Privacy Hub

Any information relating to an identified or identifiable natural person: for example name, address, e-mail address, telephone number, but also habits, relationships and financial situation.

Information that requires greater protection: racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, data concerning health, sex life or sexual orientation, genetic and biometric data.

Personal data relating to criminal convictions and offences, which are also subject to specific safeguards.

Any operation performed on personal data: collection, recording, storage, consultation, use, disclosure, erasure, and so on.

The party that determines the purposes and means of the processing of personal data, that is, why and how the data are processed.

The party that processes personal data on behalf of the controller, on the basis of documented instructions (for example a service provider).

The natural person to whom the processed personal data relate.

You have the right to know whether personal data concerning you are being processed and, if so, to know: the source of the data; the categories of data processed; the recipients; the purposes of the processing; the existence of automated decision-making, including profiling; the period for which the data will be stored.

If your data are inaccurate, out of date or incomplete, you have the right to have them rectified and/or completed, and to require the controller to inform the recipients to whom the data have been disclosed, unless this proves impossible or involves disproportionate effort.

You have the right to have your data erased in the cases provided for by Article 17 GDPR and in any case when: they are no longer necessary for the purpose for which they were collected; you have withdrawn your consent and there is no other legal ground; you have objected to the processing and there are no overriding legitimate grounds of the controller; the data have been unlawfully processed; erasure is required to comply with a legal obligation. You have the right to have the controller inform any recipients, unless this proves impossible or involves disproportionate effort.

You have the right to ask for the processing of your data to be restricted when: you contest their accuracy, for the period needed to verify it; the processing is unlawful but you do not want the data to be erased; the controller no longer needs them but you need them to establish, exercise or defend legal claims; you have objected to the processing, pending verification of whether the controller's grounds override yours. You have the right to have the controller inform any recipients, unless this proves impossible or involves disproportionate effort.

When the processing is based on your consent or is necessary for the performance of a contract and is carried out by automated means, you have the right to receive your data in a structured, commonly used format, or to have them transmitted to another controller where technically feasible.

You can object to the processing of your personal data carried out on the basis of the controller's legitimate interest or of a public interest, on grounds relating to your particular situation. You can object to processing for marketing purposes without having to give reasons.

You can withdraw at any time the consent you have given to the processing of your data.

If you believe your rights have been infringed, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).