Privacy Policy

INFORMATIONAL ON THE PROCESSING OF PERSONAL DATA

my.lugano.ch, MyLugano App, MyLuganoCard and MyLuganoPass with explanations, comments and graphic icons

‍

What is it about?

When you use our site my.lugano.ch, the myLugano App, the myLuganoCard or the myLuganoPass, the City of Lugano collects and processes information about you (so-called “personal data”). The purpose of this page is to inform you about the personal data collected, the processing carried out, the purposes pursued, the recipients of the data and their possible transfer abroad. Considering that you have a wide choice of services available, you will find below a general section with information that applies to all services and various special sections with specific information for individual services. Please read everything calmly and if you have any doubts write to us (my@lugano.ch) or call us (+41 58 866 48 00). To help you, we have provided icons representing the various treatments (you can consult the legend) hither). We wish you a profitable and conscious use of the services offered by the City of Lugano!

Who are we and how can you contact us?

It is the City of Lugano (CH) that establishes the purpose and means of the processing of your personal data. To communicate with the Municipality, use the following contacts: (i) postal address: Lugano Town Hall, Municipal Chancellery, Piazza della Riforma 1, 6900 Lugano; (ii) Tel. +41 58 866 48 00; (iii) e-mail: my@lugano.ch.

‍

Our philosophy on the use of personal data

The City of Lugano is limited to collecting and using the personal data necessary to manage the platform in an easy and secure manner. We do not profile you, we do not monitor your behavior, we do not transfer your personal data to third parties and we do not allow third parties to offer you personalized advertising. To expand and improve our services, we limit ourselves to analyzing the use of the services in an aggregated manner, that is, ensuring the anonymity of the interested users. In addition, we carry out the processing required by law.

Where necessary, we prefer the consent given in an express manner as the legal basis for the processing and we try to carry out all treatments “at home”. Only in exceptional cases, i.e. when the Municipality does not have the necessary technology or skills, are the treatments delegated to carefully selected external suppliers who have assumed strict obligations regarding the protection of personal data. Finally, personal data is processed in Switzerland. Only in exceptional cases, treatments are carried out abroad. This can only happen in States with legislation that adequately protects personal data in accordance with the indications provided by the Federal Data Protection Officer.

‍

Are you a natural person residing in the European Union? Read also here

You came to visit us from abroad, thank you very much!

As you certainly know, Switzerland is not a member state of the European Union (EU), so European law is not directly applicable. Nevertheless, art. 3 paragraph 2 of the General Regulation on the Protection of Personal Data (EU) 679/2016 (hereinafter”GDPR”) specifies that the GDPR applies to subjects established outside the EU in the case of data processing that depends on: (i) offering goods or services to individuals in the EU or (ii) monitoring the behavior of individuals in the EU.

The City of Lugano does not direct its activity to the EU, nor does it monitor the behavior of those who are in the EU, so the GDPR is inapplicable. Don't despair: Swiss law offers adequate protection of your personal data, as established by the European Commission on 26 July 2000 (read the appropriateness decision) hither ).

If subject to the GDPR, this document is valid as information pursuant to and for the purposes of articles 13 and 14. In addition to benefiting from all the protections provided by the GDPR, you can assert your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21, 22 GDPR, by contacting the City of Lugano. You have the right, at any time, within the limits and under the conditions established by the GDPR, to ask the City of Lugano for access to your personal data, the correction, the cancellation of the same, the limitation of the processing concerning you or to object to their processing, as well as to exercise the right to the portability of such data. If the processing is based on Article 6, paragraph 1, letter a) or on Article 9, paragraph 2, letter a) GDPR, you have the right to withdraw your consent at any time. You have the right to lodge a complaint with the competent Supervisory Authority. In the case of a request for data portability, the City of Lugano provides you, in a structured format commonly used and readable by an automatic device, the personal data concerning you, without prejudice to paragraphs 3 and 4 of art. 20 GDPR.

Subject to any other administrative and judicial remedy, if you believe that the processing of your data violates the provisions of the GDPR, you have the right to lodge a complaint with the competent Supervisory Authority for the protection of personal data (Switzerland: IFPD │ EU: list of national authorities).

Under no circumstances, references to the GDPR are to be understood as voluntary subjection to this legislation, respectively to the surveillance and/or decision-making power of any foreign authority (with respect to Switzerland).

