PRIVACY STATEMENT
A “statement” supplied to the person concerned pursuant to Article 13 of Legislative Decree No. 196 of 30 June 2003 and subsequent amendments and additions (hereinafter “Legislative Decree No. 196/2003”) establishing provisions for the protection of persons and other parties regarding the processing of “Personal Data” supplied by the User of the site http://www.rsvp.lestanzedelvetro.org
Data Controller and Processor of the Personal Data collected:
Pentagram Stiftung, in the capacity of “data controller” of the Personal Data of the users (hereinafter also referred to as the “Site Users” or “Site User”) of the site http://www.rsvp.lestanzedelvetro.org (hereinafter also referred to as the “Site”) together with Servizi Fondazione Pentagram s.r.l. Unipersonale [Singlemember
private limited liability company] (hereinafter the “Servizi Fondazione Pentagram”), in the capacity of “Representative appointed in accordance with Article 5.2, Legislative Decree No. 196/2003” and Data Processor for the said data, hereby inform the Site Users of the following:
1. Protection of Personal Data
The Data Processor, Servizi Fondazione Pentagram, will, also on behalf of Pentagram Stiftung, collect and process the Personal Data of each user in compliance with Legislative Decree No. 196/2003. In particular, the Personal Data of each User (as defined by the aforesaid Legislative Decree 196/2003) will be processed after consent to “processing” has been given, following the supply of the present “statement”, provided pursuant to Article 13 of the aforesaid Legislative Decree, and containing in particular a description of the purposes and methods of collection and of the “Rights of the Person Concerned”.
2. Source and means of obtaining of the Personal Data of the “Persons Concerned” In the context of the initiatives promoted by LE STANZE DEL VETRO notifications are sent to the Users by post and email through registration on a Web portal [CMS WordPress] dedicated to the activity and purposes set out under point 4, and managed by the Data Processor. The Personal Data (or certain other data classifiable as “personal” within the meaning of Legislative Decree no. 196/2003) are obtained by the Data Processor directly from the User through a voluntary response by the latter to the request for the hard-copy or electronic supply of information regarding the 2
activities/events organised by LE STANZE DELVETRO (see the following point). If the User submits the Personal Data of a third-party (or if a third party submits
the personal data in his/her name), we explicitly require that the party submitting the information has received the consent of the party providing it. Furthermore, it is possible, for technical and/or organisational reasons, that the Data Controller and/or Processor, during or for the purposes of the data collection, may share the Personal Data gathered, always however within the scope of the processing purposes indicated in point 4.
3. Provision of Personal Data
The provision of Personal Data by the User is optional; failure to provide such data will mean that it will not be possible to send information regarding events/activities organised by LE STANZE DEL VETRO. Failure to provide the data will have no prejudicial consequence for the User with regard to navigating the Site of LE STANZE DEL VETRO.
4. Purposes of Personal Data Processing
The Personal Data are gathered through the aforesaid e-mail address with the objective of personalising communications and invitations concerning the events
and activities organised by LE STANZE DEL VETRO.
5. Processing of the Personal Data
The data in question are processed by Servizi Fondazione Pentagram, in the capacity of Data Processor and established Representative, appointed in
accordance with Article 5.2, Legislative Decree No. 196/2003, and in particular by the persons given responsibility for processing by the former. Processing takes place through the use of instruments and procedures which are suitable for ensuring the safety and confidentiality of the said data and is carried out with the aid of electronic means and of the persons given responsibility for processing, in full compliance with the Minimum Safety Measures. The consent accorded by each Person Concerned is stored by the Data Processor. In the case of failure to consent, the Personal Data which may have been supplied in the communication are not recorded. In the event of subsequent revoking of consent, the data are deleted at the request of the Person Concerned.
6. Communication of Personal Data
duties and/or the respective objectives and projects, to employees and/or associates of the Data Controller and/or Data Processor;
• in the context of their duties and/or the respective objectives and projects, to employees and/or associates of affiliated, controlling or controlled bodies and/or bodies subject to the common control of the Data Controller and/or Processor or linked to them by particular contractual obligations;
• persons, companies, associations and/or professional offices that provide assistance and consultancy services or activities to the Data Controller and/or Processor, with particular, but not exclusive, reference to promotional (public relations), accounting, legal and administrative matters.
7. Rights of the Person Concerned
With regard to the Personal Data, as the “Person Concerned”, you are entitled to exercise the rights of access specified in Article 7 of Legislative Decree No.
196/2003:
1. The person concerned has the right to obtain confirmation as to whether or not personal data regarding him/her exist, even if not yet recorded, and to have such data communicated to him/her in an intelligible form.
2. The person concerned has the right to be informed regarding: a) the source of the personal data; b) the purposes and methods of processing; c) of the logic
followed in the event of processing carried out with the help of electronic instruments; d) identification details of the data controller, data processor and
representative appointed pursuant to Article 5, Subparagraph 2; e) the parties or categories to which the personal data may be communicated or which may
become aware of them in the capacity of appointed representative within the national jurisdiction, or of Processors or persons given responsibility for processing.
3. The person concerned has the right to: a) have the data updated, corrected or, if interested, supplemented; b) the deletion, anonymization or blocking of data
processed contrary to law, including data which it is not necessary to store for the purposes for which they were collected and subsequently processed; c) the
certification that the operations, and their contents, under Sections a) and b) have been notified to those to whom the data have been communicated or disseminated, except where this proves to be impossible or requires the use of means manifestly disproportionate to the right protected.
4. The person concerned has the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him/her, even if relevant to the purpose for which the data were collected; b) to the processing of personal data concerning him/her for the purpose of sending advertising material or direct sales or carrying out market research or commercial communications.”
8. Exercise of the rights in accordance with Article 7, Legislative Decree No. 196/2003
In order to exercise the rights specified in Article 7 of Legislative Decree No. 196/2003, and indicated above under Section No. 7, the Person Concerned must send a written request to: Servizi Fondazione Pentagram s.r.l., at its operational headquarters in Venice, LE STANZE DEL VETRO, Isola di San Giorgio Maggiore; tel. (+39) 041 5229138/ e-mail: info@lestanzedelvetro.org Having read and taken note of the contents of the “Statement” set out above, I declare that I agree to the processing of my “Personal Data” by Servizi Fondazione Pentagram, in its capacity as Data Processor and established Representative appointed by Pentagram Stiftung, in accordance with Article 5.2 Legislative Decree No. 196/2003; and, in particular, declare my consent to the processing of these data in the forms, with the use of the methods and for the
purposes indicated therein, being furthermore fully aware of the rights accorded to me by Article 7 Legislative Decree No. 196/2003 as the “Person Concerned”.