This information is provided by I Solisti Veneti to visitors/users of the Site pursuant to and for the purposes of Legislative Decree no. 196/2003 (Privacy Code) and EU Regulation 2016/679, (hereinafter Regulation O GDPR) and illustrates how users' personal data are processed and protected. DATA CONTROLLER 1 PURPOSE, LEGAL BASIS, TYPE OF DATA, NATURE OF THE PROVISION AND DURATION OF THE PROCESSING. 1 PROCESSING METHODS AND STORAGE CRITERIA 7 USER RIGHTS 7 UPDATES TO OUR PRIVACY POLICY 8 DATA CONTROLLER The owner of the data provided by the user, and therefore responsible for their processing in accordance with the applicable data protection law, is the Associazione I Solisti Veneti, with registered office in Padua, Piazzale Pontecorvo 4/a, Tax code 80032890289, VAT number 00859970287, telephone 049666128, Fax 0498752598, information email info@isolistiveneti.it and Management email direzione@solistiveneti.it. PURPOSE, LEGAL BASIS, TYPE OF DATA, NATURE OF THE PROVISION AND DURATION OF THE PROCESSING. For each specific processing of personal data that we collect, we will inform the user whether the provision of personal data is necessary and the possible consequences if he/she decides not to provide it. a) COMPLIANCE WITH CONTRACTUAL OBLIGATIONS Why do we use personal data? We use the personal data provided by the user who is our Client or Collaborator or participant in the Academy of “I Solisti Veneti”, for the correct execution of contractual relationships (including all the obligations connected to it) and the exercise of the rights dependent on it. What type of personal data do we process? We process different types of personal data provided by the user that may concern the Client, the partners, the members of the management and control bodies of the company/entity he/she represents, the staff and reference collaborators of the same and the family members (all subjects to whom the Client is required to communicate the information contained in the privacy policy) as well as the data provided by the Collaborator or the member of the Academy. In particular: * personal and contact details (such as name, surname, date of birth, residential address, postcode, tax code, email addresses, telephone numbers and bank details) * family relationship * company or organization to which you belong and role * special categories of data – as listed in art. 9 GDPR – such as personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, etc. * images, videos and audio * qualifications, education, performance and professional experience * any other personal data relating to the performance of the relationship. Who has access to personal data? Personal data may be shared within I Solisti Veneti (members, collaborators, employees) and processed only by persons expressly authorised by the latter. In particular, the user's personal data may be transferred to: – suppliers, which I Solisti Veneti uses for support activities functional to the performance of the contractual relationship (such as Tax Assistance Centers, software houses, postal and courier services, communication consultants, technical consultants, service companies, event organization companies, etc.); – legal and tax professionals and consultants, in employment matters, for the execution, accounting of the relationship and/or the management of disputes; – insurance companies and credit institutions; – public bodies, inspection and control authorities, judicial police (even without the consent of the Customer or collaborator if this is required by law). The data may be transferred to foreign countries, including non-EU countries, after verifying the existence of adequacy decisions issued by the EU Commission regarding the level of protection of personal data in the destination country, or the existence, in that country, of adequate guarantees for the interested party as well as enforceable rights and effective means of protection. What is the legal basis for the processing of personal data? The processing of data is based, pursuant to art. 6, paragraph 1, letters b) and c) of the Regulation, on the need to fulfill any and all legal obligations (tax regulations, anti-money laundering, anti-terrorism, etc.) or contractual obligations connected to the assignment, as well as, pursuant to article 6, paragraph 1, letter a), on the consent given by the user (or, if a minor, by their parents or legal representatives). What are the possible consequences of refusal? The provision of such data is mandatory and, therefore, the refusal to provide them, in whole or in part, may determine the impossibility for I Solisti Veneti to execute the contractual relationship or to fulfill the obligations connected to the same. How long are personal data stored? Personal data are stored by I Solisti Veneti until the contractual relationship is fully executed and, subsequently, for the time required by law and in any case until the ten-year limitation period for rights dependent on and/or connected to the aforementioned contractual relationship has expired. Upon expiry of the aforementioned terms, the data will be deleted or stored anonymously. CONTACTS, MAILING LIST AND NEWSLETTER Why do we use personal data? The user's data are processed to send information about our work, fundraising, promotions, events and other initiatives via regular mail, e-mail, fax and telephone calls, regarding our association and concert