Centro Opus Ballet SSD a R.L.
Information for data subjects pursuant to Art. 13 of the European Regulation on the Protection of Personal Data (GDPR) No. 679/2016 and related provisions issued by the National and European Authorities
Data Controllers – Who are we?
Centro Opus Ballet SSD a R.L. – Via Ugo Foscolo, 6 – 50124 Florence (hereinafter, for brevity, the “Center”).
E-mail address: info@opusballet.it
Contact details of the Data Protection Officer
Not appointed as of today.
As of today, the company, having carried out the appropriate assessments, has not appointed a Data Protection Officer (DPO); the Center reserves the right to update this privacy notice should it decide otherwise.
Data processors (who outside the organization can see personal data?)
List available at the company’s registered office and available on request using the contact details provided here.
The data processors, as defined by Art. 28 of the GDPR, are indicated in a specific list available at the Controllers’ registered office and can be requested in writing using the contact details indicated above.
Which data do we process?
Common data such as: e-mail, address, first name, last name and/or company name, cookies, usage data, browsing data.
Among the Personal Data collected by this Application, directly or through third parties, there may be: e-mail, address, first name, last name and/or company name, cookies, usage data.
We inform you that, in addition to the data expressly provided by you to the Center, other data deriving from your browsing on the Site may be recorded. For each access to the Site, we record the type of browser (e.g. Internet Explorer, Mozilla), the operating system (e.g. Windows, Macintosh) and the host and URL of origin of the visitor, as well as the data relating to the requested page. These data may be used in aggregated and anonymous form for statistical analyses on the use of the Site.
Other Personal Data collected may – including in the future – be indicated in further sections of this page or by means of information texts displayed at the same time as the collection of the Data within any dedicated sections.
Personal Data may be provided voluntarily by the User, or collected automatically during the use of this Application.
The possible use of Cookies – or other tracking tools – by this Application or by the owners of third-party services, where not otherwise specified, has the purpose of identifying the User and recording their preferences for purposes strictly related to the provision of the service/information requested by the User.
Failure by the User to provide certain Personal Data may prevent this Application and the company from providing its services. For details, please refer to the cookie policy.
The User is responsible for the Personal Data of third parties published or shared through this Site and guarantees that they have the right to communicate or disclose them, releasing the Controller from any liability towards third parties.
Why do we process your data?
Purposes directly related to the requests made or to the establishment of commercial relationships.
Source of data collection: directly from the data subject.
- To respond to explicit requests from the data subject in relation to communications for the purposes of monitoring the progress of relationships with customers and to plan and carry out analytical, strategic and operational marketing activities.
- To comply with the obligations laid down by applicable national and EU legislation.
- To exercise rights, including those of third parties, in judicial, arbitration or administrative proceedings, in compliance with the legal limitations.
Profiling
No automated processing of personal data is carried out.
No automated profiling of users is carried out for the purpose of analysing or predicting aspects relating to professional performance, abilities, personal preferences or interests, reliability or behaviour, or the location of the data subject, insofar as this would allow a profile of the data subject to be drawn up with resulting primarily promotional and targeted actions towards them.
How is the processing carried out?
Using IT and paper-based tools.
The processing of your data is carried out by manual and, where applicable, automated means, using methods strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of your data.
Protection of minors
The processing of data of minors under 18 years of age may take place insofar as consent is given or authorised by the holder of parental responsibility.
Consent to the processing of the data of minors under 18 should in any case be formalised by parents or those who exercise parental authority. Minors must always ask their parents for permission before sending their data to this site or to any site or online subject.
In any case, if a parent or guardian of a minor under 18 believes that the minor may have provided personal information, they are invited to contact us promptly. Should the company become aware that it is in possession of personal information relating to a minor under 18, it will immediately delete such information from its archives.
Should untrue data be provided, the companies consider themselves held harmless from any liability and/or claim, without prejudice to the checks to which they undertake.
Transfer to non-EU countries
The Controller WAF intends to transfer personal data to non-EU countries.
The Controller CENTRO does not intend to transfer personal data to non-EU countries.
