REGARDING THE PROCESSING OF PERSONAL DATA RELEASED, WE INFORM THAT:
DATA PROCESSING CONTROLLER AND DPO
The Controller of the Processing is Fondazione Arena di Verona, with registered offices in Via Roma 7/D - 37121 Verona – e-mail: protocollo@arenadiverona.it (hereafter for brevity indicated as “Fondazione”).
The Data Protection Officer (DPO) appointed by Fondazione can be contacted at rpd@arenadiverona.it
TYPE OF DATA PROCESSED, PURPOSE AND LEGAL BASIS OF PROCESSING
The following personal data are collected and processed: common personal data (name, surname and e-mail) regarding addressees, for marketing purposes including sending via e-mail institutional communications, advertising material, material promoting the events and activities organized by Fondazione or in which Fondazione participates. Also non-personal data may be processed through compilation of a survey, following the participation to the performances for statistical purposes and analysis of approval ratings.
The legal basis of the processing: compliance with the request of the data subject to receive the service/consent of the data subject.
COMMUNICATION OF DATA TO THIRD PARTIES – RECEIVER OF THE DATA
Fondazione can communicate processed data for the abovementioned purposes: to in-house staff responsible for the management of the newsletter and commercial and promotional communications; to external communication companies / companies providing the newsletter mail-out service.
TRANSFER OF DATA TO OTHER COUNTRIES
The processed data could be transferred by the Controller to third countries for the above-mentioned purposes. Nevertheless, in the event of the transfer of data to third countries, this will be done respecting the current provisions at the time on matters of transfer of personal data to Third Countries according to Art. 44 et seq. GDPR 2016/679.
PROCESSING METHODS, PERIOD AND CRITERIA OF DATA RETENTION
The data will be processed in digital format until the eventual withdrawal or cancellation by the data subject and in any case for a maximum period of 24 months. At the end of the aforesaid period, the Controller will request further appropriate consent or proceed with the elimination of the contact.
RIGHTS OF THE DATA SUBJECT, WITHDRAWAL OF CONSENT AND COMPLAINT TO THE CONTROL AUTHORITY
Should the legal prerequisites exist, the data subject has the right at any time to request access to his/her personal data, their rectification, cancellation or restriction, or to block processing and to exercise the right to data portability.
In any case, the data subject has the right to withdraw at any time any consent given for data processing, without prejudicing the legality of the processing based on the consent granted prior to the withdrawal.
In the event of a presumed violation, the data subject, in the event of the prerequisites existing, also has the right to submit a complaint to a data processing control authority in the EU member country in which he/she habitually resides, in the EU country in which he/she works or in which the presumed violation occurred.
RELEASE OF DATA
Data release is optional. Failure to release data makes it impossible to accomplish the aforementioned aims.
PROFILING AND AUTOMATED DECISION MAKING PROCEDURE
Processing is not carried out using automated decision-making procedure.
CONTACTS AND REQUESTS
To receive further information on the processing of personal data, opposing processing or exercising the rights foreseen by the current law on matters of personal data protection (access, amendment, deletions, limitation, opposition, portability) and/or receive the complete list of the internal and external subjects responsible for the processing and/or receive information regarding the transfer of data to Non-EU countries and relative guarantees, including data transfer procedure and protection as per Art. 44 et seq. GDPR requests can be sent via e-mail to protocollo@arenadiverona.it.