‍

Are you under 18? Read also here

Processing based on your consent is lawful only if you are at least 16 years old. If you are under 16, your consent must be given or ratified by your parents (or their guardian). This is the case, in particular, if you use the MyLuganoCard, which can be issued starting from 14 years of age, to obtain discounts on entrance tickets to establishments and city events for young people.

Even if we make reasonable efforts and taking into account the available technologies to verify that the consent given by parents, where mandatory, is present and effective, you have the obligation to declare your correct age and to refrain from giving consent without the involvement of your parents.

‍

General information (applies to all services)

Applicable law. As part of the provision of services, the Municipality carries out an economic activity that does not derive from a sovereign power. The processing of personal data is therefore governed by federal data protection law (LPD, RS 235.1).

Consultation requirement. The information varies over time because data processing evolves depending on the services offered. Since the changes are published only online, it is your duty to visit this page every time you use the services in such a way that you are always up to date.

What other rules apply to services? This is the information on the processing of personal data. The contractual clauses, prices and other conditions applicable as part of the provision of services can be viewed by clicking hither.

What is 'personal data'? This is all information concerning an identified or identifiable natural person, such as name, surname, e-mail, telephone number, IP address, personal interests, purchases made, sites visited, location and movement data, etc.

What is a 'data worthy of special protection'? These are particularly sensitive personal data: (i) data concerning religious, philosophical, political or trade union opinions or activities, health, the intimate sphere or membership of a race or ethnicity, (ii) genetic data, (iii) biometric data that uniquely identify a natural person, (iv) data concerning administrative and criminal prosecution and sanctions, (vi) data concerning social assistance measures.

Help us protect you: it's your duty. The use of the Internet and e-mail is at risk. Protect your devices and manage your passwords properly. Follow the safety recommendations of the experts. Email only information that you would be willing to make public. Remember that only you are responsible for the activities you carry out through your devices, your accounts, your App and your cards. Given the nature of the Internet as an “open network”, we cannot guarantee that your data will not be intercepted or acquired by unauthorized third parties.

Authorization to use e-mail. By providing us with your e-mail address, unless otherwise expressly instructed, you authorize us to transmit to you by uncertified and unencrypted e-mail, assuming the related risks, the documents and information requested, including any personal data or confidential information.

Duration of storage of personal data. When the purposes for which the data was collected are achieved, we destroy or anonymize your data. Any statutory storage obligations are reserved. You can request detailed information on the personal data storage policy as part of a specific treatment from the IT Division of the Municipality of Lugano or by writing to privacy@lugano.ch..

Legal basis for the processing of personal data. A processing of personal data is lawful if it is based on the consent of the interested person, on a predominant public or private interest or on the law. A predominant private interest exists, in particular, if the processing is necessary in view of the provision of goods and/or services requested by the user. Where required by law, for example in the case of analysis and marketing or advertising activities that involve user profiling or automated decisions or even of data processing activities worthy of particular protection, the Municipality will submit a request for consent together with the information through electronic channels (online or by e-mail) or analog (ordinary mail or authorization forms signed on site).

External service providers in contact with personal data. Sometimes it is necessary to involve external suppliers in order to provide you with the requested services in the best possible way. External suppliers have access to data only to the extent strictly necessary for the performance of their tasks, subject to the assumption, by agreement, of strict confidentiality obligations and non-use in relation to personal data. We only use service providers established in Switzerland or in countries that adequately protect personal data. Your personal data is stored in Switzerland.

Without prejudice to the data transmissions required by law, the data may be communicated to recipients belonging to the following categories: (a) subjects who provide services for the management of information and telecommunications systems functional to the provision of the platform (in particular, these are currently the following services: booking platform, e-commerce platform (payment system integration), evaluation and optimization of the user experience, hosting and cloud computing, payment services, mail electronic and Newsletter management service); (b) subjects who provide services in the legal, accounting, administrative, tax and auditing fields.

The complete and updated list of external suppliers is available for viewing at the Municipal Chancellery of the City of Lugano. For security reasons, certain information may be anonymized or partially masked.

