Privacy

identity and contact details of the owner and DPO

Riva del Garda Fierecongressi S.p.a.

Parco Lido n. 1 - Riva del Garda (TN), Italy

e-mail: info@rivafc.it - tel: +39 0464 570100

The Data Protection Manager can be contacted at the following address: rdp@rivafc.it

data categories processed

• personal identification details of the interested party;
• e-mail address;
• telephone number;
• other information provided optionally by the interested party concerning the rapport relative to this form

purpose of the processing carried out with the data collected

1. to respond to the request made by the interested party by compiling this form and subject to the consent of the interested party;
2. to send commercial communications, updates regarding the business and services offered by the owner and his partners to the e-mail address provided by means of a newsletter;
3. to carry out personalised informative and commercial activities according to the profile of the interested party;
4. the transfer of the data acquired through this form to third parties for commercial purposes.

consequences of failure to provide data and/or failure to consent to the purposes referred to in points B. C. & D.

Failure to provide the afore-mentioned data will prevent the data controller from carrying out the purpose specified in point A.
The activities described in points B, C & D of this document (generic marketing activities, profiling and third party consent) can only be carried out with the consent of the interested party. These expressions of consent are separate  and optional and are always revocable without entailing any duty or damage to the interested party in relation to his/her position towards the Data Controller with regard to the purposes referred to in the aforementioned point A.

methods of processing the acquired data

The data is processed in compliance with the technical and organisational security measures provided for by EU Regulations through appropriate procedures to guarantee the confidentiality of the same. The profiling activity also involves  processing carried out through automated decision-making processes.

legal basis of the processing carried out

for each of the aforementioned purposes, the legal bases that legitimise the processing are indicated as follows:

1. to respond to the request made by the interested party by compiling this form; the need to execute the contract in which the interested party is involved as well as to fulfil specific contractual and/or legal obligations   deriving  from the relationship itself;
2. to send commercial communications, updates regarding the business and services offered by the owner and his partners to the email address provided by means of a newsletter, with the consent of the interested party;
3. to carry out personalised informative and commercial activities according to the profile of the interested party, with the consent of the interested party;
4. the transfer of the data acquired th rough this form to third parties for commercial purposes, with the consent of the interested party.

subjects involved and scope of dissemination

The data may seen by the Controller and by specially trained people employed to process the information. In addition to the subjects specified here, the data provided may be processed by third parties, appointed as data processors, to  the extent that is necessary for the performance of activities carried out by them and subject to the authorisation of the Controller in order to carry out the aforementioned purposes and within the authorisation profiles identified  for them (the list of which is available upon request to the Controller at the addresses provided above). Data provided will neither be disseminated nor transferred to other countries or international organisations outside of the EU.

conservation period

For each of the above-mentioned purposes, the conservation period is as indicated below:

1. to respond to the interested party’s request: the data will be kept for the time necessary to execute/manage the relationship for a period consistent with the purposes and dynamics related to the nature of the relationship.
2. to send commercial communications, updates on activities and services provided by the Controller and his partners to the aforementioned e-mail address via the newsletter system: 24 months
3. to provide personalised information and carry out commercial activities following the profiling of the interested party: 12 months.

how to exercise your rights and make a complaint to the supervisory authority

The interested party may, at any time, exercise his/her rights under article 15 (and subsequent amendments) of EU Regulation no. 679/2016 and revoke his or her consent for the purposes outlined in points B, C & D by writing to the  following address: privacy@rivafc.it

Any complaint to the supervisory authority can be made by sending a communication to this e-mail address urp@gdp.it