Policy for the processing of personal data
In accordance with European Regulation 2016/679 (“GDPR”), this document has been prepared to inform you that your personal details, provided via the registration form for participation in the “58th Genoa Boat Show Exhibitors’ Evening”, will be processed by I Saloni Nautici S.r.l., located in Via S. Nazaro 11, 16145 Genoa, which can be reached via the contact information below: Tel +39 010 5769811; Fax +39 010 5531104; e-mail: email@example.com.
I Saloni Nautici S.r.l. (hereinafter referred to as the “Data Controller” pursuant to article 4 of the GDPR) uses, as required by article 12 of the GDPR, the following policy as a means to provide the data subject with the information specified in article 13, as well as the communications pursuant to articles 15 to 22 of the GDPR. Therefore, with regards to the above, the Data Controller hereby informs you that the personal data provided via the completion of the registration form for the purchase of tickets for the evening dedicated to the exhibitors at the 58th Genoa Boat Show, data which are not included in the special categories of personal data as listed in article 9 of the GDPR and which concern the data subject (also in the case of subjects operating as an individual enterprise, a small business owner, or a professional) or their employees, agents, representatives or collaborators (the “Data”) will be processed in compliance with the regulations specified in the GDPR. Processing is carried out in accordance with the conditions of legitimacy pursuant to article 6 of the GDPR, regarding purposes inherent to the relationship established with the Data Controller, and consequently its legal basis, as requested by article 13 letter C of the GDPR, is justified by the reasons for which a relationship has been established with the Data Controller, or rather, in this specific case, the completion of the registration form for the purchasing of tickets for the “58th Genoa Boat Show Exhibitors’ Evening” organised by the Data Controller.
With a view to said purpose, the processing of data will include handling, organisation, use, registration for the evening, sending of an email for access to the same, all of the administrative activities necessary for the issuing of invoices, conservation, database creation, the carrying out of statistical studies, communication regarding future initiatives, soft spam, communication to members of the Data Controller’s organisation and to UCINA, or rather to consultants working for the same in the framework of the handling of business activities. Furthermore, in the event that the data subject decides to pay via bank transfer, the data will also be communicated to Gaslini Onlus in order to permit the purchasing of tickets. Processing will also include the destruction and modification of processed data following reporting by the data subject and consultation and will be carried out throughout the EU and non-EU area in the cases specified in articles 45 and 46 of the GDPR.
The processing of personal data may be carried out either in printed or electronic form exclusively by subjects specifically authorised for processing. The Data Controller will not carry out processing according to automated processes or carry out profiling based on the personal data provided.
The provision of personal data is optional, however, in the event of non-provision or partial provision, the request for the purchase of tickets for participation in the evening organised by the Data Controller may not be accepted. In this regard, the sending of the completed form authorises the Data Controller to process the data, as per the legal basis pursuant to article 6 paragraph 1 letter b (processing necessary for the performance of a contract). It is highlighted that other forms of processing indicated above, such as, for example, soft spam, do not require specific consent, and are considered by the Data Controller as consequential to the request for the purchase of tickets, given the interest of the data subject to remain up to date with regards to the events and initiatives set up by the Data Controller.
The data will be held for 5 and for 10 years for administrative purposes, and in any case for the period of time necessary to satisfy the purposes of collection.
The Data Controller furthermore informs you that you are guaranteed the rights expressed in article 13 paragraph 2 of the GDPR, which are:
- The right to access to personal data and to the relative information listed in article 15 of the GDPR;
- the right to the correction or the cancellation of the data provided or the limiting of processing;
- the right to oppose processing;
- the right to data portability;
- in the event that the processing is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a), the right to revoke your consent at any time without prejudice to the lawfulness of processing based on the consent granted before revocation;
- the right to complain to a supervisory authority.
The aforementioned rights may be exercised, and further relative information may be requested, by sending an email to the following email address: firstname.lastname@example.org, indicating in the subject line: “exercising of rights pursuant to the GDPR” and indicating in the email the right that you wish to exercise, as well as your name, surname and email address where you wish to receive the answer from the Data Controller. Once the Data Controller has processed the request sent, it will in turn send a reply within the terms indicated in article 12, point 3 of the GDPR.
The Data Controller furthermore advises you that in the event that it wishes to further process the personal data for a purpose which differs from that for which they were collected, before carrying out said processing, it will provide the data subject with information regarding said purpose as well as all other relative information, collecting specific consent.