Information on the processing of personal data
pursuant to Article 13 of Regulation (EU) 2016/679
Privacy Policy
What is the purpose of this information
Pursuant to Regulation (EU) 2016/679, this page describes how the personal data of users consulting the website https://www.library.haydn.it is processed.
As a result of consulting the site, data relating to identified or identifiable natural persons may be processed.
This information does not concern other sites, pages or online services that can be reached through hyperlinks that may be published on the site.
DATA CONTROLLER and DATA PROTECTION OFFICER
The Data Controller is FONDAZIONE HAYDN DI BOLZANO E TRENTO, via Gilm 1/a, 39100 Bolzano, Italy. Tel. 0471/975031, e-mail: info@haydn.it.
The Data Protection Officer is Dr. Federica Ziglio, via Mazzini 14, 38122 Trento, Tel. 0461/261768, e-mail: info@ziglioassociati.it.
TYPES OF DATA PROCESSED, PURPOSE OF PROCESSING AND ITS LEGAL BASIS
Purpose of processing: to manage navigation and technical management of the services provided as well as to enable analysis, verify the number of visitors and ensure the security and optimal functionality of both the website and user navigation/services.
Type of data processed: browsing data (language settings, IP address, device settings, mobile device operating system, login information, time of use, URL request, status information, user agent (browser version information), operating system, user reservation ID, and types of data displayed. The website may also collect the data automatically through cookies, please refer to the relevant notice).
Legal basis for processing: the legal basis for processing is the legitimate interest of the Data Controller to ensure the security and optimal functionality of the website as well as to protect its rights.
Purpose of processing: to respond to any requests for information from data subjects and/or to provide the services requested by data subjects (e.g. ticketing, project registration, etc.).
Type of data processed: identification and contact data voluntarily provided by the Data Subject while using the services offered by the website, third-party data provided by the Data Subject under his/her own responsibility, which is necessary for booking services, data related to any payment methods provided by the Data Subject when booking services.
Legal basis for processing: the legal basis for processing is to fulfil the Data Subject’s request, the execution of a contract to which the Data Subject is a party or pre-contractual measures adopted at the request of the Data Subject.
Purpose of processing: to send communications about initiatives and services offered by the Owner to the Interested Party through the contact data provided on the website, in addition to sending newsletters via e-mail following registration to the service by the Interested Party and only after the expression of a specific consent, which will be required when registering for the service; interaction with the newsletter will be analyzed for statistical purposes.
Type of data processed: identification data, contact data and preferences on the information to be received provided voluntarily by the Data Subject when using the services offered by the website.
Legal basis for processing: the legal basis for processing is the consent of the Data Subject as well as the legitimate interest of the Data Controller (see in this regard Recital 47 of EU Reg. 679/2016) to raise awareness about and develop its business, provided that the interests or fundamental rights and freedoms of the Data Subject do not prevail, taking into account the reasonable expectations of the Data Subject based on his/her relationship with the Data Controller.
Purpose of processing: fulfilment of obligations arising from laws, regulations and EU legislation.
Type of data processed: identification and contact data provided voluntarily by the Data Subject while using the services offered by the website, third-party data provided by the Data Subject under his/her own responsibility, which is necessary for making a reservation, data relating to any payment methods provided by the Data Subject to reserve services.
Legal basis for processing: the legal basis for processing is the fulfilment of a legal obligation to which the Data Controller is subject.
Purpose of processing: management of any reports on unlawful conduct (whistleblowing) through the management of the mailbox.
Type of data processed: personal data, tax code, contact data, and possibly data on professional qualifications, as well as additional data and information related to the reported misconduct.
Legal basis for processing: the legal basis for processing is the fulfilment of a legal obligation to which the Data Controller is subject;
Purpose of processing: creation of an account to access the Haydn Library.
