INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO EUROPEAN REGULATION 679/2016 – GDPR (General Data Protection Regulation)
Data Controller
The data controller is CCI
Centro Congressi Internazionale S.r.l., with registered offices in
Turin, Italy, Via San Francesco da Paola 37, in the person of its
legal representative; any request concerning processing may be sent
to the Data Processor, Ms. Germana Garrone, at the abovementioned
address or e-mail address privacy@ccicongress.com.
Purposes of processing
The personal data we
are supplied through the registration procedures for congresses,
courses or events or Distance Education training activities; through
subscription to the technical or informational newsletter services;
or communicated as a function of the membership to associations whose
Secretariat is managed by CCI are subject to processing.
The purposes of the processing are those mentioned in the registration form for the activities organized or in any case managed by CCI on behalf of third parties; those derived from the formalization of trade agreements with CCI; from the detailed request of services provided by CCI; or those arising from the participation as a rapporteur, teacher or moderator in educational or informational activities organized or managed by CCI directly or on behalf of third parties.
The purposes of the processing that derive from the enrollment as a member of associations whose Secretariat is managed by CCI are those which derive from the management of the personal details of the members and from the communications of the managed association.
The data can be used by CCI for both technical and commercial marketing and communication purposes through the transmittal of information on the technical, scientific and commercial services and initiatives of CCI and/or of third-party companies in general via telephone, SMS, MMS, postal services and e-mail with the specific and explicit authorization of the data subject.
Nature of the Conferment
The conferment of
data is not mandatory, however, the eventual refusal to allow the
processing of data means that the data subject is unable to access
the information necessary for the participation in training and
informational activities organized, promoted or in any way managed by
CCI directly or on behalf of third parties; therefore a refusal
entails the impossibility for CCI to provide the data subject with
any service, including the issuance of credits related to the
participation in accredited training activities.
Methods of processing
The personal data we
receive are managed and archived with the aid of information
technologies whose structure and configuration fully meet the safety
requirements required by the regulation and the data are processed by
specially appointed internal personnel. The data requested for the
purposes referred to in “Purposes of processing” are
exclusively those strictly necessary for the supply of the services
requested. All credit/debit cards details and personally identifiable
information will NOT be stored, sold, shared, rented or leased to any
third parties CCI website will not deal or provide any services or
products to any of OFAC (Office of Foreign Assets Control) sanctions
countries in accordance with the law of UAE.
CCI accept payments
online using Visa and MasterCard credit/debit card in EURO, AED and
US dollar. Any purchase, dispute or claim arising out of or in
connection with this website shall be governed and construed in
accordance with the laws of EUROPE and UAE
Communication and Dissemination
The data are
not disseminated but they may be communicated to third parties in
relation to the mode of delivery of the service requested if it
necessarily involves partner companies or third party suppliers.
The
data may be used for sending technical and scientific information and
information related to marketing activities concerning services
similar to the ones for which they were supplied to the CCI for the
first time with the specific and explicit permission of the data
subject.
If, after the necessary registration for the supply
of the service requested, the data subject wishes to request/access
other similar services by CCI or developed by CCI on behalf of third
parties, the data subject can use the credentials provided by CCI
during the initial registration (user name/e-mail/password); said
credentials can also be used by the data subject to check or change
the previously supplied data that are subject to processing by CCI.
Retention
The data will be stored until the
end of the activities for which they were supplied, after this
period, unless specifically and explicitly requested by the data
subject, they will be erased.
Rights of the Data subject
The subjects to
whom the personal data refer have the right at any time to exercise
the rights recognized by the GDPR that we list hereinafter:
- the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and their communication in intelligible form;
- the right to obtain the indication of the origin of the personal data; of the purposes and methods of the processing; of the logic applied in case of computerized processing; of the details of the controller and of the appointed processors;
- the right to obtain the updating, the correction or, when interested, the supplementing of the data; the erasure, the transformation into anonymous form or the blocking of unlawfully processed data, including data whose retention is unnecessary for the purposes for which they were collected and then processed;
- the right to object, in whole or in part, for legitimate reasons, to the processing of personal data that concern them, even if pertinent to the collection purpose; to revoke the consent, where permitted, with the clarification that the revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation.
Also, where applicable, the data subjects also have the rights
referred to in articles 16 to 21 of the GDPR (right to be forgotten,
right to the limitation of processing, right to data portability,
right to object), as well as the right to file a complaint with the
Authority for the Protection of Personal Data. To exercise the rights
provided by the GDPR, the data subject must send a written request to
Centro Congressi Internazionale s.r.l., Via San Francesco da Paola
37, 10123 Turin, Italy.