PRIVACY POLICY – WEB GENERAL – Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)

According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you the due information concerning the processing of collected personal data. This notice is not to be considered valid for other websites attainable trough links and data processor shall not be held responsible for third parties web pages.  

This notice is provided pursuant to art. 13 of the Regulation (EU) 2016/679 (General Data Protection Regulation) and according to the provisions of the Directive 2002/58/CE, as amended by Directive 2009/136/CE on Cookies, as well as  according to the Provision of the Data Protection Authority dated 08.05.2014 on cookies.

Personal data we may collect and process

Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can directly or indirectly be identified, in particular by reference to an identifier such as a name, an identification number, a location data, an online identifier or to one or more specific factors to the physical, physiological, genetic, mental, economic, cultural or social identity (C26, C27, C30).

Navigation data: IP addresses, domain name, URI/URL addresses, time and methot of the request, response code from server and a few information regarding the useragent (OS version, resolution, devise type).

Voluntarily provided data: The optional, explicit and voluntary transmission of messages to contact addresses or forms, entails the subsequent acquisition of sender’s address; the latter, along with any other personal information provided, will be necessary for us to reply.

Social media: For more information regarding the processing of personal data carried out by any Social Media platforms deployed on this website, please refer to their respective privacy policies. The Data Controller processes the personal data through the pages of the dedicated Social Media platforms, to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.

Specific privacy statement may be furnished with regards to specific processings or services offered by the website.

COOKIES: More information available in the specific statement; please click here

DATA CONTROLLER pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is Associazione Culturale Piano Lovers – with registered office in Via dei Bossi 7, 20121 Milano (MI), represented by the legal representative pro tempore.

PURPOSES AND LAWFULNESS OF PROCESSING

PURPOSE OF PROCESSINGLEGAL BASISDATA RETENTIONDATA CONFERRAL
 Website browsingActivities strictly related to site operations and to platform browsing service provision. The data required to avail yourself of this website, will be processed as well in order to:Gather statistical information (most viewed pages, number of visitors, timeline visits, geographical source of visit)Monitor the status of servicesLegitimate interest | Data subject rightsArt. 6 lett. f) and recital 47 GDPR: the processing is necessary for pursuing the legitimate interest of data controller or third parties’Single browsing session and up to 7 days after (except from any requests by the Judicial Authority for crime prevention needs)Necessary in order to guarantee the navigation
 Website Analytics By means of cookies and similar technologiesMore information available in the cookie policyCookies other than technical ones (or similar) require users’ consent in order to be deployed (art. 6.a GDPR) Whether required, the consent will be requested by means of our cookie policy and its bannerMore information available in the cookie policyMore information available in the cookie policy
 Contact or information request By means of phone calls, contact forms, WhatsappLegitimate interest | Data subject rightsArt. 6 lett.f) and recital 47 GDPR:the processing is necessary for pursuing the legitimate interest of data controller or third parties’1 yearNecessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms
 Management of interested subjects’ requests pursuant to art. 15 and following (GDPR)Legal obligationArt. 6.1.c) GDPRprocessing is necessary for compliance with a legal obligation the controller is subject to; 5 years after its closure, except from controversyNecessary: The provision of personal data is mandatory in order to execute legal obligations 
 Signing-up to the competitionContractArt. 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;Up to 10 years after contest’s terminationNecessary: The provision of personal data is mandatory; in case of lack the Data Controller will not be able to consider your candidacy to the competition
 Evaluation of musical curriculum(including musical studies and compliance with ENPALSrequirements via specific self-declaration).ContractArt. 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;Up to 10 years after contest’s terminationNecessary: The provision of personal data is mandatory; in case of lack the Data Controller will not be able to consider your candidacy to the competition
 Administrative and accounting purposes for registration in the competition (e.g. accounting activities relating to membership fees and registration for the proposed competitions)ContractArt. 6(1)(b) GDPR: processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;10 years or otherwise stated by LawNecessary: The provision of personal data is mandatory or optional depending on specific form; where mandatory, in case of lack the Data Controller will not be able to reply or guarantee his services.
 Dissemination of audio-visual and photographic recordings of participants and performances for the purpose of providing multimedia material relating to performances and prizesConsentArt 6.1.a) GDPR:the data subject has given consent to the processing of his or her personal data for one or more specific purposes;Until oppositionThe provision is optional. In case of lack, your performances and records won’t be disseminated. 

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA 

Personal data provided by you may be communicated to recipients who will act as Processors (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes pointed ahead. Precisely, your data may be disclosed to recipients being part of the following categories:

  • Subjects providing services for the management of the information system used by Associazione Culturale Piano Lovers and telecommunication networks:
  • Studies or companies in the context of assistance and consultancy relationships;
  • Subjects providing services related to the management of the above mentioned purposes (communication, brochure printing, fliers, websites, videos);
  • Commercial partners, upon consent;  
  • Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;

You can request a complete listing of processors writing to the abovementioned addresses.

DATA TRANSFER TO A THIRD COUNTRY AND/OR TO INTERNATIONAL ORGANISATION

Personal data provided won’t be transferred to a third Country outside the SEE.

Data subject can request a copy of the processing conditions sending an e-mail at segreteria@pianolovers40.com

AUTOMATED-MEAN PROCESSINGS

Personal data will be manually and electronically processed, as well as by automated-mean activity. It is specified that fully automated decision-making processes are not carried out. With reference to profiling activity carried out with prior and express consent, it will be carried out through the intervention of operators who will elaborate the profile of the interested party and analyse his habits and consumption choices, in order to improve the commercial offer and data controller’s services (non-automated profiling).

DATA SUBJECT’S RIGHTS 

You may freely exercise your rights at any time under Reg. EU 2016/679 –GDPR, Sections15, 16, 17, 18, 19, 20, 21 by contacting the Data Controller – Associazione Culturale Piano Lovers in person of its legal representative sending an email to segreteria@pianolovers40.com.

You have the right, at any time, to obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed, request their rectification or erasure, to oppose to personal data processing (also to profiling) without prejudice to the lawfulness of processing, to obtain the restriction of processing.

Without prejudice to any other administrative or judicial remedy, in case you consider your data processing in contrast with Reg. UE 2016/679, pursuant to article 15 lett. f) of Reg. UE 2016/679, you have the right to lodge a complaint with a supervisory authority (www.garanteprivacy.it) and, pursuant to article 6 paragraph no. 1, lett. a) and article 9, paragraph no. 2, lett. a), you have the right to revoke your expressed consent at any time.

Exercising your right to data portability, the Data Controller may provide your personal data in a structured, commonly used and machine-readable format subject to the provisions set forth in paragraphs 3 and 4 of art. 20 of Regulation EU 2016/679. 

Informative amendments: Data processor retains the right to modify, update, add or remove some parts of this informative at any time.

Date of review: 30 november 2023