Privacy and the security of your personal data are fundamental to us. For this reason, we have prepared this Privacy Policy to better explain who we are and how we collect and manage your data.
Who are we?
Fondazione Cineteca di Bologna
Via Riva di Reno 72, 40122 Bologna, VAT no. [P.IVA]
Fondazione Cineteca di Bologna is the data controller and is responsible for the collection, use, transmission, storage, and protection of personal data in accordance with this Privacy Policy and the applicable legislation (EU Regulation 2016/679, General Data Protection Regulation, “GDPR”).
A Data Protection Officer (DPO) has also been appointed and can be contacted at: privacy@wslegal.it
Types of data processed
In our web forms, you will be asked to provide the following data: first name, last name, email address, and credentials.
Registration through our website will only allow us to manage the information necessary to respond to your requests and bookings.
We would also like to assure you that, when browsing our website, the only personal data that will be collected and used are those technically necessary to enable navigation, namely for anonymous statistical analysis or for access to services such as the display of dynamic maps and PDF files opened in embedded mode.
For further details, please refer to the extended cookie policy.
Purposes of processing
Your personal data will be processed by Fondazione Cineteca di Bologna only for the following purposes:
The website uses technical/session cookies as well as third-party cookies, including for profiling purposes, as better described in the specific notice available here (Extended Cookie Policy).
Methods of processing
Processing will be carried out both in paper form and with the aid of electronic and automated tools; in particular, among others, IT, telephone, telematic, audiovisual, cable or satellite, magnetic, paper-based, and manual processing tools may be used.
Your data will be processed under the authority of the Data Controller only by persons specifically appointed, authorized, and instructed to process data pursuant to Articles 28 and 29 of EU Regulation 2016/679.
Appropriate security measures pursuant to Articles 5 and 32 of EU Regulation 2016/679 will be observed in order to prevent loss of your data, unlawful or incorrect use, unauthorized access, or accidental deletion. Every person involved in processing is bound by the principles of lawfulness and confidentiality in processing.
Security measures
Your personal data are processed in compliance with applicable law and using appropriate security measures, in accordance with current legislation, including Articles 5 and 32 of EU Regulation 2016/679.
Whether provision of data is mandatory or optional, consequences of refusal, and legal basis for processing
In order to provide our services, and therefore for the purposes described above, the provision of your personal data is mandatory, because otherwise we will not be able to complete your registration.
The legal basis for our data processing is:
To whom may we disclose your personal data?
Your personal data may be communicated within the EU, in full compliance with EU Regulation 2016/679, to the following parties:
Duration of processing
Without prejudice to legal obligations, the personal data we process will be retained for a defined period, according to the requirements of judicial protection of rights and contractual needs and obligations, including those established by law. In any case, processing will last no longer than 10 years from the date of registration for our service or from the date of purchase.
Your rights
At any time, you may exercise the rights set out in Articles 15, 16, 17, 18, 20, and 21 of EU Regulation 2016/679 by sending us a written communication to the following email address: privacy@cineteca.bologna.it. You may request: confirmation as to whether or not your personal data exist in our databases, verification of their accuracy, or their updating, rectification, or completion; access to, rectification or erasure of your personal data, or restriction of processing; erasure, anonymization, or blocking of your personal data if you believe they are being processed in violation of the law.
Complaint to the Data Protection Authority
Please note that if you believe one of your rights has been violated, you may lodge a complaint with the Data Protection Authority, which can be contacted through the website http://www.garanteprivacy.it/.
Information notice pursuant to Article 13 of Regulation 2016/679 (GDPR)
In accordance with Article 13 of Regulation 2016/679 (General Data Protection Regulation), we hereby provide the necessary information regarding the processing of personal data collected during public events organized by Fondazione Cineteca.
The DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is Fondazione Cineteca di Bologna, Via Riva di Reno 72, 40122 Bologna.
The Foundation has appointed, pursuant to Articles 37–39 of EU Regulation 2016/679, a DATA PROTECTION OFFICER (DPO), who can be contacted at the following email address: privacy@wslegal.it
The processing will concern your image, captured either individually or in a group, through photographs and video recordings made during the event. Preference will be given to general shots, but close-up photographs or images with recognizable faces may also be taken.
Personal data will be processed, in accordance with the conditions for lawful processing set out in Article 6(f) of Regulation (EU) 2016/679, for the Data Controller’s communication and promotional purposes, including dissemination of the images through institutional channels such as the website, the IULM Play platform, social networks, and other channels (e.g. brochures, flyers, etc.).
In accordance with Recital 47 of the GDPR, the Data Controller has carefully carried out a balancing test between its own interests (the promotional and communication purposes of the event during which the images, photographs, and videos are taken) and the fundamental rights and freedoms of the individuals participating in the event and subject to the processing activities (students, visitors, journalists, business partners, etc.), taking into account the relationship between the data subjects and the Data Controller itself.
The latter informs attendees in advance, through a notice displayed and available at the event, of the video and photo recording activities and their possible dissemination through institutional websites, social networks, and other channels (e.g. brochures, flyers, etc.), and gives data subjects the opportunity to object immediately at the event venue, or afterwards, to the processing of their images by contacting the Data Controller at privacy@cineteca.bologna.it.
In light of the balancing of interests carried out, the media and commercial relevance of the event, and the information measures adopted by the Data Controller, it is considered that anyone participating in the event may reasonably expect to be, even incidentally, the subject of video and photo recordings and that such images may also be disseminated through the Data Controller’s own communication channels (websites and social networks).
The personal data provided will be communicated to recipients who will process the data as processors (Article 28 of EU Regulation 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Processor (Article 29 of EU Regulation 2016/679), for the purposes listed above in point 3. Specifically, the data will be communicated to:
The list of Data Processors is constantly updated and available at Fondazione Cineteca.
Processing will be carried out using methods and tools designed to ensure maximum security and confidentiality, by persons specifically appointed for this purpose in compliance with Articles 28 and 29 of Regulation (EU) 2016/679. Pursuant to Article 5(1)(e) of Regulation (EU) 2016/679, your personal data (images captured during events) will be archived and retained indefinitely for reasons of historical interest.
Your personal data (video images and photographs) may be published on the institutional websites of the Data Controller and may be communicated to companies contractually linked to the Data Controller.
Any transfer of data outside or within the European Union will be carried out in compliance with, and within the limits and conditions set out in, Article 44 et seq. of Regulation (EU) 2016/679.
The data may be communicated to third parties belonging to the following categories:
The subjects belonging to the above categories will act as Data Processors, or may operate in full autonomy as independent Data Controllers. The list of Processors for each controller is constantly updated and available at the Controller’s registered office.
The provision of your personal data for the purposes referred to in point 3 of this notice is optional. Any refusal to provide the data will make it impossible for the Data Controller to use your image collected during the event for the intended purposes. If you wish to object to the processing of your image, please inform the Data Controller immediately.
All rights provided for by Articles 15 et seq. of EU Regulation 2016/679 are guaranteed, including the possibility of lodging a complaint with the supervisory authority.
Posso anche trasformarlo in un inglese più giuridico e fluido, adatto alla pubblicazione sul sito.
