Please find herewith below a brief description of the processing of your personal data carried out by Penta Foundation, an organization incorporated in Italy (Fiscal Code 92166930286) whose registered office is in Padova, Corso Stati Uniti, 4 (hereinafter “Penta” or the “Organization”), in its capacity as data controller.
The data processing will be carried out in compliance with Regulation (EU) 2016/679 General Data Protection Regulation (hereinafter the “GDPR”) and the Legislative Decree n. 196 of 30 June 2003 “Personal data protection Code” (the “Code”). Pursuant to art. 13 of the GDPR, we provide you with the following information on the processing of your data carried out in connection to your attendance to the Penta ID Network Meeting.
a) Data Controller:
Penta Foundation, an organization incorporated in Italy (Fiscal Code 92166930286) whose registered office is in Padova, Corso Stati Uniti, 4, e-mail info@penta-id.org, is the Data controller.
b) Data Protection Officer (DPO):
The Organization has appointed a Data Protection Officer (art.37 of the GDPR) whom may be contacted at the following e-mail address dpo@pentafoundation.org.
c) Purposes and legal basis of the processing
Your personal data are processed by Penta, according to the GDPR, for the following purposes:
1) to allow you to attend the meeting/event/training and for the performance of the obligations/exercising the rights arising from the contract concluded with you;
2) compliance with legal obligations deriving from the applicable law, regulations and/or EU legislation (e.g. regarding taxation, accounting, invoicing and record keeping);
3) to organize your trip and manage your staying where the Penta ID Network Meeting is held;
4) update you, through newsletters or other communications regarding initiatives and activities of Penta Foundation and its network.
The data requested for purposes 1) and 2) are mandatory and, should these data be omitted or only partially provided, Penta might not be able to perform the contract with you. The legal basis of such data processing is the fulfillment of the legal obligations arising from the contract (art. 6, par. 1, let. b) of the GDPR).
The data requested for the purpose 3) are optional and, should these data be omitted or only partially provided, Penta might not be able to perform the contract with you. The legal basis of such data processing is the fulfillment of the legal obligations arising from the contract (art. 6, par. 1, let. b) of the GDPR). The data provided for purpose 3) could belong to special categories of data; in case you need to provide Penta with such data (e.g. data revealing the religious or philosophical beliefs, food allergies or data concerning health), the data processing will be based on the consent you may give us (art.9, par. 2 let. a) of the GDPR).
The processing of your data for updating you on the activities of Penta Foundation and its network (purpose n. 4) will be based on the consent you may give us (art. 6, par. 1 let. a) of the GDPR). We remind you that your consent can be freely withdrawn by sending an e-mail to info@penta-id.org,. Withdrawing your consent shall not affect the lawfulness of the processing based on consent before its withdrawal.
d) Means of the processing
Your data will be processed and stored either by computerized means and by not computerized means, in compliance with the legislation in force and, in any case, in a way that ensures their safety, confidentiality and prevents unauthorized dissemination or use, falsification or destruction.
e) Data storage period
The data processed for the purposes 1) and 2) will be stored for the time necessary to fulfill the obligations arising from the contract and, subsequently, in compliance with legal obligations (e.g., tax-related, invoice accounting, record keeping and accounting records). At any rate, the processing of such data will be limited to the maximum period established by law, after which they will be destroyed or anonymized.
The data processed for the purposes 3) will be stored for the time strictly necessary to provide you the services during your attendance. The data processed for the purposes 4) will be stored for the entire duration of your subscription to our newsletter and, in any case, for a maximum period of 30 months, after which they will be destroyed or anonymized.
f) Processing recipients
Your data will not be disseminated. Within the Organization, your data may come to knowledge (for their respective areas of competence) of: (i) the persons expressly authorized to the processing within the following Areas: Project Management, Finance & Administration, ICT and Communication.
Your data may come to knowledge of the following third parties: (i) companies which provided us with services related to the performance of the contract; (ii) companies responsible for processing, managing and sending newsletters and other promotional material; (iii) Legal or Tax Consultant. Where necessary, the Organization has appointed such processing recipients as data processor pursuant to art. 28 of the GDPR. A list of all the data processor designated by the Organization can be required by notice to be sent to the e-mail address indicated below.
g) Data subject’s rights
By notice to be sent to info@penta-id.org,, you may at any time exercise the rights provided for by articles 15 to 22 of the GDPR, such as:
Moreover, pursuant to Article 21 of the Regulation, you will be entitled to object at any time, on grounds associated with your specific situation, to the processing of the personal data that concern you carried out in pursuit of the legitimate interest of the data controller (pursuant to Article 6(1)(f) of the Regulation).
You can find the full list of your rights on www.garanteprivacy.it.
h) Complaint to the Data Protection Authority
We remind you that, should you consider the processing of your data infringes the GDPR, you may in any event lodge a complaint before the Italian Data Protection Supervisory Authority or to the Data Protection Supervisory Authority of the Member State of your habitual residence, place of work or place of the alleged infringement.
Consent
I hereby, according to section 6, par. 1, let. a) of the GDPR, provide my consent for the processing of my personal data in order to receive newsletters or other communications regarding initiatives and activities of Penta Foundation and its network.
▢ I agree
▢ I do not agree
PLEASE NOTE that the following section needs to be considered only if you wish to provide us with data belonging to special categories (e.g. data revealing the religious or philosophical beliefs, food allergies or data concerning health).
I hereby, according to section 9, par. 2, let. a) of the GDPR, give my consent for the processing of my data, belonging to special categories, in order to organize and manage the Penta ID Network Meeting (e.g. organize my trip and manage my staying, meals, etc.)
▢ I agree
▢ I do not agree