Provision of data (mandatory or not)
The provision of data is mandatory insofar as it is necessary to comply with explicit requests by the data subject or to fulfil specific contractual and/or legal obligations, while in other cases it is optional and does not affect the continuation of the relationship.
The mandatory entry of data in the forms on the Site allows us to handle subsequent contacts and information relating to the Center’s activities.
Categories of recipients of personal data
The following categories of recipients may become aware of your data:
- Companies/sole proprietors that have registered within the Application.
- Employees and similar personnel of the companies designated as authorised persons (administrative, commercial, marketing staff, system administrators).
- External parties (such as legal advisors, providers of technical services such as managers of the Center’s institutional website – technicians and developers – who, on its behalf, perform technical or organisational tasks instrumental to the provision of the requested services, as well as any third parties in various ways involved in the activities).
- Hosting providers, providers of information services, banks, communication agencies, commercial partners where necessary to fulfil specific obligations, also appointed, where and if necessary and required, as Data Processors by the Controller CENTRO.
NB: data will not be disclosed to third parties for their own marketing purposes.
Period of retention of personal data
10 years with automatic renewal for a further 10 years, unless revoked or in the presence of other compelling circumstances requiring the cessation of processing.
Your personal data will be stored in our archives for the purposes mentioned here and on the basis of your authorisations for the period deemed appropriate, i.e. for a maximum of 10 years, automatically renewable, unless revoked or other forms of necessary deletion due to changes inside or outside the organization.
You may revoke your consent at any time without affecting the lawfulness of processing based on the consent given before its revocation.
Complaint to the Supervisory Authority
You may lodge a complaint with the Supervisory Authority:
- Via the website www.garanteprivacy.it (dedicated section for complaints).
- Via the website of the Supervisory Authority competent for your territory, where different from the Italian authority.
The complaint form can be downloaded from the website www.garanteprivacy.it in the dedicated section or from the website of the Supervisory Authority competent for your territory, where different from the Italian authority.
Rights granted
Access – Restriction – Rectification – Objection – Erasure – Withdrawal of consent – Right to be forgotten – Portability.
- Right of access: You may receive a copy of the personal data undergoing processing at any time.
- Right to restriction: This may be exercised not only in the event of a breach of the conditions of lawfulness of processing, but also when you request the rectification of data or object to processing; the Controllers undertake to mark the data in question during the period of their assessment, by means of appropriate organisational measures.
- Right to rectification: You have the right to obtain the rectification of inaccurate personal data concerning you.
- Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
- Right to erasure: You have the right to obtain the erasure of personal data concerning you in the cases provided for by applicable legislation.
- Right to withdraw consent: You have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
- Right to be forgotten: You may request the erasure of data in a reinforced form, for example even after withdrawal of consent to the processing of personal data by the data subject.
- Right to data portability: This does not apply to non-automated processing, such as paper archives and/or records; only data provided by the data subject to the Controllers and processed with the data subject’s consent or on the basis of a contract between the data subject and the Controllers can be ported.
Time limits and methods of response by the Controller
The standard time limit is 1 (one) month, extendable up to 3 (three) months in more complex cases, in writing.
When you exercise your rights, the Controllers must provide a written response, also by electronic means that facilitate accessibility (orally only at the express request of the data subject), within 1 (one) month, which, in particularly complex cases, may be extended to 3 (three) months, without prejudice to the obligation to provide feedback within one month of the request even in the event of refusal.
The Controllers, having assessed the complexity of the request made by the data subject, may determine the amount of any contribution to be requested, but only in the case of manifestly unfounded or excessive requests.
How to exercise your rights
To exercise these rights, you may contact Centro Opus Ballet SSD a R.L. in Florence using the following details:
- E-mail: info@opusballet.it
- Telephone number: +39-055/2335138
- Fax number: +39-055/2335138
Declarations by the data subject
I declare that I am of legal age and have full legal capacity to proceed with the purchase.
I declare that I have read the information regarding the processing of personal data by Centro Opus Ballet SSD a R.L., also authorising it to make use of external collaborators.
I wish to receive from Centro Opus Ballet SSD a R.L. future communications regarding products and services that may be of interest and useful to me (general marketing).