INFORMATION ON THE PROTECTION OF PERSONAL DATA – GENERAL REGULATION ON THE PROTECTION of PERSONAL DATA
INSTITUTION LAB APS, in the course of its activities, pays the highest attention to the security and confidentiality of the personal data of the users who visit or utilize the services offered on its website.
The policy described below was prepared in compliance with the provisions of the new regulations (EU) 2016/679 relative to the protection of physical persons in the matter of processing their personal data, and the free circulation of this data.
WHAT PERSONAL DATA MAY BE COLLECTED
INSTITUTION LAB APS may obtain the following categories of personal data that concern you:
Registration data – information relative to Biographical Data (name, surname, gender, address, tax identification number, VAT number) and Contact Data (telephone number, mobile number, email address, fax number).
Other personal data – Information that you provide when filling in the fields indicated on the registration forms.
Purchase data – Information relative to the type of services you have purchased.
We also ask you to help us keep your personal data up to date, by informing us of any changes.
THE PURPOSES FOR WHICH YOUR PERSONAL DATA CAN BE USED
The processing of personal data must be legitimated by one of the legal premises contained in the current legislation applicable in the matter of protection of personal data as described below.
a) Purposes linked to your registration in order to create a personal Account
INSTITUTION LAB APS collects your registration Data and other personal Data to allow you to create an Account, necessary to authenticate your identity when you purchase the various services and products available through the Website (tickets, accreditations) and other services linked to the institutional activities of INSTITUTION LAB APS such as: accreditation, subscribing to the newsletter, registering for the activities.
b) Purposes of sale of the services and products available online
INSTITUTION LAB APS processes your Registration data and the ensuing Account, as well as the Purchase Data with the purpose of perfecting the process for purchasing the services and products available online.
Premise for the processing: compliance with the contract obligations.
The conferral of this data is necessary to be able to complete the purchase online; otherwise it would be impossible to pursue it.
c) Marketing to provide promotional offers
INSTITUTION LAB APS may also process your Biographical Data and Contact Data for the purposes of marketing and advertising, with the aim of informing you of promotional sales campaigns that use automated means of contact (e-mail, text messaging and other mass messaging tools, etc.) and traditional contact methods (for example, telephone with operator).
d) Customer Satisfaction Surveys
INSTITUTION LAB APS may use your Biographical Data and Contact Data to conduct surveys with the purpose of measuring the level of customer satisfaction for the services rendered.
You may revoke your consent at any time by sending an email to firstname.lastname@example.org
e) Compliance with legally binding requests to fulfil a legal obligation, rules or provisions of judicial authorities, or to defend a right in a court of law
INSTITUTION LAB APS may finally process your Contact Data to fulfil a legal obligation and/or to defend its own rights before a court of law.
Premise for the processing: legal obligations, which INSTITUTION LAB APS is required by law to fulfil.
Note: You may revoke consent to the use of your data at any time by sending an e-mail to email@example.com or by using the specific link created to erase the data.
HOW WE KEEP YOUR PERSONAL DATA SAFE
INSTITUTION LAB APS uses an ample range of security measures to improve protection and maintain the security, integrity and accessibility of your personal data.
Your complete personal data is stored on our secure servers (or in secure paper copies) or on those of our suppliers or our commercial partners, and may be accessed and used only on the basis of our security standards and policies (or equivalent standards for our suppliers or commercial partners).
HOW LONG DO WE PRESERVE YOUR DATA
We preserve your Personal Data only the time necessary to fulfil the purposes for which it was obtained or for any other legitimate connected purpose. Therefore, if the Personal Data is processed for two different purposes, we will preserve this Data until the purpose with the longest expiration term has run its course, however we will no longer process the personal data relevant to the purpose for which the storage period has expired.
We limit access to your Personal Data to those who need to use it for relevant purposes.
Any personal data of yours that is no longer necessary, or for the preservation of which there is no further legal premise, will be irreversibly anonymised (it may be preserved in this form) or destroyed securely. Below are the timeframes for the preservation of the data in relation to the different purposes listed above:
Purposes related to access to the Website and the creation of your Account: the data processed for this purpose may be preserved for the entire duration of the relationship and in any case no longer than the next 10 years.
Fulfilment of contract obligations: the data processed to fulfil contract obligations may be preserved for the entire duration of the contract and in any case no longer than the next 10 years, in order to verify any outstanding matters including financial documents (for example invoices).
Marketing purposes: personal data processed for marketing purposes may be preserved for 24 months from the date at which last you expressed your consent for this purpose (except if you opt out of receiving any future communications).
Purposes of customer satisfaction surveys: the data processed for this purpose may be preserved for 24 months from the date in which you last gave your consent for this purpose (except if you opt out of receiving further communications).
In case of controversy: in case we need to defend ourselves or to act or even to advance a claim against you or third parties, we may preserve the personal data that we reasonably believe to be necessary to process for this purpose, for as long as this claim may be pursued.
WHO CAN WE SHARE YOUR PERSONAL DATA WITH
Your personal data may only be accessed by duly authorized employees and by external suppliers named, if necessary, as controllers of the file, who provide support to supply our services.
Please contact us by e-mail if you wish to see the list of people responsible for processing the data and the other subjects to whom we communicate this data.
Finally, we would like to mention that to complete the purchasing process on the Website you will be redirected to the platforms that provide these types of services. The data you provide inside these platforms will be processed exclusively by the management of said platforms, as independent controllers of the data file, without any notice to INSTITUTION LAB APS.
If you have any questions regarding our processing of your Personal Data, we ask you to send an e-mail to firstname.lastname@example.org.
YOUR RIGHTS IN THE MATTER OF THE PROTECTION OF PERSONAL DATA AND YOUR RIGHT TO MAKE CLAIMS BEFORE THE CONTROLLING AUTHORITIES
At certain conditions, you have the right to ask us for:
– access to your personal data
– a copy of your personal data
– correction of the data in our possession
– deletion of any data that we have no legal premise for processing
– opposition to processing where allowed by applicable law
– limitation of the way in which we process your personal data, within the limits set by law to protect personal data
– revocation of previously granted consent.
The exercise of this right is subject to several exceptions finalized towards the protection of the public interest (for example the prevention or identification of crimes) and our own interests (for example keeping professional secrets). In the case that you should exercise one of the above-mentioned rights, it will be our duty to verify that you may legitimately exercise this right and we will generally give you an answer within a month.
For any complaints or remarks on the way your personal data has been processed, we will make every effort to respond to your requests. However, if you so desire, you may forward your complaints or remarks to the controlling authorities for data protection (Controller for the protection of personal data), using the contacts available online on the website, www.garanteprivacy.it.
Institution Lab A.P.S. – Via Bergognone 34 – 20144 Milano Italy