PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
This information is pursuant to art. 13 of the EU Regulation 2016/679 of the European Parliament and of the Council of 04/27/2016 ("GDPR").
Holder and Data controller: the data controller is ASTI INCENTIVES & CONGRESSI S.r.l. (P.I. 01871350508), with registered office in P.zza San Uomobono, 30, 56126 Pisa – Italy, in the person of the legal representative pro tempore, pec: aicgroup@pec.it.
Definition of personal data, purpose of data processing and information related to processing activities: The Holder processes the personal data of the user that are provided during registration on the website. Personal data will be processed for the purpose of registering participants to the 11th ESGCO 2020, as well as to allow the fulfillment of legal or regulatory obligations in the specific subject that concerns us, including invoicing. The provision of the aforementioned data is necessary to allow the performance of services in your favour, as well as to comply with legal and regulatory obligations. The processing of your data will be based on the principles of correctness, lawfulness and transparency. The data collected, in the minimum number and quality necessary for the purposes indicated above and without this constituting undue invasion of your personal sphere, will be treated with appropriate methods and stored in digital and paper archives.
Transfer of your personal data to data controllers located within the European Union or outside the European Union: The Data Controller and / or Data Processors may communicate some of your personal data to third parties for the performance of activities related to the management of the aforementioned services. In particular, in order to achieve the purposes of the treatment explained above, your data may be communicated to external companies that offer the owner and / or data processors administrative services, digitization of paper documentation, as well as external consultants who will deal with your data as Data Processors. We inform you that your data will not be transferred to physical and / or juridical persons, however named, outside the European Union territory. In any case, we inform you that your data may be communicated, by virtue of legal or regulatory obligations, to Public Administrations.
Period of data retention: The data will be processed for the time necessary to pursue the related purposes as stated above and will be kept for a period of ten years (10) following the termination of that time. Storage after this deadline will be carried out exclusively for purposes related to the fulfillment of legal obligations or for purposes related to the defense of the rights of the Data Controller, Data Processors and the Data Protection Officer in court.
Your rights as data subject: During the period in which your data is processed, you as a data subject may, at any time, exercise the rights envisaged by current legislation and, in particular:
1) the right of access (art. 15 "GDPR"); 2) right of rectification (art. 16 "GDPR"); 3) right to cancellation (art. 17 "GDPR"); 4) right to limitation of treatment (art. 18 "GDPR"); 5) right to data portability (art. 20 "GDPR"); 6) right of opposition (art. 21 "GDPR"); 7) right not to be subjected to an automated decision-making process (art. 22 "GDPR"); 8) right to the communication of a violation of personal data to the interested party (art. 34 "GDPR"). Finally, we inform you that Chapter VIII, Articles 77 s.s. "GDPR", identifies the tools that can be used to propose a complaint to the Control and Judicial Authority. You can exercise your rights at any time by contacting the Data Controller. It should be noted that you will have the right to revoke the consent given at any time, knowing that this will result in the immediate termination of the existing contractual relationship.
