PRIVACY POLICY Regulation
679/2016/UEInformation
Interested - Newsletter service - Christmas event in the Capitol

Pursuant to article 13 of the Regulation 679/2016/EU "General Data Protection Regulation", we inform you that Roma Capitale processes personal data provided by you and freely communicated. Roma Capitale guarantees that the processing of your personal data takes place in respect of your fundamental rights and freedoms, as well as your dignity, with particular reference to confidentiality, personal identity and the right to protection of personal data.

Data controller (Art. 13.1.a Regulation 679/2016/EU)

The Data Controller is Roma Capitale. As of today, all information concerning the Data Controller, together with the updated list of System Managers and Administrators designated, can be found at the Palazzo Senatorio, via del Campidoglio 1, 00186 Rome; PEC: protocollo.gabinettosindaco@pec.comune.roma.it.

Data Protection Officer (DPO)/ Data Protection Officer (DPO) (Art. 13.1.b Regulation 679/2016/EU)

The Data Protection Officer ("DPO") of Roma Capitale can be reached at the following e-mail address: dpo@comune.roma.it

Categories of personal data

Within the scope of the services provided and depending on the type of services requested, we will collect the following categories of data:

identification data (including personal data, contact details, etc.);
contractual data (including data necessary to participate in events, payment and billing data, services provided etc.);

Purpose of the processing of personal data and legal basis(Art. 13.1.c Regulation 679/2016/EU)

The different purposes for which your personal data is processed, the corresponding legal bases that legitimize the processing and the retention periods are indicated in the following table:

Purpose	BASIS OF LEGALITY	STORAGE TIME
4.1 Contractual purposes -Newsletter registrationThe personal data provided will be processed by the Controller to conclude a contract and fulfil the contractual and pre-contractual obligations. Activities that fall within this scope include all those necessary to provide the services requested, including registering or subscribing to the newsletter, participating in events and managing the contract and providing support and assistance.	Performance of the contract to which the data subject is a party or pre-contractual measures adopted at the request of the same (art. 6 par.1 lett. b of EU Regulation 679/2016)	The data will be kept until the end of the service provided, the withdrawal or request for deletion by the interested party, and in any case within the limitation period of the rights (10 years)
4.2 Purpose of administrative accounting management - The personal data provided will be used to carry out administrative, managerial, financial and accounting operations related to internal organizational needs, also related to the right to protection of rights in legal proceedings.	the processing is necessary to comply with a legal obligation to which the data controller is subject;(Art. 6 para.1 lett. c) of EU Regulation 679/2016)	The data will be kept for the period of prescription of rights and for any further retention periods provided by accounting and tax laws
4.3 Purpose of direct marketing- Only with your explicit and specific consent the data may be used to carry out market surveys, promotional activities and send commercial information on services, products and promotional initiatives of the Owner, By using all available means of communication, automated and non-automated (such as paper mail, telephone, e-mail, SMS, chat and notifications).	Consent (art. 6 para.1 lett. a) of EU Regulation 679/2016)	The data will be kept until the consent is withdrawn or deleted and within 2 years of collection.

How personal data is processed

The processing of your personal data takes place at the offices and offices of the Controller or, if necessary, at the entities indicated in paragraph 7, using both paper and computer media, by telephone or telematics, also through automated tools capable of storing, managing and transmitting the data themselves, with compliance with any precautionary measure, guaranteeing their security and confidentiality.

The processing will be developed in such a way as to minimize the risk of destruction or loss, of unauthorised access, of processing not in accordance with the purposes for which the data is collected. Your personal data is processed:

in accordance with the principle of minimisation, pursuant to Articles 5.1.c and 25.2 of Regulation 679/2016/EU;
in a lawful and correct manner.

Your data is collected:

for specific, explicit and legitimate purposes;
exact and updated as necessary;
relevant, complete and not exceeding the purposes of processing.

Nature of the collection and consequences of a possible failure to provide personal data (Art. 13.2 and Regulation 679/2016/EU)

The provision of data for the purposes indicated in points 4.1 and 4.2 of paragraph 4 is necessary for the management and conclusion of the contract. Failure to provide them will result in the failure to provide the service requested, its proper performance and any legal compliance. For the purposes indicated in points 4.3 and 4.4 of paragraph 4, the provision of data is optional after express consent. In the event of failure to give consent, direct marketing activities and communication to third parties for direct marketing may not be carried out.

Communication and dissemination of personal data (Art. 13.1 and Regulation 679/2016/EU)

Your personal data, if necessary, may be communicated (by this term being the knowledge of one or more specified subjects) to:

persons whose right of access to data is recognised by law, secondary legislation and Community law;

authorised persons such as employees, collaborators and consultants of Roma Capitale, in the scope of their duties and/or for the execution of activities related to the contractual obligations entered into by the interested parties;

Data processors designated pursuant to Article 28 of EU Regulation 2016/679, who act on behalf of Roma Capitale for the performance of activities instrumental to the provision of services subscribed by the interested party;

Your personal data will not be disclosed in any case, by this term being meant to give knowledge of it in any way to a plurality of undetermined subjects, subject to legal obligations.

Criteria used to determine the retention period (Art. 13.2.a Regulation 679/2016/EU)

The retention periods for personal data for the different purposes set out in paragraph 4, or the criteria used to determine such periods, have been indicated in paragraph 4.

Rights of the data subject (Art. 13.2.b Regulation 679/2016/EU)

Please note that you may exercise at any time:

the right to request the Data Controller, ex Art. 15 Reg. 679/2016/EU, to have access to their personal data;
the right to ask the Data Controller, ex Art. 16 Reg. 679/2016/EU, to be able to correct your personal data, if the latter does not conflict with the current legislation on the retention of data;
the right to ask the Data Controller, ex Art. 17 Reg. 679/2016/EU, to be able to delete your personal data, if the latter does not conflict with the current legislation on the retention of the same;
the right to request the Data Controller, ex Art. 18 Reg. 679/2016/EU, to restrict the processing of their personal data;
Right to object to processing, ex Art. 21 Reg. 679/2016/EU.
Right to revoke, at any time, the consent given for the purposes indicated in points 4.3 and 4.4 without prejudice to the lawfulness of the processing based on the consent given before the revocation

The above rights can be exercised by contacting the PEC address of the Holder …………………………………..

Right to complain (Art. 13.2.d Regulation 679/2016/EU)

The data subject is informed that he or she has the right to lodge a complaint with the Supervisory Authority for the Protection of Personal Data (art. 77 GDPR), which can be contacted at garante@gpdp.it or via the website http://www.gpdp.it. to apply to the appropriate courts (Art. 79 of GDPR)

REQUEST OF CONSENT FOR THE USE OF PERSONAL DATA OF THE INTERESTED PARTY FOR THE PURPOSES INDICATED IN POINTS 4.3. OF PARAGRAPH 4 OF THE INFORMATIVE Service newsletter - Christmas event in Campidoglio

Following the Informative Newsletter Service - Christmas Event in Campidoglioricevuta, below I indicate my preferences regarding requests for consent by the Holder Roma Capitale.