Privacy Policy Eventi

PRIVACY POLICY EVENTS
INFORMATION ABOUT THE PROCESSING OF YOUR PERSONAL DETAILS

Pursuant to the effects of Italian Legislative Decree dated 30th June 2003, n.196 Personal Data Protection Code (hereinafter the “Code”) and EU Regulation 2016/679 on Data Protection, we are hereby notifying you that your personal details will be processed by the Data Processing Controller specified below.

For the sake of clarity, please take note of the meaning of the following terms:

• Processing: any operation or set of operations, handled with or without the use of automated processes and applied to personal details or sets of personal details, such as the gathering, recording, organisation, structuring, storing, adaptation or modification, extraction, consulting, use, communication by means of transmission, publication or any other form of provision, comparison or interconnection, limitation, deletion or destruction.

• Personal details: any information concerning a physical person identified or identifiable («the interested party»); a physical person is considered identifiable if they can be identified, directly or indirectly, with particular reference to an identifier such as a name, identification number, details relating to the location, an online identity or one or more elements that are characteristic of their physical, physiological, genetic, psychological, economic, cultural or social identity.

1. Identity and contact details of the data processing controller

Company Name: CANOSSA EVENTS S.R.L. 3. Address: via O. Tenni, 128/B- 42123 Reggio Emilia – Italy 4. VAT NUMBER: IT 02431580352 5. Fiscal Code: IT 02431580352 6. E-mail: info@canossa.com 7. Telephone: +39 0522 421096

2. Identity and contact details of the data protection supervisor

Company Name: Als Project S.R.L.
Address: via D.F. Cecati, 13/G – 42123 Reggio Emilia – Italy VAT NUMBER: IT 02694470358
Fiscal Code: IT 02694470358
E-mail: marco.formentini@ambientelavorosalute.com Telephone: +39 0522326285

INTERESTED PARTIES AFFECTED BY THE PROCESSING OF PERSONAL DETAILS: Private customers

I. Taking part in events

Deliver the request to take part and register for the events organised.

o How personal details are collected:
By means of paper form, e-mail, telephone, internet, word of mouth.

o Types of personal details processed:

– – – – – – – – –

o Nature of This data 2016/679

Name and Surname; Phone number; Company name; Licences;

Fiscal identity code and other identity numbers; Bank account details;
Credit card number;
Information about cars;

e-mail of the interested person affected by data processing.

collection of personal details:
processing falls under legally allowed processing pursuant to art. 6 comma 1 letter B of EU Regulation

about Data Protection.

o Duration of the processing personal details:
The details will be processed for the time necessary for the completion of the relationship and for as long as the interested party or the data processing controller has the right to process the personal details. The obsolescence of the information is controlled on a routine basis.

o Tools and logic for the processing of personal details:
As far as the purposes specified above, the processing makes use of manual, computerised and telematics tools with logic that is strictly related to the above purposes and, in any case, in such a way as to guarantee the security and confidentiality of the personal details themselves.

o Categories that may be privy to your personal details (recipients):

  • –  Authorised personnel of the undersigned company;

  • –  Subsidiaries of the undersigned company

  • –  Third party companies specialised in handling commercial information and credit details (such as data

    processing centres, banks, etc.);

  • –  Shipping agents;

  • –  Companies/ institutions/ agencies involved in organising the logistics of the event;

  • –  Third party companies and/or persons handling the contracts or management / administration /

    accounting services in order to safeguard fulfilment of legal or contractual obligations;

  • –  Other third parties (companies, businesses, physical persons) involved in delivering the contracted

    services or supporting services linked to them (e.g. specialists, computer consultants).

    All such third parties operate as specifically-appointed Third Party Data Processing Supervisors. Personal details will not be shared with others for any reason whatsoever.

o Refusal to authorise processing and the right to object to processing of personal details:
Refusal to provide your personal details or to authorise their processing, which is the acknowledged right of the interested person affected by data processing, will make it impossible to take part / register for the event.
Notice of refusal can be given using the contact details in point 1.

II. Processing of health related information such as allergies/food intolerances, specific health conditions, medical information relating to fitness to take part in sport, information about food restrictions for religious reasons, body size for the provision of bespoke apparel.

