In accordance with Article 13 of Regulation (EU) 2016/679 (GDPR), the Data Controller provides the following information regarding the processing of your personal data:
PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
Fondazione Roma Regeneration ETS – Third Sector Entity, as the data controller (hereinafter, for brevity, the “Foundation” or the “Controller“), wishes to provide you, as the data subject, with the information required under Article 13 of Regulation (EU) 2016/679 (“GDPR“).
1) Purposes of Processing and Legal Basis for Processing
Your personal data will be processed for the following purposes:
- With your consent, for the purpose of sending communications via email regarding future events or activities organized by the Foundation.
- With your consent, for sharing the provided data with Investire SGR, DeA Capital Real Estate SGR, Fabrica Immobiliare SGR, FS Sistemi Urbani, Il Quotidiano Immobiliare, and Scenari Immobiliari.
- With your consent, for the publication of images taken during the event you attended, which may feature you, on the Foundation’s social media channels, solely for the purpose of promoting events organized by the Foundation.
- for the management and organization of the event.
- to ascertain, exercise, or defend a right in judicial or administrative proceedings.
For the purposes outlined in letters a) and b), your consent is required pursuant to Article 6(1)(a) of the GDPR. Refusing to provide consent will result in the inability to send you communications via email about future events or activities organized by the Foundation and/or the possibility of publishing your image on the Foundation’s social media channels. In any case, refusal to grant consent for the purposes described above will not prejudice your participation in the event.
For the purposes outlined in letters c) and d), however, your consent is not required, as the processing is necessary for the management and organization of the event, as well as for the exercise or defense of a right in judicial proceedings, based on Article 6(1)(f) of the GDPR, for the legitimate interest of the Data Controller, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Refusal to provide your personal data could result in the inability to register or participate in the event organized by the Foundation.
For the images collected during the event, by signing the registration form (available upon access to the event), you authorize and grant the Foundation, free of charge and without time limits, waiving any compensation, pursuant to Article 10 of the Civil Code and Articles 96 and 97 of Law No. 633/1941, the right to capture your image through photographic means and to use, reproduce, publish, and distribute these images, even in partial, modified, and/or adapted form, (i) on the Foundation’s profiles on the “X” and “Facebook” platforms; “LinkedIn”; (ii) on the websites of the following entities: Foundation, Investire SGR, DeA Capital Real Estate SGR, Fabrica Immobiliare SGR, FS Sistemi Urbani, Il Quotidiano Immobiliare, Scenari Immobiliari.
2) Methods of Processing and Data Retention
Within the organizational structure of the Foundation, personal data will be processed by authorized individuals acting under the authority of the Data Controller, who have been adequately trained by the Data Controller. The processing will primarily be carried out using electronic and manual systems, in accordance with the applicable principles for personal data processing under Article 5 of the GDPR.
The data retention period depends on the purposes for which they are processed and may therefore vary. The criteria used to determine the applicable retention period are as follows: the retention of personal data covered by this notice will occur for the time necessary (i) for the management of the Event, (ii) for handling complaints or specific requests, (iii) for asserting rights in judicial proceedings, and (iv) for the period required by applicable laws or until the revocation of your consent. The images may be shared on the Foundation’s profiles on the aforementioned platforms. For processing activities where social media platforms (e.g., Facebook, LinkedIn, X, etc.) are considered data controllers, we invite you to review the relevant documentation available on the respective platforms.
3) Categories of Personal Data Processed
The personal data that has been provided to us and will be processed for the purposes outlined above are as follows:
- name;
- surname;
- e-mail;
- the company where you carry out your professional activity.
- image.
4) Communication, Dissemination, and Transfer of Data
Your personal data may be communicated to entities that the Data Controller uses for assistance and consultancy, including legal advice, in relation to the event, as well as to public authorities authorized by law in case of checks, investigations, and/or inspections.
Furthermore, in certain cases, your personal data may also be communicated to suppliers and professionals designated by the Foundation as data processors, in accordance with Article 28 of the GDPR, in activities related to the organization and management of the event, such as those responsible for the technical management of networks and IT systems.
The complete list of these entities or categories of entities is available at the Data Controller’s office.
Your personal data will not be subject to further dissemination.
Your data will not be transferred outside the Spazio Economico Europeo (SEE).
5) Rights of the Data Subject
Within the limits set by Article 2-undecies of Legislative Decree No. 196/2003, you can exercise the rights provided under Articles 15 to 22 and 77 of the GDPR, including:
- You have the right to receive confirmation of the existence of your personal data and access its contents (right of access).
- You have the right to update, modify, and/or correct your personal data (right to rectification).
- You have the right to request the deletion or restriction of the processing of data processed in violation of the law, including data that is no longer necessary for the purposes for which it was collected or otherwise processed (right to erasure and right to restriction).
- You have the right to object to the processing (right to object).
- You have the right to withdraw your consent, where given, without affecting the lawfulness of the processing based on the consent provided before the withdrawal.
- You have the right to receive a copy of the data concerning you in electronic format and request that such data be transmitted to another data controller (right to data portability).
- You have the right to file a complaint with the Data Protection Authority, according to the procedures established by the Authority itself (right to lodge a complaint).
To exercise these rights, you can contact the Data Controller at the addresses provided below.
6) Identity and Contact Details of the Data Controller
The Data Controller is Fondazione Roma Regeneration ETS – Third Sector Entity, with its registered office at Via Claudio Monteverdi, 16 – 00198 Rome, which can also be contacted at the email address privacy@romaregeneration.it.