‍

If you use our site, read also here

Showcase on events, events and promotions. When you visit our site looking for information on events, events and promotions, the processing of personal data can be summarized as follows:

‍Data collected: IP address; technical and analytical-statistical cookies (see dedicated section); characteristics of the navigation program (name, language, installed plug-ins); pages visited, length of stay, page of origin (e.g. google search, previous site); approximate location based on the IP address (generally corresponding to the headquarters of your Internet access provider); unique identifier of the mobile device used.
‍Purposes pursued: (i) allow navigation on the site; (ii) perform analysis and statistics on the use of the site for the purpose of optimizing the security, usability and quality of services and contents, as well as the introduction of new services and contents.
‍Recipients: City of Lugano and its service providers.
‍Transfers abroad: nobody. Booking and purchase of tickets and services. When you book or buy tickets or services on the site, you must fill in the online form and make the requested payment. The processing of personal data can be summarized as follows:
‍Data collected: those you enter in the online form and during the payment process (currently: name, surname, billing address, e-mail, telephone number and data relating to the payment method).
‍Purposes pursued: (i) booking, purchase and payment of tickets or purchases; (ii) calculation of the cost of the ticket according to age group; (iii) sending an e-mail confirming the purchase; (iv) administration, accounting and internal organization.
‍Recipients: City of Lugano and its service providers.
Transfers abroad: none.
‍Attention: online payments are managed independently by an external payment service provider; when you access this platform, read the relevant information on the processing of personal data.
Newsletter subscription. See dedicated section.
Marketing and advertising. See the dedicated section.
Social media plug-ins.See the dedicated section.

Pandemic and contact tracing. See the dedicated section.

‍

If you subscribe to our newsletter, read also here

The newsletter is a free and optional service made available to all interested parties. To receive it, you must sign up by providing your e-mail address and specifying the areas of interest. Cancellation from the list of recipients is possible at any time and with immediate effect by activating the dedicated link at the bottom of each e-mail.

The Newsletter does not track you and does not profile you based on the contents or the links activated. On the other hand, we carry out statistical analysis in an aggregated manner (guaranteeing you anonymity) to evaluate the general interest in the proposed contents and events.

Your e-mail address is not transferred to unrelated third parties. For technical reasons, we can delegate the management of the Newsletter to an external provider, which must be established in Switzerland or in a country that adequately protects personal data according to the indications provided by the Federal Data Protection Officer.

‍

If you use our Mobile App, read also here

Introduction. You can use the MyLugano Mobile App free of charge to inform you about current events, events and promotions, to book and/or buy tickets, goods and services, to digitally manage the MyLuganoCard and the MyLuganoPass and to accumulate and spend “LVGApoints”. The App does not geolocate you, does not track your movements, does not monitor you and does not profile you. The App implements cookies (see dedicated section).

Showcase on events, events, shops and promotions. When you use the App in search of information on events, events and promotions, the processing of personal data can be summarized as follows:

Data collected: IP and MAC address of the mobile device; technical and analytical-statistical cookies (see dedicated section); unique identifier of the mobile device, those that you enter in the App form and during the payment process (currently: name, surname, billing address, e-mail, telephone number and data relating to the payment method).
Purposes pursued: (i) allow the use of the App; (ii) perform statistical analysis on the use of the site for the purpose of optimizing the security, usability and quality of services and content, as well as the introduction of new services and content.
Recipients: City of Lugano and its service providers.
Transfers abroad: nobody.

‍Booking and purchase of tickets and services. When you book or purchase tickets or services through the App, you must fill in the online form (which will be pre-filled in the following logins) and make the requested payment. The processing of personal data can be summarized as follows:

Data collected: those that you enter in the App form and during the payment process (currently: name, surname, billing address, e-mail, telephone number and data relating to the payment method).
Purposes pursued: (i) booking, purchase and payment of tickets or services; (ii) calculation of the cost of the ticket according to age group; (iii) sending an e-mail confirming the purchase; (iv) administration, accounting and internal organization.
Recipients: City of Lugano and its service providers.
Transfers abroad: nobody.
Attention: online payments are managed independently by an external payment service provider; when you access the payment platform, read the relevant information on the provider's personal data processing.