The purpose of such processing is for the preparation and safe delivery of the services associated with the event in line with the terms of contract signed by the parties.

o How personal details are collected:
By means of paper form, e-mail, telephone, internet, word of mouth.

o Types of personal details processed:
Health related information about allergies/food intolerances, specific health conditions, doctor’s certificate, body size

o Nature of collection of personal details:
This data processing falls under legally-allowed data processing pursuant to art. 9 comma 2 letter A of EU Regulation 2016/679 about Data Protection.
The interested person must EXPRESS THEIR CONSENT for the processing of their personal details for the specified purpose.

o Duration of the processing personal details:
The details will be processed for the time necessary for the completion of the relationship and for as long as the interested party or the data processing controller has the right to process the personal details.
The obsolescence of the information is controlled on a routine basis.

o Tools and logic for the processing of personal details:
As far as the purposes specified above, the processing makes use of manual, computerised and telematic tools using logic that is strictly related to the above purposes and, in any case, in such a way as to guarantee the security and confidentiality of the personal details themselves.

o Categories that may be privy to your personal details (recipients):

  • –  Authorised personnel of the undersigned company;

  • –  Subsidiaries of the undersigned company

  • –  Company/ institution/ agencies/specialists who provide their services for the organisation of the

    event’s logistics and to produce apparel.

    All such third parties operate as specifically-appointed Third Party Data Processing Supervisors. Personal details will not be shared with others for any reason whatsoever.

o Refusal to authorise processing and the right to object to processing of personal details:
Refusal to provide your personal details or to authorise their processing, which is the acknowledged right of the interested person affected by data processing, will make it impossible to provide all or part of the requested services, and may pose a risk to health in case of diets that are incompatible with their condition.
Notice of refusal can be given using the contact details in point 1.

III. Marketing

Processing information already collected, subject to the authorisation of the interested party, for advertising purposes by means of e-mail, paper or telephone communications.

o How personal details are collected:
By means of paper form, e-mail, telephone, internet, word of mouth.

o Types of personal details processed:

– – – – – – –

Name and Surname;
Phone number;
Company name;
Fiscal identity code and other identity numbers; Bank account details;

Address; Email address.

o Nature of
This data processing falls under legally-allowed data processing pursuant to art. 6 comma 1 letter A of EU Regulation 2016/679 about Data Protection.
The interested person must EXPRESS THEIR CONSENT for the processing of their personal details for the specified purpose.

o Duration of the processing personal details:
The details will be processed for the time necessary for the completion of the relationship and for as long as the interested party or the data processing controller has the right to process the personal details.
The obsolescence of the information is controlled on a routine basis.

o Tools and logic for the processing of personal details:
As far as the purposes specified above, the processing makes use of manual, computerised and telematic tools using logic that is strictly related to the above purposes and, in any case, in such a way as to guarantee the security and confidentiality of the personal details themselves.

o Categories that may be privy to your personal details (recipients):

  • –  Authorised personnel of the undersigned company;

  • –  Subsidiaries of the undersigned company

  • –  Third parties providing services to safeguard compliance with obligations for marketing purposes.

    All such third parties operate as specifically-appointed Third Party Data Processing Supervisors. Personal details will not be shared with others for any reason whatsoever.

o Refusal to authorise processing and the right to object to processing of personal details:
Refusal to provide your personal details or to authorise their processing, which is the acknowledged right of the interested person affected by data processing, will make it impossible to pursue any marketing operations.
Notice of refusal can be given using the contact details in point 1.

IV. Publication in the press (web, social media, paper publications) for the purposes of advertising/ marketing / information – publication/ documentary of your picture

o How personal details are collected:
By means of photographs, audios, videos.

o Types of personal details processed: Picture and voice.

o Nature of collection of personal details:
Airing the video and photographs both on traditional media (TV, press), and on social media and internet are fundamental to the nature of the event. Therefore, this type of data processing is legitimate and any refusal will result in the impossibility to take part in the event. CANOSSA EVENTS S.R.L. will ensure you are reminded of this data processing at the beginning of each event.

o Duration of the processing personal details:
Data will be held in the company’s archives until a request is received from the interested party to delete them. The obsolescence of the information is controlled on a routine basis.

o Tools and logic for the processing of personal details:
As far as the purposes specified above, the processing makes use of manual, computerised and telematic tools using logic that is strictly related to the above purposes and, in any case, in such a way as to guarantee the security and confidentiality of the personal details themselves.

o Categories that may be privy to your personal details (recipients):

  • –  Authorised personnel of the undersigned company;

  • –  Subsidiaries of the undersigned company

  • –  Companies, businesses, and freelance professionals operating individually or with their associates, as

    concerns operations necessary for the collection of the information and its publication. All such third parties operate as specifically-appointed Third Party Data Processing Supervisors.

o Refusal to authorise processing and the right to object to processing of personal details:
Refusal to provide your personal details or to authorise their processing, which is the acknowledged right of the interested person affected by data processing, will make it impossible to take part / register for the event.
Notice of refusal can be given using the contact details in point 1.

