Information document pursuant to and for the effects of article 13 of the Regulation (EU) 2016/679 (GDPR)
In compliance with the provisions of the Regulation (EU) 2016/679 (European Regulation on the protection of personal data), we provide you with the necessary information regarding the processing of the personal data you have provided. This information does not apply to other websites that may be accessed through links on the owner’s domain websites, which are not responsible for the third-party websites in any way. This information is provided pursuant to article 13 of the Regulation (EU) 2016/679 (European Regulation on the protection of personal data) and is also inspired by the provisions of Directive 2002/58/EC, as updated by Directive 2009/136/EC on Cookies, as well as by the Provision of the Guarantor for the protection of personal data of 08.05.2014 on Cookies and the EDPB Guidelines 05/2020 on consent under the GDPR, adopted on 04.05.2020.
Personal data that can be processed
“personal data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (C26, C27, C30).
Browsing data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and the user’s computer environment (for more information see the Cookies policy of this website).
Data provided by the data subject
The optional, explicit and voluntary sending of messages to the contact addresses, as well as the filling in and sending of the forms on the owner’s website, entail the acquisition of the sender’s contact data, necessary to respond, as well as all the personal data included in the communications.
Specific information
Specific information will be present on the pages of the Website regarding specific services or processing of data provided.
Cookies For more information on the cookies used by this website, please see the cookie policy.
Who is the Data Controller? How to contact them? The Data Controller of the website https://www.fondazioneconservatoririunitisiena.it/, pursuant to articles 4 and 24 of the Regulation (EU) 2016/679, is FONDAZIONE CONSERVATORI RIUNITI DI SIENA with registred office in Via del Rifugio, 4 – 53100 Siena (SI) and VAT number 01539390524. To contact the Data Controller, please send an email to cfrsiena@gmail.com
Purposes of processing, legal basis, period of retention of data, and nature of the provision THE CATEGORIES OF DATA REQUIRED FOR THE FOLLOWING PURPOSES ARE STRICTLY NECESSARY FOR THE EXECUTION OF THE PROCESSING, FOR ANY FURTHER REQUESTS FOR PERSONAL DATA, SPECIFIC CONSENT WILL BE REQUESTED.
Purpose A) Website browsing. • LEGAL BASIS: legitimate interest (art. 6, §. 1 ltr. f) and considering 47 GDPR): the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on his or her relationship with the data controller. Activities strictly necessary for the operation of the website and the provision of the browsing service on the platform. • DATA RETENTION PERIOD: until the end of the browsing session. Please refer to the cookie policy. • NATURE OF PROVISION: necessary in order to allow website browsing.
Purpose B) Possible data collection form for contacts. • LEGAL BASIS: legitimate interest | request of the data subject (art. 6, §. 1 ltr. f) and considering 47 GDPR). • DATA RETENTION PERIOD: for the time necessary to provide a response to the request and in any case not exceeding 2 years. • NATURE OF PROVISION: the provision of data is necessary to allow the controller to provide a response to the requests received through the form. Failure to provide the data will result in the impossibility of obtaining the requested information.
Purpose C) Commercial and promotional newsletter activities • LEGAL BASIS: consent to processing (art. 6 §. 1 ltr. a) • DATA RETENTION PERIOD: for the time necessary to provide a response to the request and in any case not exceeding 12 months. The data subject can easily and free of charge object to the processing. • NATURE OF PROVISION: The provision of data is optional and in the absence of it, the data will not be processed for the pursuit of this purpose. Refusal to provide the data will not affect the availability of other services.
Who will the collected personal data be shared with? The personal data provided will be shared with subjects who will process the data as processors (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Controller and Processor (art. 29 of EU Reg. 2016/679), for the purposes listed above. Specifically, the data will be shared with: – companies contractually linked to FONDAZIONE CONSERVATORI RIUNITI DI SIENA; – subjects who provide services for the management of the information system used by FONDAZIONE CONSERVATORI RIUNITI DI SIENA and telecommunications networks; – freelance professionals, studios or companies in the context of assistance and consultancy relationships; – subjects who provide services for the management of the activities listed in the purposes (subjects for communication, brochure printing, flyers, websites, videos); – managers of platforms for the above-listed services (hosting of websites, YouTube); – commercial partners / sponsors, only with prior consent; – competent authorities for compliance with legal obligations and/or provisions of public bodies, to other associates upon request. The list of Data Processors is constantly updated and available by writing to cfrsiena@gmail.com or at the legal headquarters of the Controller.
Does FONDAZIONE CONSERVATORI RIUNITI DI SIENA transfer data outside the EU? Personal data is not transferred to countries outside the European Union and the European Economic Area. In case such transfer becomes necessary and/or unavoidable for the data controller’s organizational needs, please note that: – It will only take place to countries for which there is an adequacy decision adopted by the European Commission; – If it concerns a country other than the one mentioned in the previous point, in case it becomes necessary to transfer your data to non-EU countries, this will take place in compliance with the limits and conditions set out in articles 44 and following of the EU Regulation 2016/679.
Is there an automated decision-making process? We do not use automated decision-making processes, including profiling.
What are your rights? How can you exercise them? You can exercise your rights as expressed in articles 15, 16, 17, 18, 19, 20, 21, 22 of the EU Regulation 2016/679, by contacting the data controller at the email address cfrsiena@gmail.com. You have the right, at any time, to ask the data controller for access to your personal data, their rectification, erasure, restriction of processing, and portability of your data. Moreover, you have the right to object, at any time, to the processing of your data based on legitimate interest, and in the cases provided for, you have the right to withdraw the consent given without prejudice to the lawfulness of the processing based on the consent before the revocation.
To stop receiving informative and/or promotional/commercial communications, it will be sufficient to write an email at any time to the address cfrsiena@gmail.com, or by using our automatic cancellation systems provided for email only.
You have the right to lodge a complaint with the Guarantor for the protection of personal data (Supervisory Authority www.garanteprivacy.it). In case of a request for data portability, the data controller will provide you with the personal data concerning you, without prejudice to paragraphs 3 and 4 of article 20 of the Reg. (EU) 2016/679..
Additional information The data controller reserves the right to modify, update, add, or remove parts of this privacy notice at its discretion and at any time. In order to facilitate such verification, the notice will contain the date of update.
