Subjects Concerned: Risò Site Navigators.
Subjects Concerned: Risò Site Navigators
The Province of Vercelli, in its capacity as Data Controller of your personal data, pursuant to and for the purposes of the EU Regulation 2016/679 (hereinafter referred to as ‘GDPR’), hereby informs you that the aforementioned legislation provides for the protection of data subjects with regard to the processing of their personal data and that such processing will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and your rights.
Your personal data will be processed according to the legal provisions of the aforementioned legislation and to the confidentiality obligations provided for therein.
Purposes and legal basis of the processing
In particular, your data will be used for the following purposes relating to the execution of measures connected with contractual or pre-contractual obligations:
- Management of event reservations.
Your personal data may also, with your consent, be used for the following purposes:
- Sending Newsletters.
The provision of data is optional for you with regard to the above-mentioned purposes, and any refusal on your part to allow processing will not compromise the continuation of the relationship or the appropriateness of the processing itself.
Methods of processing
Your personal data may be processed in the following ways:
- Processing by means of electronic devices (EDP – Electronic Data Processing).
All processing is carried out in compliance with the methods set out in Articles 6, 32 of the GDPR and by adopting the appropriate security measures.
Your data will be processed only by personnel expressly authorised by the Data Controller and, in particular, by the following categories of authorised personnel:
- Environment Territory Area – Tourism Office.
Communication
Your data may be communicated to external parties for the proper management of the relationship and in particular to the following categories of Recipients including all duly appointed Data Processors:
- Consultants and freelance professionals, also in associated form
- Partners of the Risò organisation
Dissemination
Your personal data will not be disseminated in any way.
Retention Period
We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Art. 5 of the GDPR, the retention period of your personal data is:
- Established for a period of time not exceeding the performance of the services provided;
- Your personal data will be stored for the period provided for in the Organisation’s filing and storage plan and in any case only for the time needed to pursue the purposes for which they are collected, in compliance with minimisation pursuant to Art. 5.1 c) GDPR, as well as according to the time necessary for the management of specific legal or administrative obligations for the periods required by current legislation.
Your personal data will not be transferred in any way to a third country outside Europe, nor communicated to third parties outside the cases provided for by current legislation, nor subject to automated decision-making processes including profiling.
Data Controller
The Data Controller, pursuant to the Law, is the Province of Vercelli (Via San Cristoforo, 3, 13100 Vercelli (VC), CF: 80005210028, contactable at: 0161 5901) in the person of its legal representative pro tempore.
Data Protection Officer (DPO)
The DPO designated by the controller pursuant to Art. 37 of the GDPR is:
Data Protection Officer (contactable at: rpd@provincia.vercelli.it).
Your Rights
You have the right to obtain from the controller the erasure (‘right to be forgotten’), limitation, updating, rectification, portability, and opposition to the processing of personal data concerning you. You may exercise all rights provided for in Articles 15–22 of the GDPR.
You may also view the updated version of this policy at any time at:
https://www.privacylab.it/informativa.php?20180491497.
EU Regulation 2016/679: Articles 15–22 – Data Subject’s Rights
to the processing of personal data for legitimate reasons, even if relevant to the purpose of collection.
The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him or her exist, regardless of whether they are already recorded, and their communication in an intelligible form. The right to lodge a complaint with the Supervisory Authority is also guaranteed.
The data subject shall have the right to be informed of:
the origin of their personal data;
the purposes and methods of processing;
the logic applied in the event of processing with electronic devices;
the identity of the data controller, processors, and representative as per Article 5(2);
the recipients or categories of recipients to whom the data may be communicated or disclosed.
The data subject has the right to obtain:
the updating, rectification or, where interested, integration of the data;
the erasure, transformation into anonymous form or blocking of data processed unlawfully, including data unnecessary for the stated purposes;
certification that the operations in the previous two points have been notified to those to whom the data were disclosed, unless this proves impossible or involves disproportionate effort;
data portability.
The data subject shall have the right to object, in whole or in part:
to the processing of personal data for the purpose of sending advertising materials, direct selling, market research or commercial communication;