activities. If the user subscribes to our Newsletter and gives consent for information purposes, the personal data are processed to manage his/her subscription to the Newsletter, for inclusion in our mailing list and to send him/her information on events of possible interest connected to our activity (for example by regular mail and e-mail). What type of personal data do we process? We process the following categories of personal data: * personal and contact details (such as name, surname, address, email address, fax, telephone number, etc.) * company or organization to which you belong and role * click history * browsing and viewing history * images, videos and audio (collected during events in public places or places open to the public for press activities for journalistic purposes) If you have an account on the reserved page of the Site, or have filled out a contact form, we also process the personal data communicated in relation to the account and the contact form. Who has access to personal data? Personal data is shared within I Solisti Veneti and processed only by persons expressly authorized by the latter. Personal data may be transferred to third parties exclusively to provide the services mentioned above. The data is transferred to multimedia agencies and technical suppliers (such as hosting companies, IT companies, communication and advertising agencies). We do not transfer, sell or exchange users' personal data with third parties outside I Solisti Veneti for external marketing purposes. For newsletter purposes, personal data may be disclosed to the following third parties: -mailChimp | The Rocket Science Group, LLC | Privacy Policy; What is the legal basis for processing personal data? The processing of your personal data is based, pursuant to art. 6, paragraph 1, letter a) of the Regulation, on your consent when you accept our promotional activity and the receipt of the Newsletter and on our legitimate interest in promoting our initiatives and the activity of I Solisti Veneti. Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data at any time. You also have the right to unsubscribe from the Newsletter and request not to receive promotional communications at no cost by contacting privacy@solistiveneti.it. In this way, we will not be able to send you any further promotional information based on your consent. Right to object to processing based on legitimate interests: You have the right to object to processing of your personal data based on our legitimate interest in promotional activity. In this case, we will not continue to process your personal data: the personal data will be deleted and we will not be able to provide our information and promotion services. How long are personal data stored? Personal data is stored by I Solisti Veneti until the user withdraws his/her consent or opposes the processing. What are the possible consequences of refusal? The provision of data is not mandatory. If the user refuses to provide personal data, we will not be able to provide the services mentioned above. BROWSING DATA Why do we use personal data? We process the ways in which you browse and view our Site to provide you with access to it and personalize your visit. Browsing data is used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning. What type of personal data do we collect? We process the following categories of personal data related to cookies: * IP address * browser type and plug-in information * device type (e.g. computer, tablet, phone, etc.) * operating system * click history * browsing and viewing history * technical information * information about the user's visit, location, local time zone. Who has access to personal data? Personal data is shared within I Solisti Veneti and processed only by persons expressly authorized by the latter. The data transferred to third parties is used exclusively to provide the services mentioned above and to optimize the Site (such as companies, consultants or professionals in charge of installing, maintaining, updating and managing the hardware and software we use to provide the services). What is the legal basis for processing personal data? The processing of the user's personal data for account management is based, pursuant to art. 6, paragraph 1, letter a) of the Regulation, on consent, when the user browses our Site and on our legitimate interest. Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data at any time by stopping browsing the Site. Your right to object to processing based on legitimate interests: You have the right to object to the processing of your personal data based on our legitimate interest by stopping browsing the Site. We will not continue to process your personal data. Your personal data will then be deleted and we will not be able to provide our services. How long are personal data stored? Browsing data is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. What are the possible consequences of refusal? The provision of personal data is necessary to browse our Site. If you refuse to provide them, we will not be able to provide the services mentioned above. ACCOUNT IN THE RESERVED AREA Why do we use personal data? We use personal data to create and manage your personal account, in order to offer you a personalized experience on the Site. We allow you to manage your account settings. We also provide you with several easy ways to keep your information