According to the European data protection law (Art. 13, European Regulation 2016/679) the User acknowledges that S.O.G.E.O. srl Impresa Sociale shall undertake to treat the User’s personal data according to the principles of lawfulness, fairness and transparency and protection of confidentiality. Therefore, the User is informed that:
A. DATA CATEGORIES:
The data undergoing the processing may be your personal data such as identification data, personal data and contact data. The object of the processing may also be the personal data of minors such as identification and personal data and the personal and contact data of parents and/or legal guardians.
B. DATA CONTROLLER:
The Data Controller is Orticolario S.O.G.E.O. srl Impresa Sociale located in L.go Visconti 4 – 22012 Cernobbio, Como – P.I. 03200630139, contactable by phone at no. 031 3347503 or by email at email@example.com.
C. SOURCE OF PERSONAL DATA:
The personal data held by the Data Controller are collected directly from the data subject.
D. PURPOSE AND LEGAL BASIS FOR PROCESSING DATA:
The processing of your data, collected and stored in connection with the completion of this form, has the legal bases and the purposes listed below:
- Purposes related to legal obligations.
- Purposes based on the execution of the contract and pre-contractual measures: internal organizational activities. Collection of names and contact details of event participants for the purpose of managing and organizing the event itself.
- Purposes related to the management of service delivery: participation in the event by Orticolario S.O.G.E.O. S.r.l. Social enterprise, subject to registration through the completion of this form; possible communication of your data to any partners of the Owner for the performance of obligations related to the organization of the event.
- Purposes related to a legitimate interest of the Data Controller: photographs and/or audio-video footage depicting the event will be taken and published on websites or social networks, without your direct identification.
- Purposes based on the consent of the data subject related to:
– Prior consent, subscription to the S.O.G.E.O. S.r.L. Impresa Sociale newsletter to stay updated on our latest events or news.
– Prior consent, the sending of commercial and/or marketing communications by the Holder’s business partners by means of newsletters.
E. RECIPIENTS AND CATEGORIES OF RECIPIENTS:
Within the limits relevant to the processing purposes indicated, your data may be communicated, if necessary, to other subjects related to processing activities, internal and external to the Data Controller, such as employees and assimilated, partners, consulting companies and private companies. Your data will not be spread in any way.
F. TRANSFER OF PERSONAL DATA BETWEEN COUNTRIES:
The data collected may be transferred to third countries outside the European Economic Area, by virtue of an adequacy decision of the Commission or in the presence of appropriate guarantees, to fulfill the aforementioned purposes. Particularly, your data may be communicated to our web hosting located in Switzerland, by virtue of Adequacy Decision 2000/518/EC.
G. DATA RETENTION PERIOD:
The collected data will be kept for no longer than it is necessary for the purposes for which they are processed (“data storage limitation principle”, art.5, GDPR) or according to the deadlines laid down by law. The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically.
H. RIGHTS OF THE DATA SUBJECT:
The data subject has always the right to request from the Controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing, as well as the right to data portability, the right to withdraw consent claiming these and other rights provided by the GDPR through a simple communication to the Controller. The Data Subject can also lodge a complaint with a supervisory authority.
I. OBLIGATION OF THE DATA SUBJECT TO PROVIDE PERSONAL DATA
We inform you that the provision of data is optional for some fields and mandatory for others (indicated by an asterisk); failure to provide the data required will cause the non-performance of the requested service.
J. METHODS OF PERSONAL DATA PROCESSING:
The personal data you provided will form the subject of processing operations in compliance with the aforementioned regulations and the confidentiality obligations central to the Controller’s activity. The data will be processed both with IT tools and on paper and any other type of appropriate support, in compliance with the appropriate security measures under the GDPR.
K. AUTOMATED DECISION-MAKING:
we do not use automatic decision-making processes.