Privacy Policy on the processing of personal data (to be retained)
The reasons for this information
Under articles 13 and 14 of Regulation EU 2016/679 (hereinafter "GDPR"), Trentino Marketing S.r.l. as Controller of your personal data, including also the personal data concerning your image and voice, processed on the basis of the consent you have provided under the related assignment, hereby provides you with the following information.
1. Identity and contact information of the Data Controller
Trentino Marketing S.r.l. - Via Romagnosi, n. 11 - 38122 Trento Email: privacy@trentinomarketing.org
2. Contact information of the Data Protection Officer
Email: dpo@trentinomarketing.org
3. Types of personal data processed
Within the scope of the purposes of the processing operations highlighted in paragraph 4 below, only the following personal data will be processed: name and surname, identity card, address, date and place of birth, personal image and voice.
4. Purposes of the processing and legal basis
Your personal data will be processed for the following purposes:
1. subscription to and performance of the related assignment. The legal basis for the processing is article 6, letter b) of the GDPR: the performance of an agreement to which the data subject is party or the performance of pre-contractual measures adopted on the request of the latter. The provision of data is not compulsory but is a necessary requirement for processing the assignment. The non-provision of the above data will therefore result in the impossibility to conclude and perform the agreement.
2. fulfilment of a legal obligation to which the data controller is subject; the legal basis for the processing is article 6,
letter c) of the GDPR.
5. Categories of recipients of the personal data
For the purposes referred to in the previous paragraph, the personal data provided will be accessible to the internal partners authorised to carry out the related processing within the scope of their responsibilities, to external providers duly appointed as data processors and to all the parties for which there is a legal obligation to disclose the data or other parties that acquire specific authorisations on request.
6. Processing methods
Personal data is processed by means of the operations indicated in art.4, no.2 of the GDPR - with or without the assistance of computer systems - and more specifically: collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval and analysis, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. In any case, the logical and physical security of the data will be guaranteed and, in general, the confidentiality, integrity and availability of the processed personal data, implementing all the necessary appropriate technical and organisational measures.
7. Disclosure and profiling
The personal data will be disclosed for the purposes referred to in paragraph 4 above using the methods indicated in the related assignment, both online and offline. No other disclosure will be made without consent. The data will not be used for profiling.
8. Storage and transfer of personal data abroad
The personal data will be managed and stored in cloud storage and/or on servers located in the European Union owned and/or available to the Data Controller and/or third-parties entrusted and duly appointed as data processors.
9. Data retention period
The personal data collected for the purposes indicated in paragraph 4 above will be processed and stored for the entire duration of the agreement and for 10 years following its expiry. Once this period has elapsed, the data will be erased, unless Community or national law requires it to be kept.
In the case of disputes, the personal data considered necessary for this purpose will be stored for the period of time in which this claim can be pursued.
10. Rights that can be exercised
In compliance with articles 15 -21 of the GDPR, you may exercise the rights indicated therein and in particular:
• Right of access (article 15, GDPR): to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, receive the information regarding, in particular: purposes of the processing, categories of personal data processed and storage period, and recipients to whom the data may be disclosed.
• Right to rectification (article 16, GDPR): to obtain, without undue delay, the rectification of inaccurate personal data
concerning you, as well as the right to have incomplete personal data completed.
• Right to erasure (article 17, GDPR): to obtain, without undue delay, the erasure of the personal data concerning you, in the cases laid down in the GDPR.
• Right to restriction of processing (article 18, GDPR): to obtain the restriction of the processing of the data from the Data Controller in the cases laid down in the GDPR.
• Right to portability (article 20, GDPR): to receive the personal data concerning you and that has been provided to the Data Controller in a structured, commonly used and machine-readable format, as well as to send it to another Data Controller without hindrance, in the cases laid down in the GDPR.
• Right to object (article 21, GDPR): to object to the processing of the personal data concerning you, unless the Data Controller has legitimate reasons for continuing to process it.
You may exercise these rights by sending a simple request to Trentino Marketing or the DPO indicated above.
You also have the right to lodge a complaint with the supervisory authority (article 77, GDPR).
