Procedures for processing
Data will be processed in a manner that ensures appropriate security and confidentiality by adopting the following procedures: data collection from the data subject, gathered and recorded for purposes that are specific, express and legitimate and used in subsequent processing operations in terms that are consistent with such purposes, processing carried out using electronic and automated means (data collection via the Internet, through the online registration on the event website, directly from the data subject).
Specific security measures are adopted in order to prevent data loss, unlawful or incorrect uses as well as unauthorized accesses. Processed data will be constantly updated and complete and, to this end, we invite users to send notification in order to carry out updates and correction where necessary. Access to personal data is limited to employees and contract workers who need such information to carry out their activity, as well to manage, develop and improve our services.
Mandatory or optional nature of data transfer and consequences of denial in the event of refusal to reply
In order to provide the Newsletter, as well as for the scopes listed at items (ii), (iii) and (iv) of preceding section 3, transfer of the Users’ personal data is mandatory, as otherwise the services in subscription requested by the Users could not be provided by the Site.
With reference to the items (i), (ii), (iii) and (iv) of preceding section 3, the juridical base of the processing is the provision of the Newsletter (as per section 6, paragraph 1, letter b) of the Data Protection Regulation).
Disclosure of data to third parties
The data provided by the Users will be processed by the Data Controller, by Data Processors appointed by the Controller and by people in charge of the processing who have been strictly authorised. The data can be disclosed to other companies partner of Eurotraining and to companies commissioning the event in order to perform all contractual obligations.
The data provided by the Users may be disclosed to third parties, once their consent has been received, such as sponsors, should these companies request such data.
Following inspections or controls, the data provided by the Users may be disclosed to all the inspection bodies in charge of inspections and controls related to the legitimacy of legal obligations.
The data provided by the Users will not be circulated.
Data detention period
The data provided by the Users shall be kept for the amount of time that is strictly necessary in order to organise and manage the event and then filed in the database of Eurotraining srl Unipersonale.
Rights of the data subjects
Art. 7 Legislative Decree 196/2003 and art. 15 EU Regulation 679/2016 – Right of access to personal data and other rights –
The data subject is entitled at any time to receive confirmation of the existence or otherwise of personal data that concern him, including where those data have not yet been recorded, and to have those data communicated in an intelligible form. The data subject is entitled to be informed of the source of the personal data; the purposes and methods of processing; the logic applied in the event that processing is carried out electronically; details identifying the Data Controller, the Data Processor and the representative appointed pursuant to article 5, paragraph 2 of Legislative Decree 196/2003 and to article 15 of the EU Regulation 679/2016; the entities or categories of entities whom or which the personal data may be communicated to or who or which may get to know such data. The data subject is entitled to have the data updated, rectified or, where he so wishes, supplemented; where data are processed in breach of the law, including data which, in light of the purposes for which they were collected or subsequently processed, do not necessarily need to be stored, to have those data deleted, made anonymous or blocked; to a statement confirming that the steps specified herein, and the contents of those steps, have been brought to the attention of parties to whom the data have been communicated or disseminated, save where this proves to be impossible or would require the use of resources that is manifestly disproportionate to the right being protected. The data subject is entitled to object – in whole or in part – on lawful grounds to the processing of personal data that concerns him, including where the processing is relevant to the purposes for which they were collected; to the processing of personal data that concern him in order to send advertising material or for the purposes of direct sales or to carry out market research or for the purposes of commercial communications. In particular, the data subject is entitled to ask at any time to the Data Controller the access to personal data and the rectification, erasure or limitation of the processing of data concerning him or to object to their processing, in addition to the right of data portability. Moreover, the data subject is entitled to withdraw his consent at any time without affecting the lawfulness of the processing based on the consent given before withdrawing it. The data subject is entitled to lodge a complaint with the Supervisory Authority. Rights can be exercised by sending a notice to the e-mail address mail@eurotraining.it.
