Information pursuant to art. 13 EU Regulation 2016/679 (GDPR)
Dear user,
Costa Edutainment SpA communicates below the information referred to in the art. 13 EU Regulation 2016/679 (GDPR), relating to the processing of personal data provided by you by filling out this form.
Data controller
The Data Controller of personal data is Costa Edutainment SpAPIVA 03362540100, with registered office in Riccione (RN), Via Ascoli Piceno n. 6, cap 47838 (RN), in the person of its legal representative pro tempore (hereinafter "Company" or "Owner").
Contact details Data Controller
The Data Protection Officer (RPD) or Data Protection Officer (DPO) can be reached at the e-mail address:
dpo@costaedutainment.com or by ordinary mail by writing to the administrative headquarters of the Company located in Genoa, Porto Antico – Ponte area Spinola Ambrogio sn, postcode 16128 (GE), to the attention of the same.
Purpose of the processing
Your personal data will be processed, also by means of IT and electronic tools, for the purpose of:
- respond to your request for information;
- send you, subject to your consent, information on the Company's services, products and commercial initiatives via automated methods (e.g. e-mail, text message, WhatsApp etc.);
- communicate your personal data to third parties, subject to your consent, so that they can send you commercial information relating to their products or services, including through automated methods. The third parties to whom your data may be communicated are companies controlled, connected or owned by the Data Controller or other third-party companies operating in the entertainment sector based on the qualitative use of free time, combining culture, science, education, entertainment and nature. .
Legal basis of the processing
The legal basis that justifies the aforementioned processing for the purposes referred to in point 1 above is art. 6 paragraph 1 letter b) of the GDPR or processing necessary in the context of a contract or for the purpose of concluding a contract.
The legal basis that justifies the aforementioned processing for the purposes referred to in points 2 and 3 above is your consent.
Consequences of failure to provide personal data
Failure to provide your personal data for the purposes referred to in point 1 will make it impossible for the Company to respond to your requests for information.
Personal data retention period
Your personal data will be stored, for the purposes referred to in point 1, for the period necessary to process your request for information.
Your personal data will be stored, for the purposes referred to in points 2 and 3, for a period of 24 months from the date of their communication.
Recipients of the data
The manager of the Company's website may have access to your personal data. In case of your consent to the receipt of commercial communications, the subjects who provide the services for sending commercial communications may also have access to your personal data.
Each of the above-mentioned subjects operates as Data Controller appointed by the Data Controller pursuant to art. 28 of the GDPR.
The complete list of appointed data controllers, which by its nature and changeable, is available in a constantly updated version by requesting it from the Data Controller, at any time, by writing to privacy@costaedutainment.com.
Subject to your consent, your personal data may be communicated to companies controlled, connected or owned by the Data Controller or other third-party companies operating in the entertainment sector based on the qualitative use of free time, combining culture, science, education, entertainment and nature.
The Company's employees, defined as data processors, may also have access to your personal data if the duties of such employees require it. Each data processor is specifically identified, authorized and trained, and acts on the basis of specific instructions provided by the Company regarding the purposes, methods of the processing itself and the security measures to be adopted for the protection of personal data.
Rights of the interested party
The Data Controller informs you that you, as an interested party in the processing, have the right, pursuant to art. 15 et seq. EU Regulation 2016/679, and within the limits prescribed by it, to:
- obtain data and information on the processing, in particular in relation to the type of personal data processed, the purposes for which the personal data are processed, the period of processing and the subjects to whom the data are communicated ( so-called right of access );
- obtain the rectification or integration of inaccurate personal data concerning you ( so-called right of rectification );
- obtain the deletion of personal data concerning you in the following cases: (i) the personal data are no longer necessary for the purposes for which they were collected; (ii) you have revoked your consent to the processing of personal data, if they are processed on the basis of such consent; (iii) you have objected to the processing of personal data concerning you in the event that they are not processed for a legitimate interest of the Data Controller; (iv) the processing of personal data does not comply with the law. However, the retention of your personal data by the Data Controller is lawful if it is necessary to allow the Data Controller to fulfill a legal obligation or to ascertain, exercise or defend a right in court ( so-called right of cancellation );
- obtain that the personal data concerning you are only stored without any other use being made of them in the following cases: (i) you dispute the accuracy of the personal data, for the period necessary to allow the Data Controller to verify the accuracy of such personal data; (ii) the processing of personal data is unlawful; you oppose, however, the deletion of personal data by the Data Controller; (iii) the personal data is necessary for the establishment, exercise or defense of a right in court; (iv) you have objected to the processing and are awaiting verification regarding the possible prevalence of the legitimate reasons of the Data Controller for the processing, compared to yours ( so-called right of limitation );
- object at any time to the processing of data and in particular to the processing of data processed for direct marketing purposes ( so-called right of opposition );
- receive in a commonly used format, readable by an automatic and interoperable device, the personal data concerning you, if they are processed pursuant to a contract or on the basis of your consent, and/or ask to transmit the data to another data controller processing, if feasible ( so-called right to portability );
- revoke consent at any time to the processing for which it is requested. The revocation of consent does not affect the lawfulness of the processing based on consent before the revocation.
The aforementioned rights may be exercised by you by writing to the Data Controller by e-mail at the dedicated address
privacy@costaedutainment.com or by writing by post to the administrative headquarters of the company Costa Edutainment SpA, located in Genoa, Porto Antico – Ponte Spinola area Ambrogio sn, postcode 16128 (GE).
You also have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Right to complain
If you believe that the processing of your personal data carried out by the Data Controller is in violation of the provisions of EU Regulation 2016/679, you have the right to lodge a complaint with the Office of the Privacy Guarantor, as required by art. 77 of EU Regulation 2016/679 (via e-mail, at the address:
garante@gpdp.it , or by post, to the Guarantor for the protection of personal data, which is based in Rome (Italy), Piazza Venezia 11 Scala B , CAP 00187), or to take action in the appropriate judicial offices, as provided for by the art. art. 79 of EU Regulation 2016/679.
The Owner
Costa Edutainment SpA
it
