INFORMATION ON THE PROCESSING OF PERSONAL DATA
According to Regulation (EU) 2016/679 and Legislative Decree 196/2003.
This communication fulfils the information obligation provided for by Article 13 of Regulation (EU) 2016/679 (hereinafter the Regulation) in relation to any personal data provided directly or by any persons authorised in relation to the proceedings for which such data are collected.
According to Article 1 of the Regulation the following shall be understood as:
personal data shall mean any information relating to an identified or identifiable natural person (data subject); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his physical, physiological, genetic, mental, economic, cultural or social identity;
processing shall mean any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording,
organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination,
restriction, erasure or destruction, blocking, erasure or destruction, in order to prevent the unauthorised processing of personal data or sets of personal data.
Purpose and obligatory nature of processing
The personal data requested are necessary for the fulfilment of the administrative procedure governed by the law and the implementing regulation. In the event of failure to provide the requested data, it is not possible to initiate the procedure if such data are essential to the conduct of the inquiry
Processing methods
Processing is carried out in automated and/or manual form, in compliance with the security measures appropriate to the risk. In particular, the security measures adopted are aimed at
preventing unauthorised access, disclosure, modification or destruction of personal data
Recipients or categories of recipients of personal data
The personal data acquired may be disclosed to other public administrations in order to fulfil the obligations arising from the establishment of national registers, for the performance of reporting and control activities, or to persons specified by sector regulations or procedures
Personal data retention period
Personal data are retained for a period of 10 years from the conclusion of the case in question
Fundamental rights of the data subject and the possibility to exercise them
Persons concerned by the processing of personal data may exercise:
the right to access personal data and information concerning them
the right to have inaccurate personal data corrected or supplemented without undue delay
Persons concerned by the processing of personal data may exercise
-the right of access to personal data and information concerning them -the right to rectification or integration of inaccurate or incomplete personal data, without undue delay
-the right to lodge a complaint with the Garante della Privacy -the right to restriction of processing, exercisable when one of the following cases occurs (Article 18(1) of the Regulation)
the data subject contests the accuracy of personal data, for the period necessary for the DataController to verify the accuracy of such data
The processing is unlawful and the data subject objects to the erasure of the personal data and requests instead that their use be restricted Although the Controller no longer needs the personal data for the purposes of processing, the personal data are necessary for the establishment, exercise or defence of legal claims by the data subject
The data subject has objected to the processing pursuant to Article 21(1) of the Regulation, pending verification as to whether the legitimate reasons of the Data Controller prevail over those of the data subject
This information notice is issued in accordance with Regulation (EU) 2016/679 and Legislative Decree 196/2003, applies from 25 May 2018 and replaces any other information or provision on
the processing of personal data