Type of data processed: identification and contact data provided voluntarily by the Interested Party while using the services offered by the website, the entity to which the Interested Party belongs and the role of the Interested Party within the entity for the sole purpose of determining the appropriate content.
Legal basis for data processing: the legal basis for processing is to fulfil the Data Subject’s request, the execution of a contract to which the Data Subject is party or of pre-contractual measures adopted at the request of the same.
Purpose of processing: activities to determine the habits and preferences of users through profiling treatments.
Type of data processed: personal data useful for analysing or predicting their preferences, behaviors and personal positions.
Legal basis for processing: the legal basis for processing is the consent of the Data Subject as well as the legitimate interest of the Data Controller (see in this regard Recital 47 of EU Reg. 679/2016) without prejudice to the rights of the Data Subject set out below.
COOKIES AND OTHER TRACKING SYSTEMS
See the appropriate cookie policy on the website.
RECIPIENTS OF THE DATA
Only those individuals authorized by the Owner will be able to access and therefore become aware of your data, limited to the data necessary to carry out their duties.
Without prejudice to communications performed in fulfillment of legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to:
Persons authorized by the Data Controller (collaborators, trainees and employees);
Data processors and/or external collaborators of the Data Controller (e.g. legal, accounting, IT consultants, service providers related to the website activity, etc.);
Public and private parties to whom disclosure is required by law or regulation;
Subjects carrying out activities necessary to execute of contracts or services requested by the Data Subject.
Your data will not be disclosed.
DATA TRANSFER
The data may be transferred abroad only if the Controller decides to use IT services (website, e-mail, cloud computing, e-mail direct marketing) operated by providers residing in countries outside the European Community or using servers located in foreign countries.
The Controller will only transfer personal data to recipients that offer an adequate level of data protection or on the basis of contractual clauses or agreements that ensure protection in line with European standards.
VOLUNTARINESS OF PROVIDING DATA
In addition to what has been specified for navigation data, the Interested Party may provide personal data through the website’s request forms, for example to request informative material, newsletters, or communications and/or answers to requests sent through the website. Failure to provide data will result in the inability to obtain the requested service. The provision of data is optional for sending commercial communications and offers. Any refusal will not affect the provision of the other services. You may object to such processing at any time, even after having granted consent for commercial purposes, by sending a request to the Owner at info@haydn.it.
DATA STORAGE
The data will be processed in a suitable manner to ensure the security and confidentiality of personal data.
Data will be retained for as long as necessary for the use and provision of services, in accordance with applicable laws, as well as for the purpose of handling any disputes with any third party and in any case for as long as necessary for the purpose of carrying out activities including detection and prevention of fraud or other illegal activities.
Personal data processed for the purpose of sending e-mail newsletters following registration will persist as long as the service is active, until the user validly revokes consent (the request for deletion of the data communicated when subscribing to the service will also always be possible via the appropriate link in each e-mail) or until the Data Subject communicates opposition to further processing for this purpose.
Personal data processed for the management of spontaneous professional applications will be kept for a period of 12 months. After the retention period has expired, the data will be deleted.
The data processed to send communications on initiatives and services offered by the Data Controller to the Data Subject via the contact details provided on the website will be kept for 24 months in the case of processing without profiling, and for 12 months in the case of processing based on user profiling. After this period the user will receive a request to continue data processing for a further similar period of time.
The data processed for the creation of accounts to access the Haydn Library will be processed for a period of 6 months. After this period, the user will receive a request to continue data processing for a further similar period of time.
RIGHTS OF INTERESTED PARTIES
Data subjects have the right to obtain from the holder, in the cases provided for, access to personal data, rectification, cancellation thereof or restriction of processing concerning them or to object to processing (Articles 15 et seq. of the Regulations). The appropriate application can be made by contacting the Owner by sending a request to the addresses on this site. Data subjects who believe that the processing of personal data relating to them carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for in Art. 77 of the Regulation itself, or to take appropriate legal action (Art. 79 of the Regulation).