(Pursuant to and in accordance with Article 13 of EU Regulation No. 2016/679)
The Data Controller below, in accordance with the EU Regulation 2016/679 of April 27, 2016 on the protection of individuals with regard to the processing of personal data (hereinafter “Regulation”) informs that it will process the data for the purposes and in the manner set out below. “Processing” of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collecting, recording, organizing, structuring storage, processing, selection, blocking, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction. Processing will be done manually (e.g., collection of paper forms) and electronically or otherwise using computerized or automated means. According to the rules of the Regulations, processing will be based on the principles of fairness, lawfulness, transparency and protection of confidentiality. In accordance with Article 13 of the Regulations, we therefore provide the following information.
The data being processed by the Data Controller are:
6 ☐ union membership; 7 ☐ racial origin; 8 ☐ religious or philosophical beliefs;
Special personal data may be processed with the consent of the person concerned. Otherwise, the data will be immediately destroyed. Data will be processed in accordance with the provisions of the Regulations as specified below.
The personal data being processed are those collected from the data subject.
Data will be processed exclusively for the following purposes:
The lawfulness of the processing of personal data by the Data Controller is guaranteed insofar as it complies with paragraphs (a) and (c) of Art. 6 paragraph 1 of the Regulations.
In case of the occurrence of letter c) paragraph 1 of Article 6 of the Regulations, the Data Controller is not obliged to acquire the specific consent. If the data subject does not wish to give the above personal data anyway, the consequence would be that it would be impossible to establish or continue the contractual relationship. Outside the assumptions described above, the processing of personal data is optional and of free choice and may be carried out only with express consent.
With reference to Art. 13(1)(e) of the EU Regulation 2016/679, an indication is given of the subjects or categories of subjects who might become aware of your personal data:
The processing will be carried out by employees in manual and/or automated form in compliance with Articles 30, 32 and 35 of EU Regulation 2016/679 under the supervision of the Data Protection Officer, if appointed;
Articles 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22 of the Regulations give the data subject the exercise of specific rights, such as:
A data subject may file a complaint with the Garante per la protezione dei dati personali, following the procedures and directions published on the Authority’s official website at www.garanteprivacy.it. In exercising the rights under Articles 15-22 of the Regulations, the data subject may grant, in writing, proxy or power of attorney with natural persons or associations. Requests may be forwarded to the data controller or DPO, if appointed, via the email addresses below.
The processing of data will last no longer than is necessary for the purposes for which the data were collected as stated in the individual purposes, however, if the data subject considers, for any reason, that the purpose of the processing has been exhausted, he/she may exercise his/her right by sending a formal request, to the address of the data controller or data protection officer.
The identification details of the data controller are as given in box A