Information Notice regarding the processing of personal data
Why we are giving you this information
In compliance with the provisions of the art. 13 of EU Reg. 2016/679 (European Regulation on the protection of personal data - hereinafter "GDPR"), we hereby provide you with information on your personal data that is collected to send you news about the "I Suoni delle Dolomiti".
1. Identity and contact data of the Data Controller
Trentino Marketing S.r.l. (herein after ‘TM’) - Via Romagnosi, n. 11 - 38122 Trento
Email: privacy@trentinomarketing.org
2. Contact data of the Data Protection Officer
c/o Data Protection Officer (herein after ‘DPO’)
Email: dpo@trentinomarketing.org
3. Categories of personal data processed
Within the framework of the processing purposes indicated in para.4 below, only the following kinds of personal data will be processed: first and last names, email address, country.
4. Purposes and legal basis of processing
4.1. Your personal data will be processed with your consent to receive news about “I Suoni delle Dolomiti”. The legal basis of processing is Art. 6 letter a) of the GDPR: the data subject has given consent to the processing of his or her personal data for one or more specific purposes. The provision of data is not compulsory but is a necessary requirement for accessing the indicated services. The non-provision of the above data will therefore result in the impossibility to use the services.
4.2. Your personal data will be processed for the following purposes for compliance with a legal obligation to which the Data Controller is subject; the legal basis of processing is Art. 6 letter c) of the GDPR.
5. Categories of recipients of personal data
As regards the purposes indicated in the paragraph 4 above, the personal data you will send us will be made accessible to internal employees authorised to process data within the limits of their duties, to external suppliers duly nominated Data Processors, and to all subjects that have the legal right to receive them or to other subjects for which specific authorisation is achieved in the event of request.
6. Processing methods
Your personal data shall be processed as indicated in Art. 4, 2) of the GDPR – whether or not by automated means – such as: collection, recording, organization, structuring, updating, storage, adaptation or alteration, retrieval and analysis, consultation, use, disclosure by transmission, alignment, interconnection, restriction, erasure or destruction. In any case, the logical and physical safety and, more in general, the confidentiality, integrity and availability of the personal data processed shall be guaranteed by putting in place all of the necessary and appropriate technical and organizational measures.
7. Disclosure and profiling
Your personal data shall not be disclosed or used for profiling.
8. Storage and transfer of personal data abroad
The handling and storage of the personal data occurs in clouds and/or on servers located within the European Union and owned and/or available to the Data Processor and/or to third party enterprises, all duly nominated Data Processors.
9. Period of storage of personal data
The personal data collected for the purposes indicated in paragraph 4 above will be processed and stored for the time necessary to accomplish the objectives and anyhow until they are effectively deleted by the user. The data will be deleted unless Community or national regulations impose their further storage.
10. Rights of the data subject
In compliance with the provisions of articles from 15 to 21 of the GDPR, you are entitled to exercise the rights indicated therein, and in detail:
• Right of access (Art. 15, GDPR), to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, receive the information regarding, in particular: purposes of the processing, categories of personal data processed and storage period, and recipients to whom the data may be disclosed:
• Right to rectification (Art. 16, GDPR), to obtain, without undue delay, the rectification of inaccurate personal data concerning you, as well as the right to have incomplete personal data completed;
• Right to erasure (Art. 17, GDPR), to obtain, without undue delay, the erasure of the personal data concerning you, in the cases laid down in the GDPR;
• Right to restriction (Art. 18, GDPR), to obtain the restriction of the processing of the data from the Data Controller in the cases laid down in the GDPR;
• Right to portability (Art. 20, GDPR), to receive the personal data concerning you and that has been provided to the Data Controller in a structured, commonly used and machine-readable format, as well as to send it to another Data Controller without hindrance, in the cases laid down in the GDPR;
• Right to objection (Art. 21, GDPR), to object to the processing of your personal data, including profiling, at any time for reasons connected to your specific situation. The data controller no longer processes the personal data unless the Controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of a legal claim. You may object without giving any reason if your data is processed for marketing purposes, including profiling related to the latter.
You may exercise these rights simply by sending your request to TM or to the DPO indicated above.
Moreover, you have the right to lodge a complaint with the Supervisory Authority (Art. 77, GDPR).