accurate and up to date, such as contact information. What kind of personal data do we collect? We always process the email address and password you provide when registering an account on the Site. We process the following categories of personal data, which you choose to provide to us: * personal and contact information (such as name, surname, address, fax, telephone number, email address, etc.) * company or organization you belong to and role * account settings * information that third parties (Facebook, Google, Twitter and other social networks) collect about you when you use social networks (such as through the use of the share button and other features on our Site). Who has access to personal data? Personal data is shared within I Solisti Veneti and processed only by persons expressly authorized by the latter. The data transferred to third parties are used exclusively to provide the services mentioned above (such as web agencies to optimize the Site). What is the legal basis for the processing of personal data? The processing of your personal data for the management of your account is based, pursuant to art. 6, paragraph 1, letter a) of the Regulation, on your consent when you create your account on the Site. Right to withdraw consent: You have the right to withdraw your consent to the processing of your personal data at any time. By doing so, your account will cease to exist and we will not be able to provide the services mentioned above. How long are your personal data stored? We store your personal data as long as you have an active account on the Site. You have the right to delete your account at any time by contacting the following address privacy@solistiveneti.it. If you decide to do so, your account will cease to exist and you will be considered inactive. After your account has been deleted, all your personal data will be deleted. We retain your personal data in case there are legal requests or potential or pending disputes. What are the possible consequences of refusal? Providing data is optional. If you refuse to provide personal data, we will not be able to provide the services mentioned above. FUNDRAISING Why do we use personal data? We use your personal data when you make a donation or a gift to I Solisti Veneti or allocate a contribution, in order to raise funds in accordance with our internal policies and procedures and manage the process of donations and gifts. Furthermore, with your consent, the data can be used to send information and advertising material on further fundraising and initiatives promoted by I Solisti Veneti. Your data is processed for the following purposes: * completion of all phases related to the donation and/or membership in projects promoted by the Data Controller (e.g. communications of payments, donations and accounting) * compliance with internal administrative procedures and legal obligations (e.g. communications to Revenue Agencies). What type of personal data do we process? We process the following categories of personal data: * personal and contact details (such as name, surname, date of birth, address, postal code, email address, fax, telephone number, etc.) * payment data such as credit cards, bank information, billing information * details on the donation or donation or contribution * click history * navigation and viewing history We also collect and store any other relevant information that will be shared by the user, including interests and affiliations with other charitable institutions and cultural associations. Who has access to personal data? Personal data is shared within I Solisti Veneti and processed only by persons expressly authorized by the latter. The user's data may be communicated to banks and companies that manage national or international payment circuits through which online payments are made and to all those public and/or private entities, natural and/or legal persons (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, Chambers and Labor Offices, etc.), if the communication is necessary or functional to the correct fulfillment of the contractual obligations undertaken, as well as the obligations deriving from the law. Furthermore, the data is transferred to selected third parties to provide the user with important information on events, activities and initiatives via e-mail, fax, telephone calls and regular mail. We do not transfer, sell or exchange the personal data of users with third parties for external marketing purposes. What is the legal basis for the processing of personal data? The processing of the personal data provided is based, pursuant to art. 6, paragraph 1, letters b) and c) of the Regulation, on the need to fulfill any legal and contractual obligation arising from the donation/liberality and any fulfillment connected to it. Furthermore, in relation to the sending of information and advertising material, it is based on our legitimate interest in raising funds and on the user's consent, pursuant to art. 6, paragraph 1, letter a) of the Regulation. Right to withdraw consent: The user has the right to withdraw consent to the processing of personal data and to ask not to receive any more communications at any time by contacting the following address privacy@solistiveneti.it. User's right to object to processing based on legitimate interests: The user has the right to object to the processing of personal data based on our legitimate interest by