• right of access – Article 15 of the GDPR: the right to obtain confirmation that personal data concerning you is being processed and, in this case, obtain access to your personal data – including a copy thereof – and communication , among others, of the following information:
  • purpose of the processing;
  • categories of personal data processed;
  • recipients to whom these have been or will be communicated, in particular if they are recipients of non-EU third countries or international organizations;
  • data retention period or criteria used;
  • rights of the interested party (correction, deletion of personal data, limitation of processing and right to object to the processing);
  • right to make a claim;
  • right to receive information on the origin of personal data, if they have not been collected from the person concerned;
  • the existence of an automated decision-making process, including profiling;
  • in the event that the data are transferred to a non-EU third country or international organization, the existence of adequate guarantees pursuant to art. 46 GDPR;
• right of rectification – Article 16 GDPR: right to obtain, without undue delay, the correction of inaccurate personal data concerning you and / or the integration of incomplete personal data;
• right to cancellation (right to be forgotten) – Article 17 GDPR: right to obtain, without undue delay, the cancellation of personal data concerning you when:
  • the data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
  • You have revoked your consent and there is no other legal basis for the processing;
  • Has successfully opposed the processing of personal data;
  • the data were processed unlawfully;
  • the data must be deleted to fulfill a legal obligation;
  • the personal data have been collected with regard to the information society service offer referred to in Article 8 (1) of the GDPR.
• It is understood that the right to cancellation does not apply to the extent that the processing is necessary for the Owner, for the exercise of the rights to freedom of expression and information, for the fulfillment of a legal obligation or for the execution of a task performed in the public interest, for purposes of archiving in the public interest, scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court.
• right to limitation of treatment – Article 18 GDPR: right to obtain limitation of treatment, when:
  • the interested party disputes the accuracy of personal data, for the period necessary for the holder to verify the accuracy of such data;
  • the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
  • personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
  • the interested party opposed the treatment pursuant to art. 21 GDPR, in the period of waiting for the verification on the possible prevalence of legitimate reasons of the holder of the treatment with respect to those of the interested party.
• right to data portability – Article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Owner and the right to transmit them to another holder without impediments, if the treatment is based on consent and is done by automated means. Furthermore, the right to obtain that your personal data is transmitted directly by the Data Controller to another data controller if this is technically feasible;
• right of opposition – Article 21 GDPR: right to object, at any time for reasons related to your particular situation, to the processing of personal data concerning you based on the lawfulness of legitimate interest or the performance of a task in the public interest or exercise of public powers, including profiling, unless there are legitimate reasons for the Data Controller to continue processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or defense of a right in court.
• Furthermore, the right to oppose the processing at any time if personal data are processed for direct marketing purposes, including profiling, to the extent that it is related to such direct marketing.
• In particular, you have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects that affect you or that significantly affects your person, except that this decision is necessary for the conclusion or execution of a contract between you and the Owner, or is authorized by European Union law or by Italian law, or based on your explicit consent;
• right of withdrawal of consent – right to withdraw consent to the processing of your data at any time, while maintaining the lawfulness of the processing based on consent before revocation;
• right to lodge a complaint with the Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).

The above rights may be exercised against the Owner by contacting the indicated references.

The exercise of your rights as an interested party is free under Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Holder may charge a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.