PRIVACY POLICY ON PERSONAL DATA PROCESSING according to article 13 of EU Regulation 2016/679, General Data Protection Regulation (“GDPR”) and to Italian Legislative Decree no. 196/2003, Italian Data Protection Code (“Privacy Code”)
This information is provided for the website “www.arenamilano.it” (“Site”) owned and managed by EVD Milan S.r.l. with registered office in Milan, Via Fabio Filzi, No. 29, VAT 11904210967 (“Controller” or “EVD Milan” or “Company”).
Pursuant to the provisions of Article 13 of Regulation (EU) 2016/679 on the protection of personal data (“GDPR”), we inform you that your personal data will be processed through electronic and paper-based tools. This privacy policy, drafted on the basis of the principle of transparency and containing all the elements required by the GDPR, is divided into individual sections, each of which deals with a specific topic, in order to make the reading faster, easier and easier to understand.
We inform you that, in cases where you access the Site to obtain information about our services, we will process your personal data for the purposes and in the manner detailed in this policy.
You may contact the Company for matters relating to the processing of personal data and to exercise your rights under Section 6 at the e-mail address ciao@arenamilano.it
1 – Purposes for which personal data are processed
If you have questions about the services offered or want to start a collaboration with the Company, you can contact EVD Milan at the contacts indicated in the appropriate section or by filling out the appropriate form. Within the scope of this purpose for which your data will be collected, the Controller will carry out the processing according to the principles of correctness, lawfulness, transparency and protection of confidentiality.
The processing will take place using both telematic and paper media, both of which may also be organized as databases or archives, and will involve where necessary the use of postal, telephone and telematic communications.
2 – Personal data processed
Your personal data that will be collected and processed for the above purpose are:
• personal data (i.e. first name and surname);
• contact data (i.e telephone number and e-mail);
• additional data you spontaneously communicate to the Controller (i.e. message content).
3 – Legal basis
If you wish to request information in order to use our services, we will process your data in accordance with article 6(1)(b) of the GDPR.
4 – Communication of personal data
Your personal data will not be intended for publication, communication or dissemination with the exception of third parties whose activity is necessary and related to the achievement of the purpose referred to in this privacy policy.
In accordance with the provisions of current laws, your personal data may be communicated to the competent financial offices or to other public administrations.
Finally, your personal data may be communicated to public entities or to the judicial authority, where required by law or at their express request or for the investigation and prosecution of crimes the prevention and protection from threats to public safety or to enable the Data Controller to ascertain, exercise or defend a right in court.
5 – Duration
Your personal data are processed for as long as necessary to fulfill the above purpose.
6 – Rights
We remind you that you can exercise your rights under the GDPR and in particular obtain:
- confirmation as to whether or not personal data concerning you are being processed and to obtain access to the data;
- the rectification of inaccurate personal data concerning you and/or the supplementation of incomplete personal data, including by providing a supplementary statement;
- the deletion of personal data, in the cases provided for by the GDPR;
- the limitation of processing in the cases provided for;
- the portability of personal data concerning you;
- opposition at any time, on grounds related to your particular situation, to the processing of Personal Data concerning you;
- the filing of a complaint with the Data Protection Authority.
In the above cases, where necessary, the Company will bring to the attention of third parties to whom your personal data has been disclosed any exercise of rights by you, except in specific cases (e.g. when such fulfillment proves to be impossible or involves a manifestly disproportionate use of means compared to the protected right).
The rights listed above may be exercised by sending an appropriate request to the e-mail address: ciao@arenamilano.it
7 – Personal data transfer
Your personal data will not be transferred to extra-EU countries; should the need arise to transfer data to third parties these transfers will be carried out in accordance with the provisions of Articles 44, 45 and 46 of the GDPR.