Virtualized wallet for MyLuganoCard or MyLuganoPass. When you virtualize your MyLuganoCard or your MyLuganoPass through the App, personal data processing can be summarized as follows:

Data collected: those that you enter in the virtualization form (currently: card number, expiration date, first name, last name, address, e-mail, telephone number).
Purposes pursued: (i) virtualize (through a PIN sent by ordinary mail to your home) the MyLuganoCard or the MyLuganoPass through a digital certificate; (ii) allow you to become legitimate with business partners; (iii) renew the certificate annually (through a PIN sent by e-mail); (iv) send the e-mail confirming the transaction; (v) invoicing; (vi) administration, accounting and internal organization.
Recipients: City of Lugano and its service providers.
Transfers abroad: nobody.

LVGA Points. When you accumulate or spend “LVGApoints” through the App, the processing of personal data can be summarized as follows:

Data collected: data relating to the crediting and debiting of “LVGApoints”.
Purposes pursued: (i) accounting for available balance “LVGApoints”; (ii) execution of payments in “LVGApoints”.
Recipients: City of Lugano and its service providers.
Transfers abroad: nobody.

Marketing and advertising. See the dedicated section .

Pandemic and contact tracing. See the dedicated section .

‍

If you use the MyLuganoCard or the MyLuganoPass, read also here

MyLuganoCard and MyLuganoPass in digital version. The digital management of loyalty cards is carried out through the App, so proceed to dedicated section for the related information.

MyLuganoCard and MyLuganoPass in analog version (physical card). If you use the analog versions of the MyLuganoCard and the MyLuganoPass (cards with “QR Code”), the processing of personal data can be summarized as follows:

Data collected: those you enter in the loyalty program registration form (currently: name, surname, date of birth, address, e-mail); number and expiry date of the MyLuganoCard or MyLuganoPass; number of accumulated “LVGApoints” (available balance); charges and credits of “LVGApoints”.
Purposes pursued: (i) virtualize (through a PIN sent by ordinary mail to your home) the MyLuganoCard or the MyLugano Pass through a digital certificate (ii) allow you to become legitimate with business partners and (iii) renew the certificate annually (through a PIN sent by e-mail); (iv) sending an e-mail confirming the transaction; (v) invoicing; (vi) administration, accounting and internal organization.
Recipients: City of Lugano.
Transfers abroad: nobody.

LVGA Points. When you accumulate or spend “LVGApoints” through the App, the processing of personal data can be summarized as follows:

Data collected: data relating to the crediting and debiting of “LVGApoints”.
Purposes pursued: (i) accounting for available balance “LVGApoints” (ii) execution of payments in “LVGApoints”.
Recipients: City of Lugano.
Transfers abroad: nobody.

Marketing and advertising. See the dedicated section

‍Pandemic and contact tracing. See the dedicated section

‍

We use your personal data for direct marketing purposes: read also here

Yes, but only after obtaining your express consent, unless you have already used our services and new similar services or promotions related to similar services are available. In any case, we do not transfer your data to third parties, we do not analyze your online behavior and we do not cross the data with information from external sources to offer you personalized offers. The processing of personal data can be summarized as follows:

Data collected: first name/last name; telephone number; home address; e-mail; information on the products and/or services purchased; sectors of preference indicated when subscribing to the newsletter; cookies.
Purposes pursued: manual and automated direct marketing through (i) sending informational material - advertising, surveys, events and initiatives concerning products and/or services purchased previously or according to the interests communicated by the user; (ii) carrying out analysis and statistics for the purpose of optimizing the usability and quality of services and contents, as well as the introduction of new services and contents (in particular through the newsletter and cookies; see dedicated sections).
Mode of communication: SMS, telephone calls with operator, paper mail and e-mail.
Recipients: City of Lugano; Google as a provider of analytical-statistical cookies limited to the use of the site and the App (see section dedicated to cookies); Newsletter manager, limited to related data (see section dedicated to the Newsletter).
Transfers abroad: none; for cookies, see dedicated section

‍

We use 'cookies' to provide you with the best possible user experience: read also here

What are cookies? Cookies are text files placed in your system by sites or servers when you browse the web or use the Apps. Thanks to cookies, these sites or servers are able to recognize your browser while browsing or later if you return. Cookies help to improve your online experience, for example by keeping the preferences you have expressed over time or by avoiding having you log in at every page change. Cookies can also be used to monitor and track your online behavior in order to offer you tailor-made advertising.

