INFORMATION PURSUANT TO ART. 13-14 OF THE GDPR (GENERAL REGULATION ON DATA PROTECTION) 2016/679 AND OF THE NATIONAL LAW
SIMPLIFIED INFORMATION
The Photolux Cultural Association, as owner (based in via Guidiccioni, 188 – 55100-Lucca, IT; Email: info@photoluxfestival.it; Telephone: +39 0583 53003), will process the personal data provided with this form, with mainly IT and telematic methods, for the purposes set out in Regulation (EU) 2016/679 (RGPD), in particular for the performance of its duties of public interest or in any case connected to the exercise of its public powers, including the purposes of archiving, historical research and analysis for statistical purposes.
Who processes my data?
The provision of data in the fields marked with an asterisk (*) is mandatory and failure to enter them does not allow you to proceed with the processing of the application and / or the provision of the service. On the other hand, the release of the data in the fields not marked with an asterisk, although it may be useful to facilitate the management of the procedure and the provision of the service, is optional and failure to indicate them does not affect the completion of the procedure itself.
Do I have an obligation to provide data?
The data will be processed for as long as necessary for the provision of the service or service and, after the communication of the cessation of the activity of the owner or manager or of the revocation of the DPO’s assignment, the data will be stored in accordance with the rules. on the conservation of administrative documentation.
How long are my data processed?
The data will not be disclosed to third parties or disseminated, except in the cases specifically provided for by national or European Union law and indicated in the detailed information.
Who is my data sent to?
Interested parties have the right to ask the data controller for access to personal data and the correction or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 et seq. Of the RGPD). The specific request to the Authority is presented by contacting the Data Protection Officer at the Photolux Cultural Association (Enrico Stefanelli – Personal Data Protection Officer, via Guidiccioni, 188, Lucca, Tel. 0583 53003, email: e.stefanelli @ photoluxfestival.it).
What rights do I have on my data?
The interested parties, if the conditions are met, also have the right to lodge a complaint with the Guarantor as supervisory authority according to the established procedures.
Who can I contact?
More and more precise details on the purposes of the processing are provided in the “detailed information” sheet.
That’s all?
DETAILED INFORMATION
According to the indicated legislation, the treatment relating to this service will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Pursuant to article 13 of the GDPR 2016/679, therefore, we provide you with the following information:
The personal data that will be collected and processed upon activation of this service concern: – identification data: surname and name, residence, domicile, birth, tax code, telephone number. -images, characteristic elements of physical identity.
The data collected will be processed as:
– the interested party has given consent to the processing of their personal data for one or more specific purposes (in this case the consent will be acquired with a separate document);
– the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail, in particular if the data subject is a minor.
The personal data provided will be subject to: – collection
-registration
-organization
-consultation -consultation -use
The treatment:
– does not involve the activation of an automated decision-making process
We inform you that, taking into account the purposes of the processing as described above, the provision of data is mandatory and their failure, partial or incorrect provision may result in the impossibility of carrying out the activity.
If the person providing the data is under the age of 16, this processing is lawful only if and to the extent that such consent is given or authorized by the holder of parental responsibility for whom the identification data and a copy of the identification documents.
The treatment will be carried out both with manual and / or IT and telematic tools with organization and processing logics strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data in compliance with the organizational and physical measures. and logic provided for by the provisions in force.
In particular, the following security measures have been adopted:
-specific measures put in place to deal with the risks of destruction, loss, modification, access, unauthorized disclosure, the effectiveness of which must be evaluated regularly.
– Authentication systems
– authorization systems
– protection systems (antivirus; firewall; anti-intrusion; other) adopted for the treatment
-Safety also logistic
Personal data is stored:
– unlimited time in compliance with current legislation
You can, at any time, exercise the rights:
– to request more information in relation to the contents of this information
– access to personal data;
– to obtain the correction or cancellation of the same or the limitation of the processing that concerns him (in the cases provided for by the law);
– to oppose the processing (in the cases provided for by the law);
– to the portability of data (in the cases provided for by the legislation);
– to revoke the consent, where provided: the revocation of the consent does not affect the lawfulness of the processing based on the consent given before the revocation;
– to lodge a complaint with the supervisory authority (Privacy Guarantor)
– to mandate a body, organization or non-profit association to exercise its rights
– to request compensation for damages resulting from the violation of the law (Article 82)
If the data controller intends to further process personal data for a purpose other than that for which they were collected, information regarding this different purpose and any further relevant information will be provided before such further processing.
The exercise of your rights may take place through direct contact and / or by sending a request also by email to:
Subject
Help Desk Privacy Manager
Personal data
Enrico Stefanelli Aruba.it
Enrico Stefanelli
Telephone
+39 0583 53003 +39 0575 05077 +39 0583 53003
email
e.stefanelli@photoluxfestival.it
/// coordinamento@photoluxfestival.it
Web-site: www.photoluxfestival.it
We inform you that you can obtain further information on the processing of data and on the exercise of your rights as well as on the relevant legislation at the following links:
Link
Web-site: www.photoluxfestival.it
https://eur-lex.europa.eu/legal- content/IT/TXT/?uri=uriserv:OJ.L_.20 16.119.01.0001.01.ITA
https://europa.eu/european- union/about-eu/institutions- bodies/european-data-protection- supervisor_it
Italian Data Protection Supervisor http://www.garanteprivacy.it/web/gu est/home
THE OWNER
Associazione Culturale Photolux
based in via Guidiccioni, 188 – 55100-Lucca, Italia C.F. 02285960460
web-site: www.photoluxfestival.it
Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data and repealing Directive 95/46 / EC (General Data Protection Regulation) (Text with EEA relevance)
European Data Protection Supervisor (EDPS)
