Pursuant to and for the purposes of Articles 13 and 14 of European Regulation 2016/679 (hereinafter GDPR) containing provisions on the protection of personal data, the Company COMPUTER DESIGN S.R.L, Tax Code: 02598060966 – VAT No.: 11980150152, in its capacity as Data Controller (hereinafter referred to as the “Controller”) informs You that the data provided by You, or otherwise acquired, will be subject to processing in compliance with the aforementioned legislation. The processing of personal data will be carried out in a lawful, fair, and transparent manner towards the data subject.
By processing of personal data, we mean any operation or set of operations, carried out even without the aid of electronic tools, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure, and destruction of data, even if not recorded in a database.
- DATA CONTROLLER
The Data Controller is the undersigned COMPUTER DESIGN S.R.L, Tax Code: 02598060966 – VAT No.: 11980150152, with headquarters in Via Piave n. 46, Santo Stefano Ticino, Milan (MI) Email: info.cd@cdesign-group.com – PEC: billing.cd@pec.cdesign.it
- DATA PROTECTION OFFICER
The Data Protection Officer is Atty. Clementina Baroni Tax Code: BRNCMN73T50L826B – VAT No. 02001880356, with offices in Reggio Emilia, Via F. D. Cecati 1/1 Tel. 0522-506307 – 230274 maildpo@studiolegaleavvbaroni.it, pec: clementina.baroni@ordineavvocatireggioemilia.it.
- CATEGORIES OF DATA PROCESSED:
The Data subject to this processing are as follows:
- in the case of a natural person, these will be personal identification data such as, by way of example but not limited to, name, surname, tel. no., email address) and any accounting data;
- in the case of a legal entity, the Data will be the name of the company or the owner/contact person of the company, tel. no., email address, name, surname of any contact persons and/or representatives of the Client company, and any accounting data.
- PURPOSE OF PROCESSING AND LEGAL BASIS
A. MANAGEMENT OF PRE-CONTRACTUAL ACTIVITIES, specifically the management of organizational activities for the event and the use of contact data for commercial proposals. The processing of the collected data is justified by the contract to which you are a party (Art. 6 letter b GDPR)
Data recipients: the data collected in relation to the indicated purpose may be communicated to persons in charge/authorized by the Controller, to data processors designated pursuant to Art. 28 of EU Reg. 2016/679, and to IT consultants/system administrators.
The updated list of processors and persons in charge of processing is kept at the Controller’s headquarters and you may access it at any time by making a specific request to the addresses listed below.
Duration of Processing: the data collected in relation to the aforementioned purpose will be kept until the termination, for any reason, of the contractual relationship or for the longer duration until the expiry of the ordinary statute of limitations for contractual liability, without prejudice to special needs for further data retention in relation to the contractual relationship that took place.
Failure to provide data: In their absence, it would be impossible to fulfill certain obligations provided for by law and contractual ones. Therefore, failure to provide them by You would, in fact, make it impossible to provide the requested services and to proceed further with their fulfillment.
B. FULFILLMENT OF LEGAL OBLIGATIONS, which for example takes the form of: administrative and accounting obligations, tax obligations. The processing of the collected data is justified by the fulfillment of legal obligations incumbent on the Controller (Art. 6 letter c
GDPR)
Data recipients: the data collected in relation to the indicated purpose may be communicated to public bodies and/or private entities to which the communication of data is required by law, to data processors designated pursuant to Art. 28 of EU Reg. 2016/679, and to persons in charge by the Controller.
The updated list of processors and persons in charge of processing is kept at the Controller’s headquarters and you may access it at any time by making a specific request to the
Duration of processing: the data collected in relation to the aforementioned purpose will be kept for the time provided for by the legislation that imposes the processing or for the longer term relating to the prescription of the relative rights, without prejudice to special needs for further data retention in relation to subsequent legal obligations.
Failure to provide data: the provision of data is mandatory and necessary for the fulfillment of obligations provided for by law. Any refusal to provide data for this purpose makes it impossible to continue the relationship.