contacting the following address privacy@solistiveneti.it. In this case, we will not continue to process the personal data. The personal data is, therefore, deleted and we will not be able to provide our services. How long are personal data stored? Personal data are stored by I Solisti Veneti until the completion of the procedures relating to the donation/donation process and, subsequently, for the time required by law and in any case until the ten-year limitation period of rights dependent on and/or connected to the aforementioned relationship has expired; as well as until the user revokes consent or opposes processing in the case of fundraising promotion. Upon expiry of the aforementioned terms, Customer data is deleted or stored anonymously. What are the possible consequences of refusal? The provision of data is mandatory to manage the donation and donation process. If the user refuses to provide personal data, we will not be able to provide the services mentioned above. The provision of data is optional for communications relating to initiatives and fundraising. If the user refuses, we will not be able to send such communications. CURRICULA Why do we use personal data? We use personal data to examine collaboration applications. What type of personal data do we collect? We process the following categories of personal data, which the candidate chooses to provide us: * personal and contact details (such as name, surname, date of birth, address, postcode, telephone number, e-mail, etc.); * photographic, video and audio images * qualifications, education, work performance and professional experience. As part of the application procedure, the candidate may provide “special categories of data” pursuant to art. 9 of the Regulation, relating to ethnic origin or health status necessary for the employment relationship. When the candidate sends a job application, he is free not to provide such sensitive data. If he provides such data in the job application, these will be used only for this specific purpose. Who has access to the personal data? The personal data are shared within the Associazione I Solisti Veneti and processed only by persons expressly authorised by it. The data are not transferred or communicated to third parties and used exclusively to provide the services mentioned above. What is the legal basis for the processing of personal data? The processing of personal data is based, pursuant to art. 6, paragraph 1, letter a) of the Regulation, on the candidate's consent, as well as on our legitimate interest in recruiting staff and collaborators. Right to withdraw consent: The candidate has the right to withdraw consent to the processing of personal data at any time by contacting the following address privacy@solistiveneti.it. Right of the candidate to object to processing based on legitimate interests: The candidate has the right to object to the processing of personal data based on our legitimate interest by contacting the following address privacy@solistiveneti.it. In this case, we will not continue processing the personal data. The personal data will then be deleted and we will not be able to maintain or respond to the collaboration application. How long are personal data stored? The data may be stored for five years and subsequently until the candidate revokes his consent or objects to the processing. What are the possible consequences of refusal? The provision of data is optional. In case of refusal by the candidate to provide personal data, we will not be able to provide the services mentioned above. STATISTICS/DEVELOPMENT AND IMPROVEMENT Why do we use personal data? We use data to evaluate, develop and improve our services and systems for all our users. For this purpose, we do not analyse personal data at an individual level: any processing is carried out on pseudonymised data. This includes analyses to make our services more accessible, for example by modifying the user interface to simplify the flow of information or highlight functions commonly used by our users on our digital channels and improving IT systems to increase the security of our visitors and our users in general. What type of personal data do we process? We process the following categories of personal data, if the user has chosen to provide them to us: * personal data (such as date of birth, country, etc.) * account data and settings We process the following categories of personal data related to cookies: * click history * browsing and viewing history. Who has access to personal data? Personal data will be shared within I Solisti Veneti and processed only by persons expressly authorised by the latter. The data forwarded to third parties are used only to provide the services mentioned above to the user (such as companies, consultants or professionals in charge of installing, maintaining, updating and managing the hardware and software we use to provide the services). What is the legal basis for processing personal data? The processing of personal data to develop and improve our services is based on our legitimate interest in developing our business. Your right to object to data processing: You have the right to object to the processing of personal data based on our legitimate interest in developing and improving, by contacting the following address privacy@solistiveneti.it. The account will then be deleted and we will not be able to provide our services. How