DATA PROTECTION POLICY
1. NATURE OF TREATED DATA
We would like to inform you that European Regulation 2016/679 (here in after GDPR) lays down rules on the protection of individuals with regard to the processing of personal data and the rules on the free movement of such data to protect the fundamental right and freedom of individuals, in particular the right to the protection of personal data. The free movement of personal data in the Union cannot be limited or prohibited for reasons relating to the protection of personal data. We point out to you, therefore, that "personal data" means, in the predicted sense of the REPR, information that is directly or indirectly related as a data subject, with particular reference to an identification such as name, identification number, location data, identification on line or other more elementary as the characteristics of physical, physiological, genetic, physical, economic, cultural or social identity.
2. PURPOSE OF TREATMENT
The collection and processing of your personal data and images will be carried out in accordance with the general principles of necessity, correction, relevance and non-excessive and, in particular, the processing of the data will take place in the following:
(a) the registration of events promoted by this organization, also through the compilation, by the User, of specific forms present on the pages of the site and the consequent issuance of the relevant certificates of frequency or other nature;
b) to contact you about the delivery of the certificate of assistance,
(c) the necessary and essential operational, management, accounting and other processing, in particular some data will be used for the records and communications required by law;
d) User satisfaction assessments with respect to the events mentioned in point A through personal interviews or questionnaires sent to the email address subscribed on the registration form.
e) Sending communications for activity information, news and useful data related to the activity.
f) Taking photographs, recording images, for publication on the web and / or social networks, subsequent making of videos informative of the event made and its different activities.
3. TREATMENT MODALITY
The personal data that is processed will be processed manually and/or electronically and stored in special paper and/or electronic files. Paper and electronic documentation will be duly maintained and protected by the Comitato ““UNIV CONGRESS E INCONTRO ROMANO 2018/2020”, for as long as is necessary for processing, using appropriate security measures, in order to minimize the risks of destruction or loss, unauthorized access or treatment that does not fulfill the purpose of collection.
4 - KNOWLEDGE FIELD OF TREATED DATA
The data collected and processed may be:
(a) made available to coordinators who collaborate with the organizer.
(b) communicated to third parties, only if they are involved in the provision of services, products and any other type of application and, in general, to all those public and private entities to which it is necessary for the proper fulfilment of the purposes set out in step 2;
c) The data will not be disseminated, and once the planned use are completed they will be destroyed when we no longer need or have an obligation to maintain them.
5. RIGHTS OF THE INTERESTED PARTY
We inform you that, as a Data Subject, you have all rights under Articles 15-16-17-18-20-21-22 of the GDPR, including:
The data subject has the right to obtain confirmation from the controller that personal data is being processed are not about him and, in that case, to obtain access to the personal data and the following information:
(a) the purpose of the processing;
(b) the categories of personal data in question;
(c) recipients or categories of recipients to which personal data has been disclosed or disclosed, especially if recipients are from the third countries or international organisations;
(d) where possible, the expected retention period of personal data or, if not possible, the criteria used to determine that period;
(e) the existence of the data subject's right to request the controller to rectify or delete personal data or to restrict the processing of personal data concerning him/her or his/her object to their processing;
(f) the right to lodge a complaint with a supervisory authority;
(g) if the data is not collected from the data subject, all available information on its origin;
(h) the existence of an automated decision-making process, including the profiling of Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the intended importance and consequences of such processing interested in it.
(i) the existence of the person's right to request access to and deletion of personal data from the controller or the limitation of processing concerning him or her or to object to its processing, in addition to the right to data portability, including all available information on its source; In addition, obtain the deletion of personal data relating to them without undue delay under Article 17 ('right to be forgotten').
If the processing is based on Article 6(1)(a) or Article 9(2)(a),
• the existence of the right to withdraw consent at any time without prejudging the legality of treatment based on consent given prior to revocation;
• the right to lodge a complaint with a supervisory authority;
• have a copy of the personal data processed by the controller, provided that it does not affect the rights and freedoms of third parties; In the case of additional copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. If the request is obtained by electronic means, unless otherwise indicated, the information is provided in a commonly used electronic format;
This information will be provided:
• within a reasonable period of obtaining personal data, but no later than one month, in view of the specific circumstances in which personal data is processed;
• if the personal data are intended for communication with the data subject, at the latest at the time of the first communication to the data subject; or if it is expected to be communicated to another recipient, at the latest the first communication of personal data.
• All rights of the person provided by the GDPR are exercised with a request made without formality to the Data Controller, to the email email@example.com.
6. OBLIGATION OR FACULTY OF DATA COLLECTION
We specify that the collection of the required personal data is strictly necessary for the organization of the event and related activities, the issuance of the accounting document (if provided) and the certificate, and any refusal to provide it, in whole or in part, will result in the impossibility of participating in the event or obtaining the certificate of participation.
7. TREATMENT HOLDER
We point out that the holder of the Treatment is the signer UNIV CONGRESS E INCONTRO ROMANO 2018/2020 based in ROME (RM) in VIALE ROMANIA, 5. 00197 ROME, tax code VSSCRL76T66G273O.
CONSENT TO THE TREATMENT OF PERSONAL DATA IN THE SENSE OF ARTICLE 7 OF THE EUROPEAN REGULATION 2016/679 (RDPD).
By selecting the corresponding box at the bottom of the online registration form, you expressly consent freely and fully to the Data Processing in accordance with the purposes indicated in the points mentioned above in the scope of the law. We inform you that as a data subject you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the legality of the consent-based processing prior to revocation. Before giving consent, the person concerned is informed of this. Consent is revoked as easily as it is granted.
See TÉRMINOS Y CONDICIONES DEL SERVICIO (available only in Spanish).