on the use of the site by the user 2 years Google Analytics (https://policies.google.com/technologies/cookies?hl=en-GB)
_gat Anonymous third-party analytical cookie It limits the frequency of requests 1 day Google Analytics (https://policies.google.com/technologies/cookies?hl=en-GB)
_gid Anonymous third-party analytical cookie Unique ID registration to generate statistical data on the use of the site by the user 1 day Google Analytics (https://policies.google.com/technologies/cookies?hl=en-GB)

3. How to select and unselect cookies

Disabling the use of cookies
You can disable all cookies stored on your hard drive by accessing the cookies section of your browser. To do this, you can follow the instructions specific to the browser you are using:

If the browser you are using is not one of those offered, select the “Help” function on your browser to find information on how to proceed.

Activating anonymous navigation mode With this function now available in all browsers, you can surf the Internet without saving any information about the sites and pages visited.
However, we point out that browsing data, even when this functionality is activated, is recorded and stored by website operators and connectivity providers.

Deleting cookies directly Currently almost all browsers allow you to delete all installed cookies.
For more instructions, see your browser's help or visit one of the following links:

For more instructions, see your browser's help or visit one of the following links:

4. Data controller

The Data Controller is the Lombardy Region, in the person of its legal representative pro tempore, with registered office in Piazza Città di Lombardia no. 1 (20124) Milan, Italy.

5. Data Protection Officer (DPO)

You can contact the Data Protection Officer (DPO) at the following e-mail address: rpd@regione.lombardia.it.

6. Scope of knowledge and dissemination of data

The data collected using cookies may be processed by employees and collaborators of the Data Controller, duly authorised and instructed in the protection of personal data, pursuant to art. 29 of GDPR. Personal data will not be disseminated in any way.

7. The rights of users pursuant to Articles 15 to 22 of European Regulation 2016/679

At any time, the user may request and obtain from the Data Controller, pursuant to Articles 15 to 22 of European Regulation 2016/679, the rectification, integration or cancellation (so-called right to be forgotten) of his/her personal data; in the cases provided for by the GDPR, the right to obtain the limitation of the processing and the right to data portability, the right to object to the processing of personal data, including profiling.

8. Right of complaint

The data subjects who believe that the processing of their personal data carried out through the “OPEN 2.0” Portal is in violation of the provisions of the GDPR, have the right to lodge a complaint with a Supervisory Authority for the protection of personal data, as provided for in art. 77 of the GDPR, or to take appropriate legal action (article 79 of the GDPR).