Privacy policy

Privacy Policy – Green Film by Trentino Film Commission (Trentino Sviluppo S.p.A.)

Information on the processing of personal data pursuant to Article 13 of the General Data Protection Regulation EU 2016/679

TRENTINO SVILUPPO S.p.A., with registered office in Rovereto, at Via Zeni no. 8, as Data Controller is hereby providing you with the following information relating to the processing of personal data pursuant to Article 13 of the GDPR (hereinafter, the “Disclosure”).

Name and contact information of the Data Controller

Trentino Sviluppo S.p.A.
Via Zeni, n. 8 – 38068 Rovereto (TN)
E-mail: info@trentinosviluppo.it
Tax ID and VAT number: 00123240228
Tel. (0464) 443111

Contact information of the Data Protection Officer

Office of the Data Protection Officer – DPO
Trentino Sviluppo – RPD, via Zeni, n. 8 – 38068 Rovereto (TN)
Phone: 0464 443312
E-mail: dpo@trentinosviluppo.it

Purpose of the processing for which the personal data are collected, and related legal basis and retention times

TYPE OF DATA PROCESSEDPURPOSE OF PROCESSINGLEGAL BASIS OF PROCESSINGSTORAGE TIMES
Browsing data - language settings, IP address, device settings mobile operating system, usage time, URL request, status information, user agent (browser version information), and operating system. The website may collect data, including for third parties, through cookies (please refer to the relevant Disclosure in this regard).Management of browsing within the website, and technical management of the services provided, as well as allowing analysis, verifying the number of visitors and guaranteeing the security and optimal functionality of the site and browsing/services for users.The legal basis of processing is the legitimate interest of the Data Controller to guarantee the security and optimal functionality of the site, as well as to protect users’ rights (Art. 6, paragraph 1, letter f of the GDPR).Personal data will be retained for the period of time necessary to achieve the purpose for which they were collected, as well as for the purpose of managing any disputes with any third party and, in any case, for the time necessary to carry out activities that include the identification and prevention of fraud or other illegal activities.
Identification and contact data provided voluntarily by the Data Subject when using the services offered by the website.
Respond to any requests for information from Data Subjects and/or provide the services requested by them.
The legal basis of the processing is the implementation of measures adopted at the request of the Data Subject, the implementation of a contract to which the Data Subject is a party or pre-contractual measures adopted at the request thereof (Art. 6, paragraph 1, letter b of the GDPR).
Personal data will be retained for the period of time necessary to achieve the purposes for which they were collected.
Identification and contact data provided voluntarily by the Data Subject when using the services offered by the website.
Send to the Data Subject, via the contact details provided on the website, communications on initiatives and services offered by the Data Controller, as well as newsletters, publications, questionnaires and surveys via e-mail following registration for the service by the Data Subject, and only upon prior expression of a specific consent, which will be requested when registering for the service.
The legal basis of processing is the consent of the Data Subject, as well as the legitimate interest of the Data Controller to develop its activities by providing a service that responds as much as possible to the needs expressed by the user, provided that interests or fundamental rights and freedoms of the Data Subject do not prevail based on his relationship with the Data Controller (Art. 6, paragraph 1, letter a of the GDPR).
As it pertains to the delivery of communications to the Data Subject, personal data will be stored for a period of 24 months. At the end of the 24-month period, the Data Subject will receive a request to confirm his/her wish to continue receiving further communication from the Data Controller.
Identification and contact data provided voluntarily by the Data Subject when using the services offered by the website.
Fulfillment of requirements deriving from laws, regulations and EU legislation.The legal basis of processing is the fulfillment of a statutory requirement levied upon the Data Controller (Art. 6, paragraph 1, letter c of the GDPR).
Personal data will be stored on the basis of statutory requirements, as well as for the purpose of managing any disputes.
TYPE OF DATA PROCESSEDBrowsing data - language settings, IP address, device settings mobile operating system, usage time, URL request, status information, user agent (browser version information), and operating system. The website may collect data, including for third parties, through cookies (please refer to the relevant Disclosure in this regard).
PURPOSE OF PROCESSINGManagement of browsing within the website, and technical management of the services provided, as well as allowing analysis, verifying the number of visitors and guaranteeing the security and optimal functionality of the site and browsing/services for users.
LEGAL BASIS OF PROCESSINGThe legal basis of processing is the legitimate interest of the Data Controller to guarantee the security and optimal functionality of the site, as well as to protect users’ rights (Art. 6, paragraph 1, letter f of the GDPR).
STORAGE TIMESPersonal data will be retained for the period of time necessary to achieve the purpose for which they were collected, as well as for the purpose of managing any disputes with any third party and, in any case, for the time necessary to carry out activities that include the identification and prevention of fraud or other illegal activities.
TYPE OF DATA PROCESSEDIdentification and contact data provided voluntarily by the Data Subject when using the services offered by the website.
PURPOSE OF PROCESSINGRespond to any requests for information from Data Subjects and/or provide the services requested by them.
LEGAL BASIS OF PROCESSINGThe legal basis of the processing is the implementation of measures adopted at the request of the Data Subject, the implementation of a contract to which the Data Subject is a party or pre-contractual measures adopted at the request thereof (Art. 6, paragraph 1, letter b of the GDPR).
STORAGE TIMESPersonal data will be retained for the period of time necessary to achieve the purposes for which they were collected.
TYPE OF DATA PROCESSEDIdentification and contact data provided voluntarily by the Data Subject when using the services offered by the website.
PURPOSE OF PROCESSINGSend to the Data Subject, via the contact details provided on the website, communications on initiatives and services offered by the Data Controller, as well as newsletters, publications, questionnaires and surveys via e-mail following registration for the service by the Data Subject, and only upon prior expression of a specific consent, which will be requested when registering for the service.
LEGAL BASIS OF PROCESSINGThe legal basis of processing is the consent of the Data Subject, as well as the legitimate interest of the Data Controller to develop its activities by providing a service that responds as much as possible to the needs expressed by the user, provided that interests or fundamental rights and freedoms of the Data Subject do not prevail based on his relationship with the Data Controller (Art. 6, paragraph 1, letter a of the GDPR).
STORAGE TIMESAs it pertains to the delivery of communications to the Data Subject, personal data will be stored for a period of 24 months. At the end of the 24-month period, the Data Subject will receive a request to confirm his/her wish to continue receiving further communication from the Data Controller.
TYPE OF DATA PROCESSEDIdentification and contact data provided voluntarily by the Data Subject when using the services offered by the website.
PURPOSE OF PROCESSINGFulfillment of requirements deriving from laws, regulations and EU legislation.
LEGAL BASIS OF PROCESSINGThe legal basis of processing is the fulfillment of a statutory requirement levied upon the Data Controller (Art. 6, paragraph 1, letter c of the GDPR).
STORAGE TIMESPersonal data will be stored on the basis of statutory requirements, as well as for the purpose of managing any disputes.