The types of cookies. Cookies are divided into various types. When the person who places the cookie on your system coincides with the site visited, the cookie is called a “first party”. Otherwise, it is called a 'third party'. “Session” cookies are automatically deleted when you close your browser, while “persistent” cookies remain stored until their expiration date. “Technical” cookies make it possible to browse the web and provide the services requested by the user. “Analytical-statistical” cookies are assimilated to technical cookies when they are used directly by the site to collect information, in aggregate form, on the number of users and on how they interact with the site or the App. “Profiling” cookies are third-party cookies used to profile you based on your online behavior for the purpose of submitting personalized advertisements to you.

What cookies does the platform implement? First of all, the platform implements first-party technical cookies for the purpose of customizing the platform configuration, keeping browsing active, managing electronic transactions, ensuring security, and for system administration purposes. Secondly, it implements a third-party analytical-statistical cookie (Google Analytics) for the purpose of analyzing the use of the platform by users and the traffic flow, both for the purpose of optimizing the offer of products and services and of improving the usability of the site and the App. Google's analytical-statistical cookie is managed in a “masked” mode, in the sense that the last octet of your IP address (v4), respectively the last 80 bits of the IP address (v6), is set to 'zero'. Your IP address is masked as soon as the data is received by the Analytics collection network, before any storage or processing takes place.

List of active cookies, purpose and duration. The platform implements the following cookies.

a) First-party cookie: • Name: Prenota_Lugano_SessionType: TechnicalPurpose: Creation of the user sessionDuration: 120 minutesNecessity for the purpose of using the Site: YES, generation of the CSRF-TOKEN• Denomination: XSRF-TokenType: TechnicalPurpose: Cross-site request forgeryDuration: 120 minutesNecessity for the purpose of using the Site: YES, for previous security reasons (protection from one-click attacks) • Name: Prenota_Lugano_CookieLawType: TechnicalPurpose: Acceptance Storage of cookies, facilitate the usability of the siteDuration: 1 Year Necessity for the purpose of using the Site: NO• Denomination: Prenota_Lugano_AnagraficTypology: TechnicalPurpose: Storing personal data, self-completion of the booking request form, facilitating site usability Duration: 1 yearNecessity for the purpose of using the Site: NO• Denomination: LocaleInfoType: TechnicalPurpose: Cookie for country, language, currency management Duration: 1 dayNecessity for the purpose of using the Site: YES• Denomination: .aspnet.applicationCookietype:: Technical cookie for the ASP.NET platformDuration: 14 daysNecessity for the purpose of using the Site: YES• Denomination: .aspnet.TwoFactorRememberBrowserType: TechnicalPurpose: Technical cookie of the ASP.NET platformDuration: 14 daysNecessity for the purpose of using the Site: YES• Denomination: CookieAlarmType: TechnicalPurpose: Technical cookie for managing the cookie warning pop-upDuration: 1 dayNecessity for the purpose of using the Site: YES• Name: PopulateCheckoutModelAddressesType: TechnicalPurpose: Technical cookie to display the user's address on the shopping cart screenDuration: 1 dayNecessity for the purpose of using the Site: YES• Name: PopulateCheckoutModelAddressesType: TechnicalPurpose: Technical cookie to display the user's address on the shopping cart screenDuration: 1 dayNecessity for the purpose of using the Site: YES• Name: PopulateCheckoutModelAddressesType: CookieAlarmType: TechnicalPurpose: Technical cookie to display the user's address on the shopping cart screen: 1 day Necessity for the purpose of use of the Site: YES• Denomination: sl_gwpt_show_hide_tmpType: TechnicalPurpose: Technical cookie of the ASP.NET platform Duration: SessionNecessity for the purpose of using the Site: YES• Denomination: SL_WPTGlobTipTmpType: TechnicalPurpose: Technical cookie of the ASP.NET platform Duration: SessionNecessity for the purpose of using the Site: YES• Name: _RequestVerificationTokenType: TechnicalPurpose: Cookie to associate the user with the cartDuration: SessionNecessity for the purpose of using the Site of the Site: YES• Denomination: AIType: TechnicalPurpose: Cookie to identify the user hooked to the cartDuration: 3 daysNecessity for the purpose of using the Site: YES• Name: UserSessionIDType: TechnicalPurpose: Cookie to identify the user attached to the cartDuration: 1 dayNecessity for the purpose of using the Site: Yes) Third-party: • Name: Google Analytics (GA) Type: analytical — statisticalPurpose: user identification on multiple sessions for analytical — statistical purposes; tracking and analyzing the use of the site; compiling reports and sharing them (in a “disguised form see”); above) with other services developed by GoogleDuration: 1 yearNecessity for the purpose of using the Site: No refer to Google's Privacy Policy: linkingPossibility of deactivation or cancellation, technical consequences. The platform offers you the possibility, through the cookie management plug-in on the “home page” of the Site, to freely choose which cookies to authorize and which to reject. You also have the option of denying consent to unnecessary cookies (in particular, Google's analytical-statistical cookie), keeping technical cookies active. You also have the option of setting your browser to inform you about the receipt of cookies or block cookies (in a generalized way or by type of cookie or even by site of origin). The generalized blocking of cookies, since the same also applies to technical cookies, can cause serious limitations in the use of the platform (in particular the site). You have the option to manually delete cookies from the browser memory, as well as to set the browser to automatically delete cookies when you close the program (recommended choice). By default, browsers generally accept cookies. Instructions for disabling or deleting cookies can be found on the website of your browser developer: Microsoft Internet Explorer and Edge; Google Chrome; Apple Safari; Mozilla Firefox and Opera.There are other ways to reduce the risk of online tracking (to be used cumulatively) :• activate the option DoNotTrack on your browser (if available); • use the “private” or “anonymous” browsing functionality of your browser (if available), which prevents cookies from being stored after browsing; • install “privacy plug-ins” on the browser such as, for example, uBlock Origin, Privacy Badger or Ghostery; • exercise your right to be excluded from specific behavioral advertising schemes (for example: DAA Consumer Opt-Out Page; NAI Consumer Opt-Out Page). As far as the App is concerned, you can exercise your right to refuse one or more cookies through the privacy settings of the App itself. By default, technical cookies and Google's statistical-analytical cookie are activated, since the related treatments are based on a predominant private interest of the Municipality of Lugano.

