PERSONAL DATA PRIVACY INFORMATION (INF. 02/2018)
In accordance with Legislative Decree nr. 2016/679, a.k.a. Privacy Code, and the European guidelines for the Personal Data Protection and as for the personal data managed by Studio Congressi s.r.l., please refer to the following information:
a) PERSONAL DATA CONTROLLER
Studio Congressi s.r.l. – registered office address: Viale della Libertà 17, 27100 Pavia (IT)
i) Legal Representative
Sara Tinozzi, Managing Director -
info@studio-congressi.com
b) SUBJECT-MATTER OF THE PROCESSING
The Personal Data Controller is in charge of processing personal data such as name, surname, email address, work phone, job title, IBAN and tax code, along with the information related to job position or work experience listed in the “Curriculum Vitae” that the speaker agrees to submit in order to participate in any of our training courses.
c) PURPOSE FOR THE PROCESSING
Personal Data must be processed in order to fulfil the obligations related to the transmittal of the Curriculum Vitae to the Ministry of Health and to the Region of Lombardy, in keeping with the CME guidelines.
d) METHODS AND DURATION OF DATA PROCESSING
Personal Data Processing is carried out through the operations indicated in art. 4 - Privacy Code - and in art. 4, n. 2 GDPR, namely: collecting, recording, organizing, storing, query, changing, selecting, mining, comparing, using, connecting, blocking, sharing, deleting personal data. Data processing may be carried out both digitally and/or by writing. Personal Data are stored in the company server and in a paper archive and can be viewed by the data controller and/or by his/her employees exclusively.
Our company will delete your personal details within 2 years from receipt of your Personal Data.
e) RECIPIENTS OF THE DATA
Personal Data can be used by:
i) The Organizing Secretariat for the course organization, for the payment of the invoice and for the communication of Personal Data to public bodies.
ii) The public bodies in charge of the CME procedures are:
1) the Ministry of Health
2) the Region of Lombardy
f) COMMUNICATION OF THE DATA
Even without consent (ex art. 24 lett. a, b, d, Privacy Code and art. 6 lett. b and c, GDPR), the Personal Data Controller can communicate the data for the purposes outlined in art. d.i. to any Supervision Board, Judicial Authority or to anyone in charge of receiving Personal Data by the law and for the purposes outlined above. Personal Data can be communicated to public bodies as indicated above. These bodies will process the data as autonomous data controllers.
g) RIGHTS OF THE INTERESTED PARTY
The interested party has the right to:
i) Data Access:
verify the existence or non existence of his/her personal data and this data will be made available to him/her in an intelligible form.
ii) Data Rectification:
correct, update or integrate his/her personal data.
iii) Data Erasure:
erase his/her personal data from the Data Controller’s System.
iv) Objection-Restriction of Data Processing:
object, at any time, to the processing of data effecting him/her.
h) FILE A COMPLAINT AGAINST THE DATA CONTROLLER
In keeping with art. 13 and 14, GDPR, the interested party has the right to file a complaint with the Personal Data Protection Authority in case of breach of law by the Data Controller.
i) EXERCISE OF THE RIGHTS OF THE INTERESTED PARTY
The interested party can exercise his/her rights at any time by writing an email to
info@studio-congressi.com
