INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF EU REGULATION 2016/679 AND ART. 13 LEGISLATIVE DECREE 196/2003.
Foreword
Dear Customer, the “European Regulation 2016/679 on the Protection of Individuals with regard to the Processing of Personal Data and on the free movement of such data” provides for the protection of persons and other subjects with regard to the processing of personal data.
THE SKI SCHOOL Bruneck STP GmbH. as “Kronbichler Hermann” of the processing, in accordance with Article 13 of EU Reg. 2016/679, would like to explain to you the purposes and methods by which your personal data are collected and processed. In particular, we provide you with the following information:
1. Identity and contact details of the data controller:
The data controller is : SKI SCHOOL Bruneck STP GmbH with registered office in Bastion Street 11- 39031(BZ), in the person of its legal representative pro tempore.
It will be possible to contact the data controller using the following contact details:
Telephone : +39 389 6911110
2. Purpose of processing and legal basis:
The collection or processing of personal data is carried out for the following purposes:
– Contact purposes inherent to the execution and management of the contract;
– Management of any litigation;
Fulfillment of legal obligations to which the Data Controller is subject (Art. 6 co. 1 l. c) GDPR) and performance of a contract to which the Data Subject is a party or the execution of pre-contractual measures taken at the request of the same (Art. 6 co. 1 l. b) GDPR)
Your personal data will be processed exclusively for the purposes related to the fulfillment of contractual obligations relating to the assistance, teaching and support in the ski activity.
3. Modalities of the processing:
In relation to the stated purposes, the processing of personal data is carried out using manual, computer and telematic tools with logic strictly related to the purposes themselves and in any case in such a way as to ensure the security and confidentiality of the data in accordance with the legislation cited in the epigraph. The existence of automated decision-making processes, including so-called profiling, is excluded.
4. Categories of third parties to whom the data may be communicated:
The Data Controller may communicate your personal data to the following categories of subjects: – insurance and legal institutions; – firms and companies within the scope of professional assistance and consulting relationships; – technicians for computer maintenance and management. These parties will process the data as Data Processors on behalf of the Data Controller.
You will be able to request a list of the Data Processors, using the contact details of the Controller indicated in point
1. The data will not be disseminated, except for Your explicit and optional consent to the dissemination of images on the website/social media, as indicated in point 2, lett. c) of this policy.
5. Duration of processing and storage period:
Your data will be processed for the purposes indicated above, and more specifically for the activities of administration and management of any litigation, for a period of time not exceeding the achievement of the purposes for which they are processed (“principle of storage limitation”, art.5, EU Reg. 2016/679) or according to the deadlines provided by the legal regulations.
The verification on the obsolescence of the retained data in relation to the purposes for which they were collected is carried out periodically.
6. Transfer of data outside the European Union
The collected data will not be transferred to countries outside the European Union.
7. Rights of the data subject
In your capacity as a data subject, you may assert the rights set forth in Articles 15 et seq. of EU Reg. 2016/679 below: Rights to access, rectification, integration and deletion of data, portability, restriction of processing and revocation of consent given.
a) Pursuant to EU Reg. (EU) 2016/679 You have the right to request from the Data Controller access to your data, as well as its rectification, integration or deletion. Within 30 days from the submission of the request, you will be provided with feedback in written form, including by electronic means.
b) You also have the right to object to the processing or request the restriction of the same, for legitimate reasons and in the cases provided for in Articles 18 and 21, EU Reg. 2016/679. c) You may revoke at any time the consent to the processing of data given for the purposes determined in this information notice.
d) Finally, you may exercise the right to data portability, requesting the Data Controller to transmit the same to another data controller. To exercise the above rights, it will be sufficient to use one of the contact details of the Data Controller indicated in point 1. Right to Propose Complaint to the Control Authority.
a) You have the right to apply to the Control Authority by proposing a complaint, where you believe that your data is being processed illegitimately and contrary to the relevant legislative requirements.
SKI SCHOOL Bruneck STP GmbH
Graben 11, 39031 Bruneck
info@skischoolbruneck.com
Phone: +39 389 6911110
