This Privacy Policy has been prepared pursuant to Article 13 of General Regulation no. 679/2016 - GDPR in full compliance with the regulations on the protection of personal data, to help you understand how your personal data is processed in relation to your registration as a company representative, carried out on behalf of the company for which you work, for the services provided through access to the "Albo Circular Notice Board" or to the "Registration to the Register" of the website https://www.albocircular.it. These services aim to inform and receive periodic updates on initiatives promoted through the website https://www.albocircular.it/en/home, news, initiatives and events that Confindustria Emilia Area Centro will organize from time to time for registered members, and to connect associated and non-associated companies on common business solutions

NATURE OF PERSONAL DATA

The data processed includes personal information (name, surname), contact details (telephone number, email), and company affiliation, acquired by Confindustria Emilia Area Centro on the occasion of your registration as a company representative, carried out on behalf of the company for which you work, for the services provided through access to the "Albo Circular Notice Board" or to the "Registration to the Register" of the website https://www.albocircular.it.

PURPOSE AND LEGAL BASIS OF PROCESSING

The purpose of the processing is to follow up on your request to be informed, as a company representative, through newsletters, about initiatives promoted through the website https://www.albocircular.it/en/registration, about news or initiatives and events that Confindustria Emilia Area Centro will organize from time to time for registered members, or to be contacted to connect associated and non-associated companies, acting as independent data controllers among themselves, regarding common business solutions.

The processing responds to the need to fulfill your request; consequently, the legal basis on which it is founded is the contract or the execution of pre-contractual measures at your request (ref. Article 6, par. 1, lett. b) GDPR) of the Regulation.

PROCESSING METHODS

The Data Controller will process your data with utmost care and respect. The collected data will be processed using manual or computerized tools, taking care to adopt adequate security measures to ensure the protection of confidentiality and to avoid the risks of loss or destruction, unauthorized access, unauthorized processing or processing not in accordance with the above purposes.

The following processing operations will be performed on the data received:
- updating of any communication and variation provided by you to ensure the accuracy of your data;
- storage for a period of time not exceeding that necessary for the fulfillment of the purposes for which the data was collected;
- processing will be carried out by subjects authorized by the controller to fulfill the purposes listed above, appropriately instructed and made aware of the constraints imposed by the legislation in force on the protection of personal data. Furthermore, your data will be made accessible only to those who, within the staff, need it based on their role or hierarchical position.

For the performance of data collection and organization activities, Confindustria Emilia communicates the data to third-party companies that act as Data Processors, pursuant to Article 28 of the aforementioned Regulation (such as web hosting providers, IT support, CRM data management platform, etc.).

It is possible to obtain an updated list of the Processors designated by the co-controllers by sending the request to the email address privacy@confindustriaemilia.it or by contacting the DPO of Confindustria Emilia at the email address: RPD@confindustriaemilia.it

Personal data will not be transferred outside the European Economic Area (EEA).

RETENTION OF PERSONAL DATA

The data will be stored in our databases only for the time necessary for the purposes for which it is collected, in compliance with the principles of minimization and limitation of storage and, in any case, for 24 months following registration on the website https://www.albocircular.it/it/registrati or until the communication of deactivation of the personal account and, in any case, not beyond the terms established by law.

We also inform you that, pursuant to Articles 5 and 89, paragraph 1, of the Regulation, your personal data may be retained for longer periods of time than specified in the previous paragraph for statistical purposes only, subject to the implementation of adequate technical and organizational measures required by law to protect your rights and freedoms.

DATA SUBJECT RIGHTS

We inform you that, in relation to the aforementioned processing, you may exercise the rights provided for in Articles 15 et seq. of the Regulation. In particular, you have the right to obtain:
• Access: you can request confirmation as to whether or not processing of data concerning you is taking place, as well as further clarification regarding the information contained in this policy;
• Rectification: you can request to rectify or supplement the data you have provided us, if inaccurate or incomplete;
• Erasure: you can request that your data be deleted, if it is no longer necessary for our purposes, in case of withdrawal of consent or your objection to processing, in case of unlawful processing, or if there is a legal obligation to delete it or it refers to minors under sixteen years of age;
• Restriction: you can request that your data be processed only for storage purposes, excluding other processing, in case of dispute regarding the accuracy of your data and for the period necessary to verify their accuracy; in case of unlawful processing for which you object to deletion, if you need to exercise your rights in court and the data we retain may be useful to you and, finally, in case of objection to processing and a verification is underway on the prevalence of our legitimate reasons over yours;
• Objection: you can object at any time to the processing of your data, unless there are our legitimate reasons to proceed with processing that prevail over yours, for example for exercising or defending ourselves in court;
• Data portability: you can request to receive your data, or to have it transmitted to another controller indicated by you, in a structured format, commonly used and readable by automatic device.
• Withdrawal: you can withdraw your consent without prejudice to the lawfulness of the processing carried out before the withdrawal.

Data subjects may exercise their rights by contacting the DPO at the following email address: RPD@confindustriaemilia.it.

Finally, we inform you that if you believe that your rights have been violated by the Controller and/or by a third party, you have the right to lodge a complaint with the Italian Data Protection Authority and/or any other competent supervisory authority under the Regulation.

DATA CONTROLLER AND DPO

The Data Controller of your personal data is Confindustria Emilia Area Centro with registered office at Via S. Domenico no. 4 – 41024 Bologna.

The contact details of Confindustria's DPO are: RPD@confindustriaemilia.it.