Optional nature of data provision

Apart from what has been defined for browsing data, the Data Subject may provide personal data contained in the website request forms, for example to request information material, newsletters, or communications and/or responses to requests sent via the website. Failure to provide data will make it impossible to deliver the requested service. The provision of data is optional for the delivery of communications and commercial offers. Any refusal will not affect the provision of other services. You may object to such processing at any time by sending a request to the Data Controller at: info@trentinosviluppo.it.

Categories of recipients of personal data

Only those authorised by the Data Controller may access and, therefore, become aware of your data, limited to information required to discharge one’s duties.

Without prejudice to communication provided in compliance with statutory and contractual requirements, all data collected and processed may be shared with the parties listed below exclusively for the purposes specified above:

  • Data Controllers and/or parties outsourced by the Data Controller (e.g. legal consultants, accountants, IT consultants, providers of website-related services, etc.);
  • Public and private subjects to whom information must be provided by law, regulations or agreements, and who will process data as independent Data Controllers, possibly on the basis of the consent provided by the Data Subject;

Subjects who perform activities that are functional to the implementation of the contracts or the delivery of services requested by the Data Subject, and who may, in some cases, process data as independent Data Controllers.

Storage and transfer of personal data abroad

Data may be transferred abroad only if the Data Controller decides to make use of IT services (website, email, cloud computing and direct marketing email) managed by suppliers resident in countries outside the European Community, or who make use of servers located in foreign countries.

The Data Controller will only transfer personal data to recipients who offer an adequate level of data protection. In such cases, data will be transferred on the basis of contractual clauses or agreements that ensure protection in line with European standards, or on the basis of adequacy decisions on the recipient country or international agreements on the transfer.

Afforded rights

In compliance with the provisions of Articles 15 to 22 of the GDPR, you can exercise the following rights, with particular regard to:

  • Right to access – To obtain confirmation as to whether or not personal data concerning you are being processed and, if so, receive information relating, in particular, to: purposes of processing, categories of personal data processed and retention period, recipients with whom data can be shared (Article 15 of the GDPR);
  • Right to rectification – To obtain, without undue delay, the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16 of the GDPR);
  • Right to erasure – To obtain, without undue delay, the erasure of inaccurate personal data concerning you in all cases provided for in the GDPR (Article 17 of the GDPR);
  • Right to restriction – To ensure that the Joint Data Controllers restrict processing, in the cases provided for by the GDPR (Article 18 of the GDPR);
  • Right to portability – To receive the personal data concerning you, which you have provided to a Joint Data Controller, in a structured, commonly used and machine-readable format, as well as to ensure that your personal data are transmitted to another Data Controller without hindrance, in all cases provided for by the GDPR (Article 20 of the GDPR);
  • Right to object – To object to processing of personal data concerning you, unless there are legitimate reasons for the Joint Data Controller to continue processing (Article 21 of the GDPR);
  • Right to lodge a complaint with the Supervisory Authority – To lodge a complaint with the Personal Data Protection Authority (Article 77 of the GDPR).

The user can exercise his/her rights by sending a request to info@trentinosviluppo.it.

Updated on:
Rovereto,
9 May 2024

Download now the rating system