PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA
pursuant to Article 13 of EU Regulation 2016/679 of 27/04/2016
Data Controller
The Data Controller is A.C.I.S.J.F. Casa della Studente “Domus Civica” with its registered office at SAN POLO 3082 – 30125 VENICE VE, VAT No. 00845990274, Tax Code 80010680272.
Purpose of Data Processing
The personal data you provide will be processed exclusively for the following purposes:
A. the stipulation and execution of the contract and all activities related thereto, such as, by way of example, the issuance of tax documents, credit protection, administrative, managerial, organizational, and functional services necessary for the execution of the contract;
B. compliance with legal obligations, regulations, applicable law, and other provisions issued by authorities empowered by law and by supervisory and control bodies.
The processing of personal data for the above purposes does not require your express consent (art. 6 letters b) and c) of the GDPR).
We inform you that the data you provide will be processed for the duration of the contractual relationship between us and further retained exclusively for the period required for compliance with legal obligations, provided that it is not necessary to retain them further to defend or assert a right or to comply with any additional legal obligations or orders of Authorities.
Mandatory or Optional Nature of Data Provision and Consequences of Refusal to Provide Personal Data
The data required for the purposes referred to in letters A) and B) above must be provided for compliance with legal obligations and/or for the conclusion and execution of the contractual relationship and the provision of requested services, and your refusal, even partial, to provide such data would make it impossible for the Data Controller to establish and manage the relationship and provide the requested service.
Data Processing Methods
The processing of personal data is mainly carried out using electronic procedures and supports (DB, CRM platforms, etc.) for the time strictly necessary to achieve the purposes for which the data were collected and, in any case, in compliance with the principles of lawfulness, fairness, non-excessiveness, and relevance provided by the current privacy regulations.
Communication and Disclosure
Your personal data may be disclosed, within the limits strictly relevant to the obligations, tasks, and purposes mentioned above and in compliance with current regulations, to the following categories of subjects:
1. subjects to whom such communication must be made to fulfill or require the fulfillment of specific obligations provided by laws, regulations, and/or community regulations;
2. external natural and/or legal persons who provide instrumental services to the Data Controller’s activities (partners, companies providing IT system management services, suppliers, consultants, companies, entities, professional firms). These subjects will act as data processors.
Data Transfer to a Third Country and/or International Organization
The personal data you provide and subject to processing or intended for processing are not subject to transfer.
Data Subject’s Rights
As a data subject, you have the rights under Article 15 of the GDPR and specifically the right to request:
access: you can request confirmation of whether or not data processing concerning you is ongoing, as well as further clarification regarding the information contained in this Notice, and to receive the data themselves, within reasonable limits;
rectification: you can request to rectify or integrate the data you have provided us or that we otherwise have in our possession, if they are inaccurate;
deletion/erasure: you can request that your data be deleted if they are no longer necessary for our purposes, in case there are no disputes or litigations, in case of withdrawal of consent or objection to processing, in case of unlawful processing, or if there is a legal obligation to delete;
restriction: you can request the restriction of the processing of your personal data when one of the conditions outlined in Article 18 of the GDPR applies; in such cases, your data will not be processed, except for storage, without your consent, except as explicitly stated in the same article in paragraph 2.
objection: you can object at any time to the processing of your data based on our legitimate interest unless there are legitimate grounds for us to proceed with the processing that prevail over your interests, such as for the exercise or defense of our rights in judicial proceedings; your objection will always and in any case prevail over our legitimate interest in processing your data for marketing purposes;
portability: you can request to receive your data, or have them transmitted to another data controller you indicate, in a structured, commonly used, and machine-readable format.
Furthermore, pursuant to Article 7, paragraph 3, GDPR, we inform you that you may exercise your right to withdraw your consent at any time, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
Finally, we inform you that you have the right to lodge a complaint with the Supervisory Authority, which in Italy is the Data Protection Authority, pursuant to Article 77 of EU Regulation 679/2016.
To exercise the rights under Article 15 of the GDPR or for questions or information regarding the processing of your data and the security measures adopted, you can in any case submit a request to our company at the following email address info@domuscivica.it
Last modified: 25/07/2024