Dear Data Subject, we wish to inform you that the “European Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereafter “GDPR”) provides for the protection of natural persons in relation to the processing of personal data as a fundamental right. Therefore S.O.G.E.O. srl Impresa Sociale, pursuant to Article 13 of the GDPR, provides you with the following information:DATA CATEGORIES:
The data undergoing processing will be your personal identification data, your image and personal contact data.
A. DATA CONTROLLER:
The Data Controller is S.O.G.E.O. srl Impresa Sociale located in L.go Visconti 4 – 22012 Cernobbio, Como – P.I. 03200630139, contactable by phone at no. 031 3347503 or by email at info@orticolario.it.
B. SOURCE OF PERSONAL DATA:
The data are collected directly from the data subject.
C. DATA PROCESSING PURPOSES AND LEGAL BASIS:
The personal data are processed in order to use your images on websites and social networks that can be connected to the Data Controller, in newspapers and any other type of information channel;
D. RECIPIENTS OF DATA:
Within the scope of the indicated processing purposes, your data may be disclosed to partners, consulting firms, private companies and (images and audiovisual footage) may also be disseminated on the internet.
F. TRANSFER OF DATA TO THIRD COUNTRIES:
The data collected shall not be transferred to third countries outside the European Community
G. DATA STORAGE PERIOD:
The collected data will be kept without time limitation.
H. SUBJECT’S RIGHTS:
The data subject has always the right to request from the Controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing, as well as the right to data portability, the right to withdraw consent claiming these and other rights provided by the GDPR through a simple communication to the Controller. The Data Subject can also lodge a complaint with a supervisory authority.
I. OBLIGATION TO COMMUNICATE DATA:
The provision of your data is optional. Failure to consent will not allow the publication of your images and/or audiovisual footage of your person on websites and on social networks and/or in initiatives connected to the Data Controller.
J. METHODS OF DATA PROCESSING:
The personal data you provided will form the subject of processing operations in compliance with the aforementioned regulations and the confidentiality obligations central to the Controller’s activity. The data will be processed both with IT tools and on paper and any other type of appropriate support (e.g. cloud systems, filing systems, digital replacement conservation and so on), in compliance with adequate technical and organizational security measures under the GDPR.
