Informativa ex art.13 e 14 Regolamento Generale sulla Protezione dei Dati 2016/679 (“RGPD”)

Information pursuant to Articles 13 and 14 of the General Data Protection Regulation 2016/679 (‘GDPR’)

1 – Data Controller

The data controller is UNI – Ente Italiano di Normazione, with registered office in Via Sannio, 2 20137 Milan. The data controller has appointed a Data Protection Officer, who can be contacted by email at dpo@uni.com

2 – Purposes

The data requested with this form are collected and processed for the following purposes:

2.1 – Managing your webinar registration.

2.2 – Sending information and promotional material on UNI standards, products and services (newly published standards, training courses, webinars, promotional campaigns, etc.).

2.3 – Recognition of any training credits.

3 – Legal Bases

For the purposes of points 2.1 and 2.3, the legal basis for processing is a contractual obligation.

For the purpose referred to in point 2.2, the legal basis for processing is your explicit consent, without which the personal data you provide will not be used for that purpose.

4 – Communications to Third Parties and Dissemination

The personal data provided (e.g. first name, last name, full address, telephone, fax, email, affiliated organization) may be disclosed to third parties for the sole purpose of enabling the webinar to be accessed (e.g. to co-organizers other than UNI, or to the external company managing the platform for delivering the webinar). Personal data will also be communicated to the professional associations that will provide training credits, when requested.

5 – Obligation

For the purposes of point 2.1, the disclosure of personal data is mandatory. Failure to do so will make it impossible to access the service.

For the purposes of point 2.2, processing will only be carried out with your explicit consent.

6 – Rights of the Data Subject

As a data subject, you have the rights under Art. 15 GDPR and in particular the rights to:

1. obtain confirmation of whether personal data concerning you exists, even if not yet recorded, and its communication in intelligible form;
2. obtain information about:
3. a) the source of your personal data; b) the purposes and methods of processing; c) the logic applied when processing is carried out using electronic means; d) the identification details of the data controller, data processors and any representative designated under Art. 3.1, GDPR; e) the recipients or categories of recipients to whom your personal data may be disclosed or who may gain knowledge of it as designated representative in the territory of the State, data processors or persons in charge of processing;

3. obtain:
4. a) the updating, rectification or, where interested therein, integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) attestation that the operations as per letters a) and b) have been notified, as also related to their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
5. object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning you, even if pertinent to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for the performance of market or commercial communication surveys, by automated calling systems without human intervention, by e-mail. It should be noted that the data subject’s right to object, as set out in point b) above, for direct marketing purposes by means of automated methods extends to traditional methods and that, in any event, the data subject’s right to object may be exercised even in part. Therefore, the data subject may decide to receive only communications by traditional means or only automated communications or neither type of communication.

In addition, you have the rights set out in Articles 16-21 of the GDPR (right to rectification, right to erasure/’right to be forgotten’, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Data Protection Authority.

7 – How to Exercise Your Rights

You may exercise your rights under point 6 at any time by sending an email to dpo@uni.com.

8 – Retention Period

Personal data collected for the purposes of points 2.1 and 2.3 will be stored for two years.

The processing referred to in point 2.2 will be carried out until consent is revoked, without prejudice to the lawfulness of the previous processing and the use of the data for other purposes with other legal bases.

9 – Existence of automated decision-making processes

No automated decision-making processes will be based on the data communicated for the processing that is the subject of this notice.