| | |

Informativa per il trattamento dei dati personali

The EU Regulation no. 2016/679 (hereinafter the "GDPR") has established the protection and respect in the processing of personal data of natural persons. The Fossano Musica Foundation operates in the organization and implementation of cultural activities in the field of music through the management of musical training courses, masterclasses and seminars in technical depth, as well as concerts, events and festivals. The Fossano Musica Foundation intends, in carrying out its activities, in accordance with the legislation referred to, the processing of personal data in the principles of fairness, lawfulness and transparency and protection of privacy and rights of data subjects. In accordance with Article 13 of the GDPR, therefore, we provide you with the following information:

Who is the Data Controller? The data controller is FONDAZIONE FOSSANO MUSICA based in Fossano, via Bava San Paolo n.48, in the person of the legal representative pro-tempore. Each data subject may address his or her requests to the Data Controller at the address indicated above or at the email address: privacy@fondazionefossanomusica.it

What personal data are processed? The personal data that may be collected by us directly by the interested parties and processed in the performance of the activity are: personal data (such as name, surname, address, date and place of birth, tax code), contact data (such as home phone number, mobile phone number, personal email addresses, userid and initial password to access the personal area of the site), payment data (such as current account data, credit card), data required for billing. Data on health and in general particular data indicated by art. 9 and 10 of the GDPR will not be processed. For the data collected through the cookies of the website, please refer to the Cookie Policy on the website. Images, photos, videos, recordings may be collected and used, but only with the consent of the interested party.

For what purposes will the data be processed? The personal data made available to us will be processed for the following purposes:

a) purposes of law: fulfillment of obligations provided by laws, regulations, Community regulations and provisions issued by the Authority to this legitimized by law;

b) contractual purposes: execution of a contract or performance of a service requested to us (such as, by way of example, enrolment in courses, implementation of musical training plans on behalf of schools); operations ancillary to the contractual relationship and measures related to contractual proposals and pre-contractual relationships (such as, by way of example, enrolment in test lessons); activities closely related to the administrative and/or accounting management of a contract or service;

c) marketing purposes: predisposition, even with use of images of events or lessons with participation of students, and sending by e-mail and/ or mail and/ or telephone information or advertising material related to cultural activities managed by the Foundation, or even third parties, sending the newsletter;

d) statistical purposes: elaboration of studies and market research and/or surveys on the level of user satisfaction on the quality of the services provided by the Foundation, carried out through personal interviews or questionnaires.

What is the nature and the consequences of providing or refusing to provide personal data? The provision of data necessary for the purposes referred to in point a) is mandatory and the related processing does not require the consent of data subjects. The legal basis for processing is the fulfilment of a legal obligation. The provision of data necessary for the purposes referred to in point b) is not mandatory but the refusal to provide them may make it impossible for the Data Controller to execute the contract or provide the service requested or perform the activities of nature administrative-accounting officer relating to the contractual relationships established; the processing of such relationships does not require the consent of the data subjects. The legal basis for processing is the performance of a contract or the fulfilment of pre-contractual obligations. For the purposes referred to in points c) and d) the processing is carried out on the basis of a legitimate interest of the Data Controller for the promotion of cultural activities managed by the Foundation and closely related to the dissemination of musical culture implemented or linked to school initiatives; on the basis of the specific consent given by the data subject, which may revoke it at any time, in other cases.

What are the treatment methods? The treatment:

a) it will be carried out both by manual means and with the help of electronic and telematic tools or in any case automated with logic strictly related to the purposes indicated, always with appropriate measures and designed to ensure the security and confidentiality of personal data;

b) by means of the operations or set of operations referred to in Article 4, n.2 of the GDPR, (such as collection, registration, organisation, structuring, preservation, adaptation or modification, extraction, consultation, use, communication, comparison, interconnection, limitation, cancellation and destruction).

How long is the data stored? The data will be kept for a period of time no longer than necessary for the purposes for which they were collected and for a period of 10 years after the end of the contract or relationship, in relation to the legal provisions on prescription, to allow the Holder to defend his rights. The data processed for the marketing purposes referred to in point c) of point 3 of this statement will be stored for a maximum of 24 months.

To whom can the data be communicated? The Data Controller may communicate the personal data collected for the purposes referred to in points a), b), c) and d) of point 3 of this information, excluding disclosure, to the following categories of subjects:

to. persons to whom such communication must be made in compliance with an obligation laid down by law, regulation or Community legislation;

b. subjects who need to access data for auxiliary purposes to the relationship between the Data Controller and data subjects, to the extent strictly necessary to carry out the auxiliary tasks entrusted to them (such as, but not limited to, postal service operators, banks, payment institutions);

c. consultants of the Data Controller or subjects who provide the same services instrumental to the purposes for which the data are collected, to the extent necessary to carry out their assignment on behalf of the same, appointed Data Processors pursuant to 28 of the GDPR (such as, but not limited to, IT consultants, teachers);

d. natural persons belonging to the following categories:

employees and collaborators of the Data Controller, appointed in charge of processing;

employees of external subjects appointed Data Processors.

The updated list of Data Processors is kept at the headquarters of the Data Controller.

Can the data be transferred abroad? If the Company uses service providers with offices in third countries outside the European Union, the Company may need to transfer personal data to such third countries. Such transfer will be carried out in accordance with the requirements of legitimacy provided by art. 44-47 Reg. 679/2016 to ensure the security and integrity of personal data. The list of data transferred and third countries of destination may be requested from the Data Controller at: privacy@fondazione fossanomusica.it

What are the rights of the data subject and how can he exercise them? We remind you that Articles. 15 et seq. of the GDPR give the data subject a set of rights, such as the right: (i) to access personal data and information on the purposes of the processing, categories of personal data processed, recipients or categories of recipients of the communication of the data, the retention period of the data; (ii) the correction period; (iii

Subscribe to newsletter