IV. Publication in the press (web, social media, paper publications) for the purposes of publication / documentary of the picture of a minor

o How personal details are collected:
By means of photographs, audios, videos.

Types of personal details processed: Picture and voice.

o Nature of collection of personal details:
Airing the video and photographs both on traditional media (TV, press), and on social media and internet are fundamental to the nature of the event. As regards the picture of the minor will be present subject to the authorisation of both parents pursuant to art.6 comma 1 letter A of European Regulation 679/2016 relating to Data Protection.

o Duration of the processing personal details:
Data will be held in the company’s archives until a request is received from the interested party to delete them. The obsolescence of the information is controlled on a routine basis.

o Tools and logic for the processing of personal details:
As far as the purposes specified above, the processing makes use of manual, computerised and telematic tools using logic that is strictly related to the above purposes and, in any case, in such a way as to guarantee the security and confidentiality of the personal details themselves.

o Categories that may be privy to your personal details (recipients):

  • –  Authorised personnel of the undersigned company;

  • –  Subsidiaries of the undersigned company

  • –  Companies, businesses, and freelance professionals operating individually or with their associates, as

    concerns operations necessary for the collection of the information and its publication. All such third parties operate as specifically-appointed Third Party Data Processing Supervisors.

o Refusal to authorise processing and the right to object to processing of personal details:
Refusal to provide your personal details or to authorise their processing, which is the acknowledged right of the interested person affected by data processing, does not affect taking part/registering for the event.
Notice of refusal can be given using the contact details in point 1.

V. Publication in the press (web, social media, paper publications) of the names of people taking part in the events linked to any comments / interviews about the event itself.

The name and surname of the interested party and any comments / interviews will be used for the purpose of promoting and bringing attention to the event in the communications in use.

o How personal details are collected:
By means of email, word of mouth, internet.

o Types of personal details processed: Name/Surname and comments.

o Nature of collection of personal details:
This data processing falls under legally-allowed data processing pursuant to art. 6 comma 1 letter A of EU Regulation 2016/679 about Data Protection.
The interested person must EXPRESS THEIR CONSENT for the processing of their personal details for the specified purpose

o Duration of the processing personal details:
Data will be held in the company’s archives until a request is received from the interested party to delete them. The obsolescence of the information is controlled on a routine basis.

o Tools and logic for the processing of personal details:
As far as the purposes specified above, the processing makes use of manual, computerised and telematic tools using logic that is strictly related to the above purposes and, in any case, in such a way as to guarantee the security and confidentiality of the personal details themselves.

o Categories that may be privy to your personal details (recipients):

  • –  Authorised personnel of the undersigned company;

  • –  Subsidiaries of the undersigned company

  • –  Companies, businesses, and freelance professionals operating individually or with their associates, as

    concerns operations necessary for the collection of the information and its publication. All such third parties operate as specifically-appointed Third Party Data Processing Supervisors.

o Refusal to authorise processing and the right to object to processing of personal details:
Refusal to provide your personal details or to authorise their processing, which is the acknowledged right of the interested person affected by data processing, will make it impossible for your comments to be published in the communications used.
Notice of refusal can be given using the contact details in point 1.

Rights of the interested party:

You have the right to ask the Data Processing Controller to access your personal details using the contact details in point 1. You have the right to ask the Data Processing Controller to correct / delete / all or part of your personal details using the contact details in point 1.
You have the right to refuse the Data Processing Controller authorisation to process your personal details using the contact details in point 1.

You have the right to receive the full list of the data processing supervisors (in-house and independent) using the contact details in point 1.

All of the above rights may be exercised by contacting the undersigned company at the contact details given for the Data Processing Controller on page one.

Your right to appeal to a controlling authority:

You have the right to appeal to a controlling authority such as the Guarantor for Privacy http://www.garanteprivacy.it/

Existence of automated decision making processed, including profiling according to article 22, paragraphs 1 and 4 of European Privacy Regulation 2016/679:
None

Transfer of information abroad:

The transfer of information abroad occurs further to a decision of adequacy (art. 45 of EU Regulation 2016/679 on Data Protection), within the Europe-United States agreement called the PRIVACY SHIELD which governs the computerised flow of information.

The organisations involved in such transfer are:

  • –  ZOHO CORPORATIONS, details of Privacy Shield participation:

    https://www.privacyshield.gov/participant?id=a2zt0000000TOJbAAO

  • –  DROPBOX, details of Privacy Shield participation: https://www.privacyshield.gov/participant?id=a2zt0000000GnCLAA0

  • –  MAILCHIMP, details of Privacy Shield participation: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG

  • –  AVENTRI, details of Privacy Shield participation: https://www.privacyshield.gov/participant?id=a2zt00000004E3DAAU