Who are we and what do we do with your personal data?

IGD SIIQ S.p.A., Via Trattati Comunitari Europei 1957-2007, 13 – 40127 – Bologna (hereinafter the Holder), in its capacity as Data Controller, protects the confidentiality of your personal data and provides it with the necessary protection from any event that may put it at risk of violation.

For this purpose, the Data Controller implements policies and practices regarding the collection and use of personal data and the exercise of your rights under applicable law. The Data Controller is responsible for updating the policies and practices adopted for the protection of personal data whenever necessary and in any case in the event of regulatory and organisational changes that may affect the processing of your personal data.

The Holder appointed appointed a Data Protection Officer (DPO) who you can contact if you have questions about adopted policies and practices. You may contact the Data Protection Officer at the following address: dpo@gruppoigd.it

How does the Holder collect and process your data?

The Holder collects and/or receives information about you, such as:

• name, surname, email address, job position.

Your personal information will be processed for:

• the management of contact request

Your personal data is processed in order to follow up your contact request received by the Holder during the event in which you participate and/or via a specific online section.

Your personal data will only be processed for the purpose of organising and managing the meeting with the Holder that you have requested.

The processing is based on the provisions of Art. 6(1)(b) GDPR – ‘processing is necessary for the performance of pre-contractual measures taken at your request’.

• communication to third parties and recipients

Your data may be disclosed to third parties/recipients: IT consultants.

What happens if you do not provide your data?

The personal data that concern and identify you are optional but necessary for the purpose of fulfilling your request to receive information, which, if not provided, make it impossible for the Holder to fulfil your requests.

How and for how long is your data retained?

How

Data processing is carried out on paper or through IT procedures by internal subjects authorised and trained for this purpose. They are granted access to your personal data to the extent and within the limits required for carrying out the processing activities that concern you.

The Holder periodically checks the tools by means of which your data is processed and its security measures, which it constantly updates; it makes sure, also through the subjects authorised to process the data, that personal data for which processing is not necessary is not collected, processed, stored or retained; it makes sure that the data is retained with the guarantee of integrity and authenticity of its use for the purposes of the processing actually carried out.

Where

Your personal data may be transferred outside the European Economic Area and the following guarantees are ensured pursuant to Art. 45 et seq. of the GDPR

– application of the Data Privacy Framework;

– standard contractual clauses;

– Adequacy Decision.

How long

Prospect’s personal data will be stored for a maximum of 2 years after receipt of your request.

However, your right to object at any time to processing based on legitimate interest for reasons related to your particular situation shall remain unaffected.

What are your rights?

In substance, at any time and free of charge and without any special charges or formalities for your request, you can:

• obtain confirmation of the processing carried out by the Holder;
• access your personal data and know its origin (when the data is not obtained directly from you), the purposes of the processing, the data of the subjects to whom it is communicated, the period of retention of your data or the criteria used to determine it;
• update or rectify your personal data so that it is always accurate and correct;
• erase your personal data from the databases and/or files, including backup files, of the Holder, if, among other things, it is no longer necessary for the purposes of the processing or if this is deemed unlawful, and provided that the conditions laid down by law are met; and in any event if the processing is not justified by another equally legitimate reason;
• restrict the processing of your personal data in some circumstances, for example if you have contested its accuracy, for the period required for the Holder to check its accuracy. You must also be informed, in reasonable time, of when the period of suspension has ended or the cause of the restriction of processing has ceased to exist, and therefore the restriction itself withdrawn;
• obtain your personal data, if received and/or in any case processed by the Holder with your consent and/or if its processing is carried out on the basis of a contract and with automated tools, in electronic format also in order to transmit it to another data controller.

The Holder must do so without delay and, in any case, at the latest within one month of receipt of your request. The time limit can be extended by two months, if necessary, taking into account the complexity and the number of requests received by the Holder. In such cases, the Holder will inform you of the reasons for the extension within one month of receipt of your request.

For any further information and to send your request, please contact the Holder at privacy@gruppoigd.it

How and when can you oppose the processing of your personal data?

For reasons relating to your specific situation, you may oppose at any time the processing of your personal data if this is based on legitimate interest or if it concerns the processing of personal data whose provision is subject to your consent, by sending your request to the Holder at the email address privacy@gruppoigd.it

You have the right to have your personal data erased if there is no legitimate reason overriding the one that gave rise to your request and in case you objected to the treatment.

Who can you complain to?

Without prejudice to any other administrative or judicial action, you may submit a complaint to the competent supervisory authority or to the authority that carries out its tasks and exercises its powers where you have your habitual residence or work or, if different, in the Member State where the violation of Regulation (EU) 2016/679 occurred.

Any update of this information will be communicated to you in a timely manner and by appropriate means and you will also be informed if the Data Controller will process your data for purposes other than those referred to in this information before carrying it out and in time to give your consent if necessary.