PRIVACY POLICY GDPR

Information on the processing of personal data (pursuant to Article 13 of EU Regulation 2016/679) The current legislation on the processing of personal data defined in accordance with the provisions contained in EU Regulation 2016/679 of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data (General Data Protection Regulation, hereinafter "EU Privacy Regulation") contains provisions aimed at ensuring that the processing of personal data is carried out in compliance with the rights and the fundamental freedoms of individuals, with particular regard to the right to the protection of personal data.

 

1. Purpose of the processing and legal basis

The processing of personal data is aimed at: 1) requesting and sending journalistic communications; 2) request and sending of promotional communications; 3) sending invitations to participate in press conferences and / or presentations; 4) billing service; 5) management of administrative documents; 6) receive newsletters; 7) marketing activities; 8) management of conciliation; 9) sending request for information online; 10) management of assistance for the services offered; 11) execution of the contracts stipulated with you; 12) ordinary management of commercial relations; 13) protection of contractual rights. Processing of personal data for promotional / commercial purposes: personal data may also be used for purposes of customer profiling, information and commercial promotion of products and services, as well as surveys on the satisfaction of the quality of those already received and of market research. In such cases, the processing of personal data will be based exclusively on your free and specific consent. Your consent may be revoked at any time without prejudice to the lawfulness of the treatments carried out before the revocation. All data referred to in point 2 below will be kept for: 10 years for data (common and sensitive) collected for the purposes of: requesting and sending journalistic communications; request and sending of promotional communications; conciliation management; sending request for information online; management of assistance for the services offered. 5 years for data (common and sensitive) collected for the purposes of: online billing service; billing service; claims management; receive newsletters; marketing activities; sending request for information online; management of assistance practices (via email or telephone contact); lost property management; Any processing of sensitive data by the Data Controller is based on the conditions set out in art. 9.2 lett. a) of the GDPR. 2. Types of personal data processed Within the limits of the aforementioned purposes, the Data Controller will process the following categories of personal data: common personal data regarding personal data; personal data belonging to the particular categories referred to in art. 9 of the GDPR (sensitive data) and consisting of photographs and judicial data.

 

3. Data processing

For the sake of transparency and in compliance with the principles set out in art. 12 of the GDPR, please note that "processing of personal data" means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration , the organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection , limitation, cancellation or destruction. The processing of personal data may be carried out with or without the aid of electronic or automated means and will include, in compliance with the limits and conditions set by the GDPR, also the communication to the subjects referred to in the following point 6.

 

4. Methods of data processing

The personal data being processed are: processed lawfully and fairly by subjects authorized to carry out these tasks, subjects constantly identified, appropriately trained and made aware of the constraints imposed by the GDPR; collected and recorded for specific, explicit and legitimate purposes, and used in other processing operations in terms compatible with those purposes; accurate and, if necessary, updated; relevant, complete and not excessive in relation to the purposes for which they were collected or subsequently processed; stored in a form that allows the identification of the data subject for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed; processed with the support of paper, computer or telematic means and with the use of security measures designed to guarantee the confidentiality of the interested party to whom the data refer and to avoid undue access to third parties or unauthorized personnel.

 

5. Nature of the provision The provision of some personal data is necessary.

In case of failure to provide the personal data requested or in case of opposition to the processing of the personal data provided, it may not be possible to process the request and / or the management of the requested service and / or the management of the related contract. With your express consent, the personal data you provide may be used for carrying out marketing activities, or to carry out automated activities aimed at profiling and analyzing consumption habits and choices such as - by way of example - frequency, reason , how to use; however, failure to consent to the processing of data and contact details for the purposes indicated does not prevent the contractual relationship from being carried out. As provided by the Guarantor for the protection of personal data, the consent issued for carrying out marketing activities with automated contact methods (by way of example, text messages, mms, faxes, phonias, e-mails, web applications) also extends to the traditional contact information (paper mail or telephone call with operator). Similarly, the opposition to carrying out marketing activities with automated contact methods also extends to traditional contact methods. Your right to provide consent or to exercise the right of opposition in relation to only one of the two methods of execution of marketing activities remains unaffected.

 

6. Communication of data and Transfer of Data Abroad

The personal data collected are processed by the personnel in charge who need to have knowledge of them in the performance of their activities and by external parties who may act as the case as Joint Controllers or Data Processors. The Data Controller also reserves the right to transfer personal data to a third country on the basis of the adequacy decisions of the European Commission or on the basis of the adequate guarantees provided for by current legislation. The data will not be disclosed.

 

7. Rights of the interested party.

Pursuant to articles 15-20 of the GDPR, you may exercise specific rights, including that of obtaining access to personal data in an intelligible form, rectification, updating or cancellation of the same. You will also have the right to obtain from the Company the limitation of the processing, you may also oppose the processing of data for legitimate reasons. In the event that you believe that the treatments that concern you violate the rules of the GDPR, you have the right to lodge a complaint with the Guarantor for the Protection of Personal Data pursuant to art. 77 of the GDPR.

 

8. Owner and Manager for the protection of personal data (DPO)

Data controller, pursuant to art. 4.1.7 of the GDPR is the ACT PRODUCTION independent film production association, with registered office in Via G. Almirante, 34 - 84096, Montecorvino Rovella (SA). Responsible for the protection of personal data (also "DPO") is Dr. Antonio Palo, legal representative of the entity. To exercise the rights pursuant to the GDPR referred to in point 6 of this information, you can contact the DPO. At the same, any request for information regarding the identification of the Data Processors acting on behalf of the Data Controller must be made. The DPO can be contacted with a communication to be sent by post to the ACT PRODUCTION registered office indicated above or by email to the following email address: actproduction@pec.psff.it. The complete list of Data Processors and the categories of data processors are available upon request.