The General Data Protection Regulation (EU Regulation 2016/679) (hereinafter also ‘Regulation’ or ‘GDPR’) gives data subjects the right to exercise the following rights vis-à-vis the Data Controller:
- Right of access art. 15 GDPR: in order to request confirmation as to whether or not personal data is being processed;
- Right of rectification Art. 16 GDPR: to request to rectify or supplement the data provided, if inaccurate;
- Right to erasure art. 17 GDPR: to request that processed data be deleted (e.g., if it is no longer necessary for the purposes for which it was collected; or if consent is withdrawn; or if processing is unlawful);
- Right to restrict processing Art. 18 GDPR: so that the data processed by the Data Controller is marked in order to limit its processing in the future;
- Right to data portability Art. 20 GDPR: in order to obtain the receipt of personal data, or the transmission of data to another Data Controller, in a structured, commonly used and machine-readable format;
- Right to object art. 21 GDPR: in order to object at any time to the processing of data, unless there are legitimate reasons for processing that are overriding (e.g., for the exercise or defense in court).
Categories of Data Subjects
For the purposes of this procedure, the categories of Data Subjects, whose personal data are processed by Formula Imola S.p.A., are divided by area of competence, as noted in the Register of Processing drawn up in accordance with Article 30 of Regulation (EU) 2016/679 (GDPR):
- Human Resources (HR) area: this includes job applicants, employees, former employees and family members of employees of Formula Imola S.p.A., as well as freelancers who collaborate with the Company and employees of third parties that provide services for the Company;
- Administration Area: this category includes clients, suppliers, professional firms and consultants, with reference to the management of contracts entered into and the performance of related, instrumental and/or complementary activities;
- Website users: includes users who access and interact with the official website www.autodromoimola.it;
- Other Data Subjects: includes any additional individuals whose personal data are processed by the Company and do not fall into the previous categories.
Modalities for the exercise of rights by the Data Subject
Exercise of the rights provided for in Articles 15 et seq. of the GDPR is free of charge and can be done in the following ways:
- The interested party must attach a copy of a valid identification document to his or her application, in order to allow for the certain identification of the applicant;
- Alternatively, the request may be made by a proxy, with the appropriate power of attorney or proxy signed by the data subject;
- Requests may be transmitted by certified electronic mail (PEC) to [email protected]. or by registered mail with return receipt, addressed to Formula Imola S.p.A, Piazza Ayrton Senna da Silva no. 1, 40026 – Imola (BO)
- Within 30 days of the request (extendable in 60 days in cases of complexity) the Data Controller will acknowledge the request submitted by the interested party.
- To facilitate the exercise of rights, the Owner has prepared the form for the Exercise of Personal Data Protection Rights.
- The data subject may also communicate his/her request to the DPO at the following e-mail address [email protected]
