Transparent communications and methods for exercising the rights of the interested party
The user is invited to carefully read the following privacy information in compliance with articles 13 and 14 (in the case of personal data not obtained from the interested party but from other sources) of the European General Data Protection Regulation (GDPR), and subsequent amendments and additions to fully understand on which bases personal data are collected , how they are used and stored and to whom they are disclosed, in particular in relation to:
- Navigation data
- Data provided voluntarily by the user using the website
- Internal chat
- Organization of events
- Data processing of customers and suppliers registered in the community
- Marketing activities
1. Who we are
This communication is made available in its capacity as Data Controller by Company Excellencies. Excellencies of Business has signed an agreement of co-ownership of personal data with Athesis SpA and with STRATEGIQS EDIZIONI SRL for the organization of the event "Festival del Futuro" in which the companies share the purposes and means of the treatment. The companies have assigned the task of providing the interested parties with the information required by articles 13 and 14 of the GDPR regarding this website and related services. The content of the joint ownership agreement is available to the interested party by making a request to firstname.lastname@example.org
|Purpose and legal basis of the processing||Inform registered users of the site and customers of digital services, of the main editorial initiatives of the data controller, concerning contents and services similar to those requested by the interested party (on the basis of Article 130 c. 4 Legislative Decree 196 / 2003)|
|Retention period||The data are kept until the user is canceled or until the right to object is exercised.|
|Contribution||Necessary, with the possibility of exercising the right to object.|
2. What personal data is collected and how it is used
What is personal data?
Personal data is that information which, directly or indirectly, allows the user to be identified as a natural person. The name, surname and address are examples of data that allow direct identification; other data, however, could determine an identification of the natural person only if processed together with other information, allowing the so-called indirect identification. The types of data processed through this website are:
During their normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
|Purpose and legal basis of the processing||These data are used in order to obtain anonymous statistical information on browsing activity and to check its correct functioning, based on the conditions of use of the site. The data could also be used to ascertain responsibility in the event of computer crimes against the site.|
|Retention period||The data are kept for a maximum of 15 days, with the exception of any extensions connected to investigation activities.|
|Contribution||The data are automatically acquired by the technological systems of the site.|
Data provided voluntarily by the user using the website
The optional, explicit and voluntary sending of the user in relation to the sending of e-mail and / or ordinary mail sent to the contact data contained in the addresses on the website.
Personal data will in any case be kept with times compatible with the purpose of the collection.
Data processing for the organization of events
Sending is optional, explicit and voluntary by the user in relation to participation in events organized by the Owner.
|Purpose and legal basis of the processing||Execute the request for participation by the user interested in the event, its management and organization, attendance detection, production of certificates, certificates and documents|
|Retention period||The data are kept for the entire duration of the contract and for a maximum of 10 years from the conclusion of the contract.|
|Contribution||Required for participation in the event.|
Data processing of customers and suppliers registered in the community
The data are processed for:
- conclude contractual / professional relationships;
- fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships, as well as manage the necessary communications connected to them;
- fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority;
|Purpose and legal basis of the processing||Execution of the contract with the customer / supplier and management of administrative and accounting obligations.|
|Retention period||The data are kept for the entire duration of the contract and for a maximum of 10 years from the conclusion of the same, for the obligations of an assessment nature.|
|Contribution||Mandatory for the execution of the contract|
Regarding the data entered in the community, these will also be used to put in contact investors, other companies, universities that do a search within the Experience the Future database.
The companies process personal data for marketing purposes, through various tools, such as:
- advertising through newsletters, the website and on social media platforms;
- sending of specific messages and content, in relation to user preferences, with monitoring of the effectiveness of the messages.
Furthermore, again for marketing purposes, the data is transferred to commercial partners of the Athesis Group, in order to receive promotions, discounts and targeted communications based on the data provided.
|Purpose and legal basis of the processing||
The purposes pursued through the processing of personal data are:
- inform the user about the Group's services and products, promotions and events;
- better understand customers in order to improve marketing services and activities (also benefiting user experience).
Processing takes place on the basis of the user's consent.
|Retention period||The data are kept until the withdrawal of consent or for a maximum of 24 months from the last interaction with the user.|
3. Rights provided by law
The law guarantees a series of rights relating to your personal data. The Company undertakes to protect personal data and to comply with the data privacy laws in force from time to time. More information and tips on rights can be obtained fromNational authority responsible for the protection of personal data.
For more information on how to exercise your rights, write to email@example.com
The user can request the list of suppliers and processors currently used by the Company.
|rights||What does it mean?|
|1. Right to information||The user has the right to receive clear, transparent and easily understandable information on how his personal data is used and on his rights. It is for this reason that the information contained in this text is provided, pursuant to art. 13 and 14 of the GDPR.|
|2. Right of access||The user has the right to obtain access to their data (if these data are being processed) and other information on the processing, as provided for by art. 15 of the GDPR.|
|3. Right to rectification||Article. 16 of the GDPR provides the user with the right to have their personal data corrected in the event of inaccuracy or incompleteness.|
|4. Right to cancel||The user can request the deletion or removal of data where there is no valid reason to continue using it. This is not a general right to cancellation and can be exercised within the limits set by art. 17 of the GDPR.|
|5. Right to limit the processing of data||In certain cases, the user has the right to limit the use of his personal data, as better specified in art. 18 of the GDPR.|
|6. Right to data portability||The user has the right to obtain and reuse his personal data for his purposes in different services, if the treatment is carried out with automated means and with the additional conditions referred to in art. 20 of the GDPR.|
|7. Right to object to treatment||The user has the right to object to the processing for direct marketing purposes (carried out only with prior consent) and also to the processing that is carried out for the purpose of protecting the legitimate interests of the company, according to the provisions of art. 21 of the GDPR.|
|8. Faculty to make complaints||The user has the right to lodge a complaint on the ways in which the company processes or processes his personal data with the national guarantor for the private protection of personal data.|
|9. Right to withdraw consent||If the user has given his consent to the processing of his personal data, he has the right to withdraw this consent at any time (although, in this case, this does not imply the unlawfulness of the treatment put in place until the time of the revocation) , as required by art. 7 of the GDPR. This includes the right to withdraw consent to the use of personal data for marketing purposes.|