INFORMATION NOTICE ON FILLING IN THE CONTACT FORM ON PERSONAL DATA PROTECTION PURSUANT TO ARTICLE 13 REGULATION (EU) 2016/679
Pursuant to art. 13 of Regulation (EU) 2016/679 Formula Imola S.p.a, as Data Controller, informs users of the processing of personal data resulting from the completion of the contact form.
Controller and Data Protection Officer (DPO)
The data controller is Formula Imola S.p.a with registered office in Piazza Ayrton Senna Da Silva 1, 40026, Imola (BO)
[email protected].
Formula Imola S.p.A. has appointed a Data Protection Officer - who can be contacted at the following e-mail address
[email protected].
Interested
Users of Internet services who are interested in contacting the data controller and subscribing to the ‘Hospitality Enquiries’ contact form.
Data processed
The data processed are those entered in the contact form, i.e. identification data such as name and surname, company name, contact details such as city, telephone and personal e-mail.
The data collected are only those that are strictly necessary for the requested fulfilment, respecting the owner's principle of minimisation as set out in Art. 5 of the European Regulation.
The data provided will be processed by the data controller in order to re-contact the user as per the request submitted to the data controller.
Purposes of the processing
The personal data entered in the registration form, sent by the user's choice and voluntarily, will be used to respond to requests submitted by the user or in order to fulfil the contact requested in the form.
The computer systems of this process provide for the use of email configured in such a way as to guarantee the confidentiality and integrity of the information.
The personal data provided, with the user's consent, may also be used for marketing purposes, such as e-mail communications on events, promotions, etc.
Legal basis of the processing
The legal basis of the processing for the purpose referred to in point a) is found in Art. 6 lett. b) of EU Reg. 679/2016 the execution of pre-contractual measures taken at the request of the data subject.
The legal basis of the processing for the purpose referred to in point b) is found in the consent freely given by the user, pursuant to Art. 6 lett.a) EU Reg. 679/2016- GDPR
Processing methods
Data processing is carried out by means of computerised procedures or, in any case, telematic means and paper supports by persons, internal or external, specifically appointed and authorised to do so and committed to confidentiality.
The data are processed and stored using instruments that guarantee security, integrity and confidentiality through the adoption of appropriate security measures as required by law.
Retention periods
The data will be retained in a form that allows identification for the data subject for a maximum period of 12 months after registration.
It is understood that upon revocation of consent by means of the opt-out technique, the Data Controller will proceed to delete your data.
Communication, disclosure, transferThe data collected will not be disseminated, sold or exchanged with third parties without the express consent of the data subject, except for any communication to authorised third parties - committed to confidentiality or in the case appointed as data processors pursuant to Article 28 of Regulation (EU) 2016/679.
The complete and updated list of data processors can be obtained, upon request, through the methods indicated in this policy.
The data may be communicated to the competent authorities, according to the terms of the law.
The transfer of data outside the European Union is not envisaged.
Rights of data subjects
We inform you that as a data subject you have the right to exercise the following rights:
Right of access:
pursuant to Art. 15 of EU Reg. 2016/679: you have the right to confirmation as to whether or not personal data relating to you are being processed and, if so, you may obtain, inter alia, access to your personal data and information concerning the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed.
Right of rectification under Art. 16 of the Regulation: rectification of inaccurate personal data concerning you without undue delay integration of your personal data, if incomplete.
Right to erasure (‘right to be forgotten’) under Article 17 of the Regulation: deletion of personal data concerning you without undue delay.
Right to limitation of processing pursuant to Article 18 of the Regulation: limitation of processing in the following cases:
- the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;
- the processing is unlawful and the data subject objects to the deletion of the personal data and requests instead that their use be restricted;
- although the data controller no longer needs them for the purposes of processing, the personal data are necessary for the establishment, exercise or defence of a legal claim;
- the data subject has objected to the processing pursuant to Article 21(1), pending verification as to whether the data controller's legitimate reasons prevail over those of the data subject.
Right to data portability pursuant to Article 20 of the Regulation: you may receive in a structured, commonly used and machine-readable format the personal data concerning you that we hold; right to transmit such data to another data controller without hindrance from the data controller to whom you have provided the data in the cases referred to in Article 20 of the Regulation.
Right of objection for processing carried out pursuant to Article 6(1)(e) or (f) and pursuant to Article 21 of the Regulation: objection, at any time, on grounds relating to your particular situation, to the processing of personal data concerning you, including profiling.
Such requests may be addressed to the Data Controller.
Requests may be sent by
- a registered letter with acknowledgement of receipt to Formula Imola S.p.A, Piazza Ayrton Senna da Silva n. 1, 40026 - Imola (BO)
- an e-mail to the address
[email protected]- an e-mail to the address of the DPO
[email protected]
In order to facilitate the exercise of rights, the Data Controller has prepared the procedure for the exercise of data subjects' rights, which you can read at the following link:
click here.
Furthermore, in the event that you consider that the processing has been carried out in violation of the legislation on the protection of personal data, you have the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia, 11 - 00187 - Rome.