- PURPOSES RELATED TO THE PERFORMANCE OF OTHER ACTIVITIES FOR WHICH THE PROVISION OF DATA REQUIRES THE CONSENT OF THE DATA SUBJECT.
C.1) USE OF IMAGES AND/OR VIDEOS OF THE DATA SUBJECT: please also note that during the event the data subject may be portrayed in photos and/or videos relating to company activities. These images are mainly used for promotional purposes.
Legal basis for processing: the processing of the collected data is justified by the consent of the data subject (Art. 6 letter a GDPR). The Processing, therefore, will only be carried out following the receipt of explicit consent to the processing which will be communicated through the method proposed below. In case of publication of images and/or videos on the institutional website and/or on the main social channels and/or printed media, the aforementioned images and videos will remain on the site for the time necessary for the purpose for which they are intended. The images and recordings collected will be stored in paper and/or digital format for the time necessary for the planned processing. For said processing, the express consent of the data subject will be required. Pursuant to Art. 6 paragraph 1 letter a), the provision of Your data is optional and subject to Your consent. If consent is not provided, the Controller nevertheless reserves the possibility of publishing photos by blurring the image of the data subject who has denied consent. The consent is valid in all EU member countries.
Processing methods: the processing of data for the purposes set out above takes place via electronic, computer, or paper support in compliance with the rules of confidentiality and security provided for by the regulations referred to above and other subsequent regulations.
Transfer of data abroad: the data collected in relation to the aforementioned purpose are not transferred to non-EU countries.
The Controller, however, reserves the right to use cloud services; in which case, service providers will be selected from among those who provide adequate guarantees, as required by Article 46 GDPR 2016/679.
Automated decision-making processes: the data collected in relation to the aforementioned purpose are not subject to automated decision-making processes (including profiling).
Rights of the data subject: pursuant to EU Reg. 2016/679 the data subject has the right to
- access personal data to know (“reactive transparency”) the purposes of processing, the categories of personal data collected, the recipients of data communication, particularly if recipients in third countries or international organizations, the expected data retention period (Article 15);
- obtain rectification (Article 16);
- the right to obtain the erasure of personal data, if these are no longer necessary in relation to the purposes for which they were collected and if there are no further legal requirements for storage (Art. 17 GDPR);
- request restriction of processing (Article 18);
- request data portability (Article 20);
- object to processing on grounds relating to your particular situation (Article 21 GDPR). In such case, we will refrain from further processing your data unless we demonstrate the existence of compelling legitimate grounds for processing (e.g., for the defense of your rights in legal proceedings).
- not to be subject to automated decision-making, including profiling (Article 22);
- withdraw consent at any time without prejudice to the lawfulness of processing based on consent given prior to withdrawal (Article 7).
Finally, the data subject will have the right to lodge a complaint with the Supervisory Authority pursuant to Article 13 paragraph 2 letter d) of the aforementioned regulation as well as pursuant to Article 77 of the regulation.
Methods for exercising rights: the data subject may at any time exercise their rights in accordance with the provisions of Art. 12 of EU Regulation 2016/679, by sending a:
- registered letter with return receipt to: COMPUTER DESIGN S.R.L, with headquarters in Via Piave n. 46, 20010, Santo Stefano Ticino, Milan (MI)
- PEC: mailto:pec008@pec.mailcft.com billing.cd@pec.cdesign.it;
- email: info.cd@cdesign-group.com or by writing to the Data Protection Officer Atty. Clementina Baroni Tax Code: BRNCMN73T50L826B – VAT No. 02001880356, with offices in Reggio Emilia, Via F. D. Cecati 1/1 Tel. 0522-506307 – 230274 maildpo@studiolegaleavvbaroni.it pec:clementina.baroni@ordineavvocatireggioemilia.it.
Having read and received the privacy policy, the undersigned takes note of the above regarding the processing of data for the purposes indicated.