long are personal data stored? We store personal data until the user withdraws his/her consent or objects to the processing. What are the possible consequences of refusal? Providing personal data is not mandatory. If the user refuses to provide personal data, we will not be able to provide the services mentioned above. COMPLIANCE WITH LEGAL OBLIGATIONS Why do we use personal data? We use personal data to comply with legal obligations, legal disputes and orders from authorities. What type of personal data do we process? We process the following categories of personal data: * personal and contact details (such as name, surname, date of birth, tax code, address, e-mail address, etc.) * company or organization to which you belong * profession and positions held * data of the beneficial owner. Who has access to personal data? Personal data is shared within I Solisti Veneti and processed only by persons expressly authorised by the latter. We share personal data with all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative provisions and with all those public and/or private subjects, natural and/or legal persons (such as legal, administrative and tax consultancy firms, public bodies, Judicial Offices, Chambers of Commerce, Chambers and Labor Offices, Tax and Social Security Offices, etc.), if communication is necessary or functional to the correct fulfillment of the contractual obligations undertaken, as well as the obligations deriving from the law. What is the legal basis for the processing of personal data? The processing of the user's personal data is based, pursuant to Article 6, paragraph 1, letter c) of the Regulation, on the need to fulfill our legal obligations. How long are personal data stored? Personal data for the retention period provided for by regulatory provisions, as well as to assert or defend a right in court. Upon expiry of the terms mentioned above, Customer data will be deleted or stored in anonymous form. What are the possible consequences of refusal? Providing personal data is mandatory so that we can fulfill our obligations or orders of Public Authorities. If the user refuses to provide personal data, we will not be able to provide our activity. COOKIES We use cookies and similar devices to facilitate the user's navigation on the Site, to analyze their methods of interaction with us. A cookie is a small text file that is saved and, during subsequent visits, retrieved from the user's system or mobile device. If the user wishes to use our services, he implicitly accepts the use of such cookies. Although this information uses the generic term "Cookie" as the main method for storing information used by the website, it is also used as a "local storage" space for the user with the same purposes as cookies. All information contained in this section is also applicable to "local storage". Why are cookies used on this Website? Cookies are an essential part of the operation of our site. The main purpose of our cookies is to improve the user's browsing experience. For example, they are used to remember the user's preferences (language, country, etc.) during navigation and future visits. The information collected by cookies also allows us to improve the site by estimating numbers and consumption patterns, to adapt the site to the individual interests of users, to speed up searches, etc. Why do we use third-party cookies? Some pages of the Site contain digital tags that are used for example to send cookies to our Site or count users who have visited certain pages of the websites. We also include similar technologies in electronic communications to determine whether the user opens them and the actions they perform. These technologies allow analytics providers to set or read their own cookies or other identifiers on the user's device, through which they can collect information about online activities in applications, websites or other products. However, we prohibit these analytics providers from using tags on their sites to collect or access personal information about the user (for example, name and email address). You can refuse the collection or use of data by analytics providers by clicking on the following links: E.g. Google Analytics – [link] ______ What kind of personal data do we process? We link the user's cookie identifier to the personal data provided and collected in connection with the account. Who has access to the personal data? The user's data will be shared within I Solisti Veneti. The data transferred to third parties are used exclusively to provide the services mentioned above, for analysis tools in order to collect statistical data in order to optimize the Site. What is the legal basis for the processing of personal data? We link the user's cookies to personal data only if the user has logged in to the Site. The processing of data provided by accessing the Site has our legitimate interest as its legal basis. How long are personal data stored? Cookies can be easily deleted from your system or mobile device using your browser. For instructions on managing and deleting cookies, visit the help section of your browser. You can also disable cookies or receive a notification each time a new cookie is sent to your system or mobile device. If you disable cookies, you will not be able to use all the functions of the Site. PROCESSING METHODS AND STORAGE CRITERIA The user's data will be processed (e.g. collection, storage, use, transfer, deletion, etc.) with electronic or automated tools or in paper format, according to the methods and with the tools suitable to guarantee the security and confidentiality of the data, in compliance with the Regulation and applicable legislation. In particular, all technical, IT, organizational, logistical and procedural security measures will be adopted as prescribed by the Regulation; allowing access only to the people appointed for processing by the Data Controller or the Processors. Where are personal data stored? The data we collect from users are stored within the European Economic Area ("EEA") but may be transferred and processed in a country outside the EEA. Any transfer of personal data will be carried out in accordance with applicable laws. Personal data may be transferred to countries of the European Union and to third countries for each specific purpose as indicated above. In case of data transfer to countries outside the European Union, such countries will guarantee an adequate level of protection on the basis of a specific decision of the European Commission or alternatively the recipient will be contractually obliged to protect the data with an adequate level comparable to the protection provided by the Regulation. Who has access to the data? Your data may be shared within I Solisti Veneti. Your personal data will be accessible to our personnel authorised to process it, when this is necessary for the performance of their duties. Furthermore, your personal data will be communicated to the categories of third parties indicated in each specific processing at point 2. We do not transfer, sell or exchange your personal data with third parties for external marketing purposes. Data forwarded to third parties is used only to provide our services to you. What happens when you provide us with third-party data We offer functions and services that involve the processing of third-party personal data that you provide to us. In this case, the user is required to inform them of the purposes and methods of processing of their personal data by us. How long are personal data retained? We retain personal data for the time strictly necessary to pursue the specific purposes listed above in point 2 and in any case for the entire time permitted by law. After this period, the user's data will be transformed into anonymous form, so as not to allow the identification of the interested parties. Security information: The Site has multi-level security in our system and only the persons in charge have access to copies of the user's personal data. USER RIGHTS In relation to the personal data being processed, the user may exercise all the rights provided for in Articles 7, 15-22 and 77 et seq. of the Regulation, within the limits and under the conditions provided therein, such as: Right of access: the user has the right to obtain from the owner confirmation of the existence or otherwise of processing of personal data, to obtain access to them and to the information. The user can contact the following address privacy@solistiveneti.it that will provide all personal data via email. Right of rectification, erasure, integration: the user has the right to request the rectification of inaccurate personal data, the erasure of data, the integration of data and the limitation of processing. If the user has an account on the Site, he/she can modify his/her personal data by accessing the account. The user has the right to erase any personal data processed by us at any time, except when the processing is necessary. Right of portability: the user has the right to receive the personal data concerning him/her in a structured, commonly used and machine-readable format and the right to transmit those data to another data controller without hindrance from the data controller who provided them. The user can contact the following address privacy@solistiveneti.it that will provide all personal data via email. Right of the user to object to data processing based on legitimate interests: the user has the right to object to the processing of personal data based on our legitimate interest. In particular, you have the right to object to marketing, including profiling carried out for marketing purposes, by following the instructions in each marketing email or by contacting the following address privacy@solistiveneti.it. Right to withdraw consent: you have the right to withdraw your consent to data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Right to complain to a competent supervisory authority: you have the right to lodge a complaint with a competent supervisory authority, pursuant to art. 77 of the Regulation. Right to an effective judicial remedy: you have the right to an effective judicial remedy against the data controller if you consider that your rights under the Regulation have been infringed as a result of the processing. How to assert your rights? Data protection is very important to us. For this reason, we have dedicated staff to handle requests regarding the user rights listed above. You can contact them at the following address privacy@solistiveneti.it UPDATES TO OUR PRIVACY POLICY Updates to our Privacy Policy may be necessary. The most recent version of it is always available on our Site; for this reason we ask the user to make sure to have read the updated version by regularly visiting this page. July 20, 2018 I Solisti Veneti
