The Community, as Data Controller, processes personal data in compliance with the general principles and special provisions of EU Regulation 2016/679: in compliance with the provisions of article 13 of the aforementioned legislation, we inform you of the following characteristics of the processing, as well as the rights that the law guarantees you.
The Data Controller collects and processes the following personal data:
Personal data of the Data Subject (name and surname);
Contact details (e-mail).
The Data Controller collects and processes the personal information of the data subject for the following purposes:
allow the Data Subject to register on the Community platform, using the services;
manage any problems relating to access to the reserved area (for example in the event of a password reset);
provide assistance and support.
The legal legitimacy of the processing can be found in the execution of contractual obligations between the Parties.
The personal data of data subjects is processed electronically (e.g. through the use of databases, application software). The Data Controller retains the personal information of data subjects as long as needed to meet the purposes for which they were collected and in compliance to the Law.
The personal data may be disclosed to employees of the Controller who need to know it in order to manage the Community, with particular reference to administrative, IT and marketing staff. Our employees have been trained and instructed in the legal requirements for protecting personal information.
The Data Controller shares the personal data of data subjects with certain suppliers who assist the Controller in the management of the platform: if the supplier becomes aware of the data, he shall do so in compliance with the legislation in force on data protection, and with the instructions given by the Controller in the relevant deeds of appointment as External Data Processor. The Data Controller does not disclose personal information to other third parties without the consent of the data subjects, unless required to do so by law or by an Authority (e.g. where it is necessary for reasons of national security, public interest).
Your data will not be transferred outside the European Economic Area.
EU Regulation 2016/679 guarantees data subjects specific rights (article 15-22). For each processing, in particular: right of access, right to rectification, right to object to the processing of personal data for commercial purposes, right to object to decisions based on purely automated processes, right to withdraw a consent given, at any time, right to apply to the Data Protection Authority if they have doubts about the processing of personal data by the Controller. The following rights may also be exercised, subject to certain circumstances: right to erasure, right to object to processing, right to limit the processing, right to data portability.
The Data Subject may, at any time and in any manner, exercise his or her rights under the law by contacting the Community.
The Data Controller shall take care to reply within the time limits laid down by law.