INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA PURSUANT TO EUROPEAN REGULATION 679/2016 – GDPR (General Data Protection Regulation)
The data controller is CCI Centro Congressi Internazionale S.r.l., with registered offices in Turin, Italy, Via San Francesco da Paola 37, in the person of its legal representative; any request concerning processing may be sent to the Data Processor, Ms. Germana Garrone, at the abovementioned address or e-mail address firstname.lastname@example.org.
Purposes of processing
The personal data we are supplied through the registration procedures for congresses, courses or events or Distance Education training activities; through subscription to the technical or informational newsletter services; or communicated as a function of the membership to associations whose Secretariat is managed by CCI are subject to processing.
The purposes of the processing are those mentioned in the registration form for the activities organized or in any case managed by CCI on behalf of third parties; those derived from the formalization of trade agreements with CCI; from the detailed request of services provided by CCI; or those arising from the participation as a rapporteur, teacher or moderator in educational or informational activities organized or managed by CCI directly or on behalf of third parties.
The purposes of the processing that derive from the enrollment as a member of associations whose Secretariat is managed by CCI are those which derive from the management of the personal details of the members and from the communications of the managed association.
The data can be used by CCI for both technical and commercial marketing and communication purposes through the transmittal of information on the technical, scientific and commercial services and initiatives of CCI and/or of third-party companies in general via telephone, SMS, MMS, postal services and e-mail with the specific and explicit authorization of the data subject.
Nature of the Conferment
The conferment of data is not mandatory, however, the eventual refusal to allow the processing of data means that the data subject is unable to access the information necessary for the participation in training and informational activities organized, promoted or in any way managed by CCI directly or on behalf of third parties; therefore a refusal entails the impossibility for CCI to provide the data subject with any service, including the issuance of credits related to the participation in accredited training activities.
Methods of processing
The personal data we receive are managed and archived with the aid of information technologies whose structure and configuration fully meet the safety requirements required by the regulation and the data are processed by specially appointed internal personnel. The data requested for the purposes referred to in “Purposes of processing” are exclusively those strictly necessary for the supply of the services requested. All credit/debit cards details and personally identifiable information will NOT be stored, sold, shared, rented or leased to any third parties CCI website will not deal or provide any services or products to any of OFAC (Office of Foreign Assets Control) sanctions countries in accordance with the law of UAE.
CCI accept payments online using Visa and MasterCard credit/debit card in EURO, AED and US dollar. Any purchase, dispute or claim arising out of or in connection with this website shall be governed and construed in accordance with the laws of EUROPE and UAE
Communication and Dissemination
The data are not disseminated but they may be communicated to third parties in relation to the mode of delivery of the service requested if it necessarily involves partner companies or third party suppliers.
The data may be used for sending technical and scientific information and information related to marketing activities concerning services similar to the ones for which they were supplied to the CCI for the first time with the specific and explicit permission of the data subject.
If, after the necessary registration for the supply of the service requested, the data subject wishes to request/access other similar services by CCI or developed by CCI on behalf of third parties, the data subject can use the credentials provided by CCI during the initial registration (user name/e-mail/password); said credentials can also be used by the data subject to check or change the previously supplied data that are subject to processing by CCI.
The data will be stored until the end of the activities for which they were supplied, after this period, unless specifically and explicitly requested by the data subject, they will be erased.
Rights of the Data subject
The subjects to whom the personal data refer have the right at any time to exercise the rights recognized by the GDPR that we list hereinafter:
- the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet registered, and their communication in intelligible form;
- the right to obtain the indication of the origin of the personal data; of the purposes and methods of the processing; of the logic applied in case of computerized processing; of the details of the controller and of the appointed processors;
- the right to obtain the updating, the correction or, when interested, the supplementing of the data; the erasure, the transformation into anonymous form or the blocking of unlawfully processed data, including data whose retention is unnecessary for the purposes for which they were collected and then processed;
- the right to object, in whole or in part, for legitimate reasons, to the processing of personal data that concern them, even if pertinent to the collection purpose; to revoke the consent, where permitted, with the clarification that the revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation.
Also, where applicable, the data subjects also have the rights referred to in articles 16 to 21 of the GDPR (right to be forgotten, right to the limitation of processing, right to data portability, right to object), as well as the right to file a complaint with the Authority for the Protection of Personal Data. To exercise the rights provided by the GDPR, the data subject must send a written request to Centro Congressi Internazionale s.r.l., Via San Francesco da Paola 37, 10123 Turin, Italy.