1. Purpose of the Treatment
The data that you provide will be used for the purpose of: ensuring participation in the practical activities planned within the HEAT Course in complete safety; fulfilling legal obligations (e.g. tax, insurance, etc.); sending (via mail, email, mobile or other IT means) communications related to the activity; taking the necessary precautions, if deemed appropriate; guaranteeing legal protection to the HEAT Course Organizers (as identified in the contract to which this information is attached) in the event of a dispute.
In relation to images and videos by any means and in any format recorded during the performance of activities foreseen within the HEAT Course, the purpose is to publish them on the Organizers’ websites or social networking sites (or in any case created by them and managed for the promotion of the HEAT Course, including applications having the same purpose), in newspapers, magazines and books, online and on paper, websites or internet pages of any nature; broadcasting by television (including via the web), cinema, newsletters or other printed material promoting the institutional activities of the Organizers is also contemplated with your explicit consent. The aforementioned authorization implies the granting of a non-exclusive license, without limits of duration and territorial extension, transferable to third parties and includes the rights referred to in articles 12 and following of the l. 633/1941.
The attribution of personal data for the purposes of sending promotional, commercial, informative or research newsletters, also from third parties is optional and the refusal of authorization will result in the impossibility of being updated about commercial initiatives and/or promotional campaigns, or to receive offers or other promotional material.
2. Processing methods
The treatment will take place in compliance with the GDPR and the Legislative Decree 196/03 (“Code regarding the protection of personal data”), as well as the principles of lawfulness, correctness and transparency, adequacy and relevance, with paper-based and computer-based methods, due to the work of persons authorized by the Organizers and with the adoption of adequate protection measures, in order to guarantee the security and confidentiality of the data. No automated decision-making process will be carried out.
3. Providing data
The provision of data for the purposes referred to in the first paragraph of point 1 is mandatory for the proper performance of the contract and any refusal of authorization entails the impossibility of providing the agreed service.
Consent to the use of the images/videos and the dissemination of data on the institutional website and in the other methods described above in the second paragraph of point 1, as well as the consent to the transmission of newsletters described above in the third paragraph of point 1 is optional.
4. Communication and dissemination of data
For the purposes of the organization and performance of the service, the data may be communicated to the subjects appointed to carry out activities to which the Organizers are required on the basis of a legal obligation (instructors, consultants, accountants, insurers, system lawyers, etc.) and all those natural and / or legal persons, public and / or private when the communication is necessary or functional for the performance of the institutional activity (trainers, local authorities, IT maintenance companies). The data may also be transferred to recipients based outside the EU who have signed agreements aimed at ensuring an adequate level of protection of personal data, or in any case after verifying that the recipient guarantees adequate protection measures. Where necessary or appropriate, the subjects to whom the data is transmitted for carrying out activities on behalf of the Association will be appointed as (external) Data Protection Officers pursuant to art. 28 GDPR.
5. Data retention period.
The data collected will be kept for a period of time not exceeding the achievement of the purposes for which it is processed and/or for the time consistent with legal, accounting or tax obligations, as well as for archival purposes. The verification of the obsolescence of the data stored in relation to the purposes for which it was collected is carried out periodically, in any case by applying the principles of proportionality and minimization.
