Pursuant to art. 13 of the Italian Legislative Decree dated 30 June 2003, no. 196 (hereinafter, for the sake of brevity, also the "Privacy Code") and art. 13 of the Regulation 2016/679/EU (hereinafter, for the sake of brevity, "Regulation") Carpigiani Group - Ali Group srl, in its capacity as Data Controller, informs you that your data will be processed in the following ways and for the following purposes
NATURE OF PERSONAL DATA
The processing will concern personal data and will be limited to those that are strictly relevant to and necessary for the purposes pursued.
Where necessary for the conduct of the booked activity, the processing may concern particular data referring to belonging to protected categories or to food allergies of the data subject. In these cases the data subject will be asked for his/her explicit consent, in addition to what was given for the processing of common data.
PURPOSES OF THE PROCESSING
The processing of data will have the following purposes:
a) Allow the Data Controller to manage reservations and the organization of events.
b) With reference to particular data, allow the Data Controller to manage and organize events, taking into account the health needs of the data subject.
c) Allow the Data Controller to send by email, mail, and/or telephone contacts, newsletters, commercial communications and/or information and advertising material on products or services offered by the Data Controller or events promoted or organized by the same.
d) Allow the Data Controller to use the images and voice through photographs and/or audiovisual recording for promotional purposes, both through printed publications and on the site and social channels such as, but not limited to, YouTube and Facebook, belonging to the company.
LEGAL BASES OF THE PROCESSING
The legal basis of the processing is the consent freely given by the data subject.
NATURE OF DATA RELEASE AND CONSEQUENCES OF REFUSAL
Giving consent to the processing of personal data by the data subject for the purposes referred to in point a) and b) above is mandatory.
Any refusal, in whole or in part, to provide such data, or an incorrect or untrue statement, will make it impossible for the Data Controller to process the registration of the event booking.
If the data provider is less than 16 years old, such processing is lawful only if and to the extent that such consent is given or authorized by the guardian with parental responsibility.
To the contrary, with regard to the purposes referred to in points c) and d) consent is optional.
METHOD OF PROCESSING
The processing of personal data may concern all the operations indicated in art. 4, para. 1, letter a) of the Privacy Code and art. 4 no. 2) of the Regulation. In any case, the limits and principles of correctness, lawfulness, purpose, quality, relevance, non excess and transparency will be respected.
Personal data will be processed with automated tools for the time strictly necessary for the purposes for which they were collected.
The data will be stored in electronic files.
The processing will be carried out directly by the Data Controller's organization.
The data will not be disclosed to third parties, except for the data referred to the purpose in point d) which, by their nature, are intended for dissemination.
In any case, the data will be processed with logics strictly related to the purposes indicated and with methods that ensure their security and confidentiality, through the adoption of appropriate measures to prevent alteration, deletion, destruction, unauthorized access or processing not allowed or not in accordance with the purposes of collection.
RIGHTS OF THE DATA SUBJECTS
You may at any time exercise your rights:
a) to access to personal data;
b) to obtain their rectification or deletion or to limit their processing;
c) to object to the processing;
d) of data portability;
e) to withdraw consent: the withdrawal of consent shall not affect the lawfulness of processing based on the consent given before the withdrawal;
f) to file a complaint with the supervisory authorities (Privacy Guarantor).
g) The exercise of all the above rights can be done by sending a request by email to firstname.lastname@example.org
DURATION OF THE PROCESSING AND STORAGE PERIOD
Personal data voluntarily provided by the data subject will be processed by the Data Controller and stored for a period of five years.
With regard to using email, mail, and/or telephone contacts to send newsletters, commercial communications, and/or informative and advertising materials for products or services offered by the Data Controller or events promoted or organized by the same, the data will be processed and stored exclusively for the period in which the newsletter service will be active.
The particular data, however, will be kept for the time strictly necessary to fulfill the aforementioned purposes. In particular, at the end of the event they will be erased.
DATA CONTROLLER AND DATA PROCESSOR
The Data Controller responsible of the processing operations herein is Carpigiani Group - Ali Group srl, with registered offices at Via Emilia, 45, 40011, Anzola dell'Emilia (BO), in the person of the person in charge pro tempore.