‍

Let's integrate some of the possibilities offered by 'social media': read also here

What are social media 'plug-ins' and 'widgets'? Social plug-ins are small optional software that connect sites to social media to allow you to easily interact with the content you find online (for example: 'Like' or 'Share' on Facebook). Social plug-ins include so-called “widgets”, graphic control elements that are inserted in the corresponding sections of the site to allow you to access the functionality of the social plug-in. With a simple click on the widget, you are able, for example, to disseminate content within your favorite social media. If you activate the social plug-in, your browser makes a direct connection to the servers of the provider of the social plug-in (for example Facebook). For this reason, certain personal information, such as your IP address and the pages you visited, is transmitted to the provider of the social plug-in. This is true even if you are not a registered social media user. If you are a registered user, the social media is able to associate the contents visited with your personal profile. The information published on social media is shown to your contacts or made public (in the case of a public profile).

What precautions have we taken to protect your privacy? Social plug-ins, where exceptionally present, are set up in the “two-click” procedure. With the first click, the plug-in is activated and the connection with the social media concerned is created. The second click activates the actual functionality of the widget (generally, the publication of the content on your social profile).

List of active social media plug-ins, provider, information on the processing of personal data. Google Maps widget (Google Inc.) The platform implements the following social media plug-ins.

Google Maps is a map visualization service managed by Google Inc. that allows the site to integrate such contents into its pages. Personal Data processed: Cookies and Usage Data.

Please refer to Google's Privacy Policy: linking.

How to manage social media plug-ins. If you want to prevent social media from acquiring information about you when you use our platform, you don't have to click on the widgets. In addition, we recommend that you “log out” from social media and delete all browsing data from the browser before visiting the site. Finally, you can prevent plug-ins from starting with small software to be installed on your browser (recommended solution), such as, for example, NoScript or Ghostery.

‍

We use your personal data as part of protection plans against the Covid-19 pandemic: read also here

The rules for fighting the pandemic are constantly changing: for an updated view, we refer you to the relevant page of the Canton of Ticino (links) and that of the Federal Office of Public Health (links).

Of course, the treatments aimed at “contact tracing” are limited to cases in which you have participated in public events or had access to establishments of the City of Lugano by reserving a seat or buying a ticket through the site or the App in application of the respective protection plans mandatory by law.

