Information on the processing of personal data pursuant to Art. 13 of Legislative Decree 196/2003 and of Articles 13 and 14 of EU Regulation 2016/679
The interested parties are informed that the Legislative Decree n. 196/2003 (the so-called “Personal Data Protection Code” – hereinafter, for the sake of brevity, the “Code”) and the EU Regulation n. 2016/679 (hereinafter, for brevity, “GDPR”) provide for the protection of the Processing of Personal Data.
In compliance with the provisions of the Code, the GDPR and current legislation, the Data Processing by DiverCity of Valentina Dolciotti (hereinafter DiverCity) will be based on principles of correctness, lawfulness and transparency with respect for rights and freedoms fundamental, of the dignity of the Interested Party, with particular reference to confidentiality, personal identity and the right to the protection of Personal Data.
This information is provided pursuant to art. 13 of the Code as well as pursuant to articles 13 and 14 of the GDPR and is subject to updates which are advertised on this website. We therefore recommend that you regularly check the information and refer to the most up-to-date version.
The Data Controller
DiverCity, data controller, with registered office at Via 4 Novembre 36, Bergamo, guarantees compliance with the regulations on the protection of personal data by providing the following information about the processing of data communicated or otherwise collected during navigation on this site.
Personal data subject to processing and purpose
3.1 Data generated from access to the site
The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This data (such as for example domain names, IP addresses, operating system used, type of browser device used for the connection) is not accompanied by any additional personal information and is used to manage control requirements for the use of the site and ascertain responsibility in case of hypothetical computer crimes.
The legal basis that legitimates the processing of such data is the need to make the site functionalities usable following access by the user.
3.2 Data provided voluntarily by the user
The personal data provided by the user through registration forms are collected and processed for the following purposes:
a) for the performance of customer relationship activities based on contractual agreements and for their execution; </ P>
b) for administrative purposes and for the fulfillment of legal obligations such as, for example, those of an accounting, fiscal nature, or to initiate requests by the judicial authority; </ P>
c) in the presence of specific consent, for the periodic sending, via e-mail, of newsletters to receive updates on our activities and invitations to events.
The legal basis that legitimates the processing is the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same. In the cases expressly indicated the legal basis is instead the consent freely provided by the interested party.
4. Nature of the provision
Apart from that specified for navigation data, the provision of data:
with respect to the purposes referred to in letters a), b) it is optional, but refusal will make it impossible for DiverCity to fulfill its contractual commitments; with respect to the purposes referred to in the letter
c) it is also optional and their use is subject to the release of an explicit consent.
Any refusal will make it impossible for DiverCity to send newsletters or invitations to events and initiatives.
5. Processing methods and data storage times
The data collected will be processed by electronic or automated, computerized and telematic means, or by manual processing with logic strictly related to the purposes for which the personal data was collected and, in any case, in order to guarantee the security of the same in each case. . The data is stored for the time strictly necessary for the management of the purposes for which the data is collected in compliance with current regulations and legal obligations.
In any case, DiverCity practices rules that prevent the storage of data indefinitely and therefore limits the storage time in compliance with the principle of minimization of data processing.
6. Subjects authorized to process, responsible and communicate data
The processing of the data collected is carried out by internal DiverCity personnel for this purpose identified and authorized for processing in accordance with specific instructions issued in compliance with current legislation.
The data collected, if it is necessary or instrumental for the execution of the aforementioned purposes, may be processed by third parties appointed as external Data Processors, or, depending on the case, communicated to them as independent data controllers, namely:
the. persons, companies, associations or professional firms that provide assistance and consultancy services to our company, for the purposes referred to in point 3.2 lett. b);
ii. companies, organizations, associations that perform services connected and instrumental to the execution of the above-mentioned purposes (credit card payment management, IT system maintenance).
7. Place of data processing and their transfer
The processing and storage of data takes place on servers located within the European Union, also at third party companies duly appointed and appointed as Data Processors. Currently, the servers are located in France. Data is not transferred outside the European Union. The Owner reserves the right to change the location of the servers even outside the European Union, ensuring, in this case, that the transfer takes place in compliance with the applicable legal provisions, with the appropriate guarantees provided for by art. 46 of the GDPR. In any case, personal data will never be disclosed
8. Rights of the interested party
Pursuant to articles 15 and following of the GDPR, the user has the right to request at any time, access to his personal data, rectification or deletion of the same, limitation of processing in the cases provided for by art. 18 of the GDPR, to obtain in a structured format, commonly used and readable by an automatic device, the data concerning it, in the cases provided for by art. 20 of the GDPR. At any time, the user can revoke pursuant to art. 7 of the GDPR the consent given; to lodge a complaint with the competent supervisory authority pursuant to Article 77 of the GDPR (Guarantor for the Protection of Personal Data) pursuant to art. 77 of the GDPR, if it considers that the processing of your data is contrary to the legislation in force.
The user can make a request for opposition to the processing of his personal data pursuant to Article 21 of the GDPR in which to give evidence of the reasons justifying the opposition: the Data Controller reserves the right to evaluate the request, which would not be accepted in case of existence of legitimate cogent reasons to proceed with the processing that prevail over the interests, rights and freedom of the user.
Requests must be sent in writing to the Data Controller at the following e-mail address: firstname.lastname@example.org
The functionality cookies used by the site are strictly necessary for the use of the site, in particular they are linked to an express request for functionality by the user (such as Login), for which no consent is required.