This information is provided in accordance with art. 13 of Regulation 2016/679 (GDPR), pursuant to art. 13 of Legislative Decree no. 196/2003 (Code for the protection of personal data) and relates to all personal data processed in the manner indicated below.
THE DATA CONTROLLER
The owner of the processing of personal data collected is MALTE (Music Art Literature Theater Etc.) Via Raffaello Sanzio, 14 Ancona (AN) Italy – Legal Representative Sonia Antinori
The personal data provided may be communicated to appropriately appointed recipients who will treat the data as data processors and/or as persons in charge, in order to comply with contracts or related purposes.
The complete list of the persons responsible for the processing and of the persons in charge of the processing of personal data can be requested by sending a specific request to the e-mail address email@example.com.
In the event that personal data are transferred outside the European Union, for purposes of a technical operational nature and to ensure a high continuity of service, the Data Controller shall ensure that the transfer is based on an adequacy decision of the Commission, in order to ensure that the level of protection of individuals guaranteed by current legislation and in particular by EU Regulation 2016/679 is not affected.
The personal data processed are collected as they are provided directly by the data subject or collected automatically.
Data provided directly by the data subject are all personal data that are provided to the Data Controller in any way, directly by the data subject.
The data collected automatically are the navigation data. These data, although not collected in order to be associated with the identity of the user, could indirectly, through processing and associations with data collected by the Owner, allow its identification.
Following the sending of newsletters, the platform used allows to detect the opening of a message and the clicks made within the newsletter itself, together with details of the IP and the browser/device used. The collection of this data is essential for the functioning of the systems of implicit renewal of the treatment (see the section Modality of Treatment) and an integral part of the operation of the sending platform.
PURPOSE OF TREATMENT
The conferment of personal data has as its legal basis the contractual or pre-contractual requirements or the fulfillment of legal obligations to which the data controller is subject. For this reason, any refusal to process, or failure to provide, incorrect or partial provision of data could make it impossible to provide the service correctly or make it impossible for the Data Controller to respond to requests for information sent by the data subject.
The provision of data for the purpose of sending newsletters for promotional, commercial information or research is optional and refusal to give consent to treatment will make it impossible to be updated about business initiatives and / or promotional campaigns, to receive offers or other promotional material.
WITHDRAWAL OF CONSENT
The interested party may revoke their consent to receive promotional and commercial communications immediately, by sending a request to the email address firstname.lastname@example.org or by clicking on the appropriate unsubscribe link that can be found in the footer of every promotional and commercial email received.
The personal data provided may be communicated to appropriately appointed recipients who will treat the data as responsible for the treatment and / or as appointed.
The Owner of the treatment does not communicate to third parties any of the data without their consent, except where required by law. It is in any case excluded the diffusion of personal data processed. The complete list of the persons in charge of the treatment, of the co-processors and of the persons in charge of the treatment of the personal data can be requested by sending a specific request to the e-mail address email@example.com.
METHODS OF TREATMENT
Personal data are processed by automated tools for the time strictly necessary to achieve the purposes for which they were collected, providing in any case the annual verification of data stored in order to delete those considered obsolete, unless the law does not provide for storage obligations.
The processing of data is usually carried out at the headquarters of the Owner, by staff or external collaborators duly designated as data processors. The complete list of the persons in charge of the processing and of the persons in charge of the processing of personal data can be requested by sending a specific request to the email address firstname.lastname@example.org.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
The registration and its treatment are considered valid until the unsubscription by the user, present in each email, or after 12 months from the last communication of which has evidence of direct interaction (click, opening, response).
RIGHTS OF THE DATA SUBJECT
Pursuant to Articles 15 – 21 of EU Regulation 2016/679 each data subject is granted a number of rights.
Right of Access: the data subject, pursuant to Art. 15, has the right to obtain confirmation that personal data concerning him or her is being processed and, where applicable, to obtain a copy thereof. He also has the right to obtain access to personal data concerning him and further information such as the purpose of processing, the categories of recipients, the period of storage of data and the rights exercisable.
Right to rectification: the interested party, pursuant to art. 16, has the right to obtain the rectification of inaccurate personal data concerning him or the integration of the same.
Right to cancellation: the interested party has the right to obtain the cancellation of personal data concerning him, without undue delay, if there is one of the reasons provided for in art. 17.
Right to restriction of processing: the data subject has the right, in the cases provided for by Article 18 of Regulation 2016/679, to obtain the restriction of processing.
Right to data portability: the data subject has the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning him/her and has the right to transmit such data to another controller without hindrance, in accordance with the provisions of Article 20 of Regulation 2016/679;
Right to object to processing: the data subject has the right to object to the processing of personal data concerning him/her in accordance with the provisions of Article 21 of Regulation 2016/679.
The data subject also has the right to lodge a complaint with the competent supervisory authority, the Privacy Guarantor.
The requests referred to in the previous points must be addressed in writing to the Data Controller. The Data Controller will provide, within the time limits established by the regulations in force, a prompt reply to the requests to exercise the rights of the interested parties.
Any clarification or request for clarification may be addressed in writing to the data controller.
UPDATES AND CHANGES
The Data Controller reserves the right to modify, integrate or periodically update this Information Notice in compliance with the applicable legislation or the measures adopted by the Guarantor for the Protection of Personal Data.