The processing of personal data can be summarized as follows:

Data collected: name; last name; e-mail; telephone number; information on the services purchased; date of access to the establishment or the event.
Purposes pursued: (i) contact tracing; (ii) notification of risk of contagion.
Communication methods: SMS, telephone calls with operator, e-mail.
Recipients: City of Lugano; Cantonal Medical Office (in case of established risk of infection).
Transfers abroad: nobody.
Shelf life: 14 days from the date of the event, unless required by law of a longer duration.

‍

If you log out of our digital platform, what happens? Read also here

We have no control over the processing of personal data carried out independently by third parties (with respect to the City of Lugano), so we do not carry out any checks, nor do we assume any responsibility in this regard. It is your duty to inform yourself about the treatments carried out by these third parties before buying goods or services, visiting sites, using applications or devices.

As an example, you leave the City Council's digital platform whenever:

a) write us an e-mail or connect to the internet;

b) visit web pages outside the “my.lugano.ch” domain;

c) you purchase goods and services from merchants affiliated with the MyLuganoCard and MyLuganoPass loyalty program;

d) effect online payments with credit cards and similar; e) use applications other than the MyLugano App.

‍

What are your rights under data protection law?

Rights Under the conditions established by law, we grant you in particular the following rights (this is not an exhaustive list: contact the Municipal Data Protection Officer):

obtain the correction of inaccurate or obsolete personal data:
be informed in writing and free of charge if personal data concerning you are being processed;
revoke the consent to the processing of data that you previously issued;
prevent the communication to third parties of personal data worthy of particular protection;
express your opinion on an automated individual decision or request that it be reviewed by a natural person;
right to obtain the delivery of your personal data or to request its transmission to third parties;
request that data processing be blocked, that communication to third parties be prevented or that personal data be rectified or destroyed;
right to request that a certain processing of personal data be prohibited, a specific communication of personal data to third parties is prohibited, or that personal data be deleted or destroyed;
if neither the accuracy nor the inaccuracy of the personal data can be demonstrated, ask that a mention be added to the data that reveals the disputed nature of the data;
request that the correction, the destruction, the blocking, in particular that of the communication to third parties, as well as the mention of the contested nature or the sentence be communicated to third parties or published;
to ascertain the illegality of the processing of personal data.

Legitimation and exercise. If you intend to exercise your rights, you must do so in writing by means of a reasoned request to be sent by ordinary or electronic mail, attaching the necessary supporting documents, as well as proof of your identity. In fact, it is our duty to strictly verify that requests for access to data come from those entitled and not from unauthorized third parties.

Execution time. We will process your request without delay but, in any case, except for exceptional circumstances, within 30 days of receiving the request complete with all the information necessary for the judgment.

‍

Do you still have any doubts? Write to the Municipal Data Protection Officer!

In order to promote transparency and a relationship of trust with users, we have appointed a Municipal Data Protection Officer, whose task is to provide advice to the Municipality on the applicable data regime, conduct regular checks, respond to requests for information and follow up on the exercise of user rights.

You can contact the Municipal Data Protection Officer by regular mail at the following address: Municipal Data Protection Officer of the City of Lugano, c/o Legal Affairs Division, via della Posta 8, 6900 Lugano. Alternatively, you can send a message by e-mail to the following address: privacy@lugano.ch.Don't hesitate: we are at your disposal!

‍

Legend

MyLugano app.

Application for mobile devices (iOS and Android).

MyLuganoCard and MyLuganoPass

MyLugano circuit loyalty cards.

General personal data.

We process general personal data concerning you, such as your name and contact details.

No profiling.

We do not analyze your behavior and we do not assume your interests and preferences.

No data transmission.

We process general personal data concerning you, such as your name and contact details.

No data sales.

We don't sell your personal data.

Switzerland.

We process your personal data only in Switzerland.

Europe.

We process your personal data only in Switzerland and the European Union.

Product development.

We use your personal data for the development and improvement of products and services.

Data provided.

We process the personal data that you provide to us.

Collected data.

We process the personal data that we collect about you.

Financial data.

We process your financial data.

Additional Purposes.

We use your personal data for other purposes not related to the main performance.

Marketing.‍

We use your personal data for marketing and advertising.

Special treatments.

No automatic decisions.

We don't make fundamental decisions completely automatically.

Contact Tracing

In case of request, your data may be transmitted to the Cantonal Medical Office.