This information is provided pursuant to art. 13 of the EU General Regulation 2016/679 (hereafter “GDPR”) on the protection of personal data to those who interact with the site iadelucapianofestival.it on which the information is available and available for consultation.
The processing of personal information concerning you will be based on principles of correctness, lawfulness and transparency and protection of your privacy and your rights. The legislation in question provides above all that anyone who carries out processing of personal data is required to inform the data subject on which data are processed and for what purpose, therefore, in accordance with the provisions of art. 13 of the RGDP 2016/679, we provide you with the following information.

For all activities that may require the processing of data of identified or identifiable persons, the Data Controller is Cesarina Arcangeli Co-President of the Cultural Association il cuscino di stelle, with registered office in Pereto (AQ) in via della Montagna n .29. To exercise the granted rights in articles 15 to 23 of the GDPR, the interested party have to contact the Data Controller by registered letter or e-mail.

Hosting servers are located at Aruba https://www.aruba.it/informativa_arubaspa.pdf

The personal data provided will be used in order to perform the service or provision requested.

The treatments have been handled only by personnel in charge of processing, or by persons in charge of coordination and organization operations.

Navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.

These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than six months.

Data provided voluntarily by the user. The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request.

We only treat / process your personal data, and will be used only to perform the service or the requested service. Limited to the information provided on this site, Personal data that can be classified as sensitive or judicial “Details” will not be processed.

In the case of data processing of minors, the consent must be obtained from the parents or the parental authority if the person concerned is under 16 years of age.

The data are collected by us with the exclusive purpose of processing information requests to you, namely:

1. provision of services based on web interface (users registry);
2. the collection, storage and processing of your personal data for administrative and accounting purposes, including any electronic transmission of commercial invoices;
3. purposes connected to the obligations established by laws, regulations, community legislation and provisions issued by authorities legitimated by the law;

The processing of personal data for the purposes in points a) and b) above, does not require your express consent (Article 24, letters a) and b) of the Code and art. 6 lett. b) and e) of the RGPD).

The legal basis of the processing is based on the legitimate interest of the Data Controller to perform the services requested on the basis of a contract.

You will always have the right to freely and freely oppose, in whole or in part to the processing of your data for said purposes, excluding for example the automated methods of contact and expressing your desire to receive commercial and promotional communications exclusively through traditional ways of contact.

Apart from that specified for navigation data, the user is free to provide personal data contained in the site forms. The data required for the purposes referred to in the preceding letters a), b), c) must be provided to follow up any requests. Therefore your eventual refusal, even partial, to provide such data would make it impossible to establish and manage the relationship itself and provide the requested service.

We retain your personal data only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose. Therefore, if the personal data are processed for two different purposes, we will keep this data until the end with the longer term ends, however we will no longer process personal data for that purpose whose storage period has ceased.

We limit access to your personal data only to those who need to use it for relevant purposes.

Your personal data that are no longer needed, or for which there is no longer a legal requirement for its preservation, conservation, are irreversibly anonymised (and thus can be stored) or destroyed safely.

Below we report the storage times in relation to the different purposes listed above:

1. Fulfillment of contractual obligations: the data processed to fulfill any contractual obligation may be retained for the duration of the contract and in any case not later than 10 years, in order to verify any differences including accounting documents (for example invoices).
2. Operational management and purposes strictly related to access to the website: the data processed for this purpose may be kept for the duration of the contract and in any case not later than 10 years.
3. Purposes of customer satisfaction surveys: the data processed for this purpose may be kept for 24 months from the date on which we obtained your last consent for that purpose (with the exception of the opposition to receive further communications).
4. Disputes: in the event that we defend or act or even make claims against you or third parties, we may retain the personal data that we will reasonably need to process for such purposes, for as long as such a claim can be prosecuted.

The processing of data takes place / will occur through the use of electronic tools through our. computer system, and in this case will be recorded on protected, protected or manually protected IT media and the relative paper documentation will be correctly maintained and protected for as long as necessary for processing through procedures that guarantee security and confidentiality to prevent loss data in compliance with the security measures referred to in art. 32 of the GDPR 2016/679, 2016/679 from illicit or incorrect use and unauthorized access and may be carried out either by paper means, or through the use of automated electronic tools for the time strictly necessary to achieve the purposes for which they have been collected.

Your data will not be “disseminated” by us, with this term being intended to inform you of indeterminate subjects in any way, including by making available or consulting them, unless specifically authorized by the interested party with a separate deed. Your data may instead be “communicated” by us, with this term meaning to give it information to one or more specific subjects, in the following terms:

• to subjects in charge of processing your data;
• to subjects who can access the data by virtue of the provision of law, regulation or community legislation, within the limits set by these rules;
• to subjects who need access to your data for purposes auxiliary to the relationship between you and us, within the limits strictly necessary to perform the tasks assigned to them such as: urp of theaters and art institutions with which they had established collaborations.

The management and storage of data will take place on servers located within the European Union of third-party companies appointed and duly appointed as Data Processors. The data will not be transferred to outside the European Union.

In any case it is understood that, where necessary, we will have the right to move the server location to Italy and / or the European Union and / or non-EU countries. In this case, the holder ensures from now on that the transfer of non-EU data will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements guaranteeing an adequate level of protection and / or adopting the standard contractual clauses provided by European Commission.

In case of transfers in the US area, we will refer to the “Privacy shield” between the EU and the USA.

We also inform you that, as an interested party, pursuant to articles 15 to 23 of the RGDP 2016/679, in addition to the right to lodge a complaint with a supervisory authority, you are given the specific rights listed below, which you can it is worth asking a specific request to the Data Controller and / or to the person in charge of the processing indicated at the bottom of this statement.

Art. 15 – Right of access

The interested party has the right to obtain from the data controller confirmation that it is or is not undergoing treatment of personal data concerning him and, in this case, to obtain access to personal data and information concerning the treatment.

Art. 16 – Right of rectification

The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

Art. 17 – Right to cancellation (right to be forgotten)

The data subject has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay.

Art. 18 – Right to limit processing

The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:

1. to. the applicant disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such data;
2. the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
3. although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
4. the interested party opposed the treatment pursuant to Article 21 (1), pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

Art. 20 – Right to data portability

The interested party has the right to receive, in a structured format, in common and automatic way, the personal data concerning him / her provided to a data controller and has the right to transmit this data to another data controller without impediments from part of the data controller to whom he provided them. In exercising its rights relating to the portability of data pursuant to paragraph 1, the data subject shall have the right to obtain direct transmission of personal data from one controller to another, if technically feasible.

Art. 21 – Opposition right

The interested party has the right to oppose at any time, for reasons connected with his particular situation, to the processing of his personal data pursuant to Article 6, paragraph 1, letters e) of), including profiling on the basis of these provisions.

Art. 22 – Right not to be subjected to automated decision making, including profiling

The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person.

You may exercise your rights at any time or withdraw your consent by sending a notice to the addresses and in the manner indicated below, email: ilcuscinodistelle@tiscali.it.

This information is updated at 6 February 2019.