Informativa sulla Privacy

In accordance with and for the purposes of Article 13 of Regulation (EU) 2016/679 of the European Parliament (hereinafter "GDPR"), we inform you that the personal data voluntarily provided by you to the Event Organizer will be processed in compliance with the current legislation on the protection of personal data and the principles of confidentiality that inspire the activity of the Foundation.

The personal data provided by you to the Event Organizer may be used:

1. ithout your express consent (Art. 6 letters b), e) GDPR), for the following Service Purposes:

• conclude contracts for services provided by the Organizer;
• fulfill pre-contractual, contractual and tax obligations arising from existing relationships with you;
• fulfill obligations required by law, regulations, EU legislation or an order of the Authority (such as anti-money laundering regulations);
• exercise the rights of the Organizer, for example the right of defense in court;

2. only with your specific and separate consent (Art. 7 GDPR), for the following communication and marketing purposes:

• send you newsletters, commercial communications and/or advertising material on products or services offered by the Organizer and survey your satisfaction with the quality of the services; send you commercial and/or promotional communications from third parties via email, mail, messaging systems and/or phone contacts.

The processing of your Personal Data is carried out, both in paper and electronic form, through collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction operations related to the above-described purposes and in a way that ensures the security and confidentiality of the data.

The Event Organizer processes Personal Data for the time necessary to fulfill the above purposes. In any case, if you have given consent to receive newsletters about the activities of the Event Organizer, you can request to no longer receive information and/or newsletters at any time and your contact will be promptly removed from the distribution list.

Your data may be made accessible to employees and collaborators of the Event Organizer, as internal data processors and/or administrators of the system. In pursuit of the above purposes, the Event Organizer may also use the following categories of subjects who may also become aware of your personal data: qualified subjects providing instrumental services or services to the above-mentioned purposes, individuals or companies called to manage and/or participate in the management and/or maintenance of websites and electronic and/or telematic tools of the Event Organizer, companies called to manage and/or participate in the management and processing of data for administrative and accounting purposes. For the performance of certain activities, the Event Organizer may need to communicate some of your data to Public Administrations, public and private financial funders and/or external subjects of its trust (legal, tax, accounting consultants, etc.) who will use them for the management of procedures necessary for the provision of services and/or contributions, project activities, reporting, review and training.
Your data may be disclosed to any other subject to whom the data must be transmitted based on an express legal provision.
Your personal data will not be subject to dissemination.
Your personal data may be transferred abroad, in compliance with current regulations, even to countries not belonging to the European Union where the Event Organizer may pursue its interests. The transfer to non-EU countries is carried out so as to provide appropriate guarantees in accordance with Articles 46 and/or 47 and/or 49 of the GDPR.

Your Data may also be communicated, without your consent, to control bodies, law enforcement agencies or the judiciary, upon their express request, who will process them as autonomous data controllers for institutional and/or legal purposes during investigations and checks.

The Data will not be disclosed. Any transfer to non-EU countries will be carried out in such a way as to provide appropriate guarantees in accordance with articles 46 and/or 47 and/or 49 of the GDPR.

The provision of data for the purposes referred to in art. 1.1 is mandatory. Without them, we will not be able to guarantee the services of art. 1.1. The provision of data for the purposes referred to in art. 1.2 is instead optional. You can decide not to provide any data or later deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material related to the services offered by the Data Controller. You will still be entitled to the services referred to in art. 1.1.

As a data subject, you have the rights referred to in art. 15 of the GDPR, specifically the rights to:

obtain confirmation of the existence of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;

obtain the indication:

• of the origin of personal data;
• of the purposes and methods of processing;
• of the logic applied in case of processing carried out with the aid of electronic tools;
• of the identifying details of the data controller, processors and designated representative;
• of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, processors or data processors;

obtain:

• the update, correction or, when interested, integration of data;
• the deletion, transformation into anonymous form or blocking of data processed unlawfully, including data that do not require retention in relation to the purposes for which the data was collected or subsequently processed;
• certification that the operations referred to in points 1. and 2. have been brought to the attention, also regarding their content, of those to whom the data has been communicated or disclosed, unless this requirement proves impossible or involves the use of means disproportionate to the protected right;

object, in whole or in part:

• for legitimate reasons to the processing of personal data concerning you, even if relevant to the purpose of collection;
• to the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication, using automated calling systems without the intervention of an operator via email and/or traditional marketing methods via phone and/or postal mail.

It is noted that the data subject's right to object, as stated in the previous point 2., for direct marketing purposes using automated methods also extends to traditional methods, and the data subject retains the right to object even only in part. Therefore, the data subject may choose to receive communications only through traditional methods or only automated communications, or none of these communication types.

If applicable, you also have the rights referred to in articles 16-21 of the GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the supervisory authority.

You may exercise these rights at any time by:

• sending an email to info@italianoperasiena.cominfo@italianoperasiena.com

The Data Controller is: - Sole proprietorship Roberto Bizzarri with legal address at Strada Massetana 17 Siena 53100 (SI), Tax Code BZZRRT88R11D403R VAT number 06415750485.