NOTE TO VISITORS PICTURE GALLERY AND TEACHING WORKSHOPS
This note is addressed to all the visitors of the FONDAZIONE CASSA DI RISPARMIO DI TORTONA picture gallery whose personal data are acquired by us, including general details, telephone and digital contact details such as email addresses and social media references, for purposes related to our activity.
Please note that your personal data shall be processed in compliance with your fundamental rights and freedoms, as well as with respect for the dignity of the Data Subject, with particular reference to their confidentiality, personal identity, personal data rights and protection .
Pursuant to Article 13 of EU Regulation 2016/679, we hereby provide the following information.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
||Recording of images under video surveillance
||Protection of the company’s assets and security
|B. Purpose of providing information
||Sending of information about our initiatives regarding our social and cultural activities
||Consent granted by the Data Subject
|C. Administrative purposes
||management of registrations to events and teaching workshops
|D. Purposes of providing information on/advertising the activity of the picture gallery
||Publication of images on the website, social media pages or printed material
||Consent granted by the Data Subject
MANDATORY AND OPTIONAL PROVISION OF DATA AND THE CONSEQUENCES OF REFUSAL
Conferring the personal data and authorising the consequent processing of the same is optional. In particular, for the purpose of sending newsletters and information about our initiatives, the processing of your personal data is subject to the Data Subject granting their explicit and free consent, which can be revoked at any time.
HOW DATA IS PROCESSED
Personal data will be processed both manually, in paper format, and using electronic means. Electronic processing is based on the proprietary systems and databases of the Data Controller and involves appropriate computerised procedures for the storage, management and transmission of data, using methods and logics designed to guarantee the security and confidentiality of the data.
Personal data will be processed for the time strictly necessary to satisfy the stated purposes for which they were collected and to fulfil statutory and regulatory requirements, without prejudice to the statutory limitations and time-limits of rights and in compliance with resulting obligations.
Regarding the processing of data for the purposes of sending informative messages, and newsletters regarding the activities of the picture gallery, the data will be retained for 24 months following the last contact made with the above-mentioned Data Controller, unless the consent of the Data Subject is revoked before then.
WHO MAY ACCESS THE DATA
The personal data will be processed by parties expressly and specifically appointed by the Data Controller, in the capacity of external Data Processors or authorised persons. Personal data may also be processed by outsourcers engaged to provide services connected with the purposes of processing and which our organisation may designate as Data Processors in charge of the data processing operations they perform, to ensure greater protection.
The data can be communicated (i.e. disclosed to one or more identified parties, other than the Data Controller, the external Data Processors and those authorised to process the same who have been identified and appointed) to public and private parties who can access the data by virtue of the provisions of the laws, regulations or European laws in force, within the limits envisaged by said laws or regulations.
Personal data will not be published, meaning that the information will not be disseminated in any way, either by being made public or available for consultation, unless you specifically give your free and informed consent for each type of processing.
RIGHTS OF THE DATA SUBJECT AND CONTACT DETAILS
The Data Subjects to whom the data refer can opt to exercise the rights envisaged by the G.D.P.R. 679/2016 as specified below, at any time:
Article 15- Right to access data, Article. 16 – Right to correct data, Article 17 – Right to cancel data (right to be forgotten) , Article 18 – Right to limit the processing,Article 20 – Right to data portability, Article 21 – Right to object to the processing
Article 22 – Right not to be subjected to an automated decision-making process, including profiling,Article 7 – Right to revoke consent, Article 77 -Right to submit a complaint to the Supervisory Authority
To exercise their rights, and request the updated list of Data Processors in charge of the processing, the Data Subject can send their requests in a specific communication sent by post addressed to the FONDAZIONE, or to the email address: firstname.lastname@example.org, addressing it directly to the Data Controller to obtain a prompt response.
TRANSFER OF THE DATA ABROAD
Please note that the Data Controller does not currently transfer your personal data to any third countries or international organisations.
Should it decide to transfer your personal data to a third country or international organisation, this transfer will only take place if an adequacy decision has been made by the European Commission or, in case of the transfers described in Articles 46 and 47, or Article 49, second paragraph, only in the presence of express reference to the appropriate or opportune guarantees, and to the means for obtaining a copy of said data or the place in which they have been made available.
The Data Controller is FONDAZIONE CASSA DI RISPARMIO DI TORTONA, with registered office in Corso Leoniero no. 6, Post Box 92, 15057 Tortona (AL).
FONDAZIONE CASSA DI RISPARMIO DI TORTONA
(signed on the original)