In case of new limitations related to the COVID-19 virus, the cost of the package will be partially refunded.
In particular, in case the maximum number of participants in the event will be reduced and your package will be cancelled, or if it will be impossible for you to arrive in Turin due to Italian covid limitations, up to 70% of the cost of your package will be reimbursed (the non-reimbursed portion relates to fixed costs which, if possibile, will be reduced allowing us to reimburse a higher percentage). If, however, quarantine periods without other limitations are foreseen, no reimbursement will be made.
PRIVACY NOTICE FOR WEBSITE
pursuant to Article 13 of the Regulation (EU) 2016/679 relating to the processing of personal data
(“GDPR”)
Distretto Rotaract 2031 pays the utmost attention to the security and confidentiality of personal data.
Therefore, Distretto Rotaract 2031 hereby provides information regarding the processing of the personal data of
the users (hereinafter also referred to as “Users” or, in the singular, as
“User”) that are collected surfing through the portal https://www.remturin2022.com/ (hereinafter also referred to as the
“Site”).
1.Data Controller
The data controller is Distretto Rotaract 2031, with registered office in Santhià, Via Talucchi n. 5 (hereinafter
referred to as the “Data Controller” or “District”).
For any need regarding the processing of personal data, or to exercise your rights, you can contact the Data
Controller at the following address: REMTurin2022@gmail.com
2.For what purposes does District process personal data
Through the Portal, District collects certain personal data relating to Users, either voluntarily provided by
them or collected in the normal operation of the same, which are processed for the purposes described below.
The Portal also makes use of cookies and other tracking tools. Please refer to the Cookie Policy for further
information and to manage your preferences in this regard at any time.
Purposes of Processing
Categories of data processed
Legal Basis and provision
1
To provide access to the reserved area of the Site with the relative operational
management of the same and purposes strictly related to these. In order to create a
profile that allows access to the reserved area made available on the Site, District collects
certain personal data necessary to identify the User and allow the operational management of the
Site itself.
Personal and contact data (name, surname, telephone number, mobile phone number, e-mail
address, username and password); Data provided voluntarily by you (information you voluntarily
provide on the Site); Navigation data (information on how you use the Site, open or forward our
communications, including information collected through cookies).
Performance of a contract to which the User is a party (Art. 6 (1) (b) GDPR). The provision of
data is necessary (except for the data provided voluntarily by you) because if it is not
provided, the District will not be able to provide registration on the Site and access to the
reserved area.
2
Managing and responding to your requests for information. The District
processes your personal data in order to manage and respond to your requests for contact and/or
information or for the possible establishment and execution of pre-contractual or contractual
relations for the possible provision of the services requested.
Personal and contact data (name, surname, telephone number, mobile phone number, e-mail
address); Data provided voluntarily by you (information you voluntarily provide on the Site in
the form present on the Site in the “Contacts” and “Assistance and Support” sections).
Performance of a contract to which the User is a party (Art. 6 (1) (b) GDPR). The provision of
data is necessary (except for the data provided voluntarily by you) because without it the
District will not be able to handle your request and/or respond to you.
6
Defending its rights The District may process personal data in order to defend
its rights in the course of judicial, administrative or extrajudicial proceedings and in the
context of disputes arising in connection with the services.
Personal data collected for purposes 1 to 4 will be processed as necessary.
Legitimate interest of District in protecting its rights (art. 6 (1) (f) GDPR). A new and
specific provision is not required as the District will pursue this further purpose, where
necessary, by processing the data collected for the above purposes.
7
Fulfilment of legal obligations District may process personal data in order to
fulfil its obligations under laws, regulations or Community legislation, or under
provisions/requirements of authorities empowered to do so by law and/or supervisory and control
bodies.
Personal data collected for purposes 1 to 4 will be processed as necessary.
Fulfilment of a legal obligation (art. 6 (1) (c) GDPR). The provision of personal data for this
purpose is necessary as otherwise the District will be unable to fulfil specific legal
obligations.
3.How we keep personal data secure
The District takes appropriate security measures to ensure the protection, security, integrity and accessibility
of Users’ personal data. The appropriate security measures are designed to prevent unauthorised access,
disclosure, modification or destruction of personal data.
All personal data is held on the District’s secure computer systems (or appropriately stored hard copies) or
those of our suppliers, and it may be accessible and usable in accordance with our standards and security
policies (or equivalent standards for our suppliers).
4.How long we keep personal data
The District retains the User’s personal data only for as long as it is necessary to achieve the purposes for
which it was collected or for any other related legitimate purpose.
Personal data that is no longer needed, or for which there is no longer a legal basis for its retention, will be
irreversibly anonymized (and in this way preserved) or safely destroyed.
If the data processing serves several purposes, the data will be deleted or anonymised as soon as the retention
period for the last purpose has expired.
In particular, the data processed to manage access to the Site will be stored until the relevant profile is
closed or in case of inactivity of the same for two years. On the other hand, personal data processed to manage
and respond to requests for information made by the User will be stored for two years.
With particular reference to the judicial protection of our rights or in case of requests by the authorities, the
data processed will be kept for the time necessary to process the request or to pursue the protection of the
right.
In any event, for technical reasons, the termination of processing and the consequent definitive cancellation or
irreversible anonymisation of the relevant personal data shall be definitive within thirty days of the
aforementioned deadlines.
5.With whom we may share personal data
Personal data may be accessed by duly authorised employees and collaborators, as well as by external suppliers,
appointed, as necessary, as data processors, who provide support for the provision of services, related to the
relationship between you and the District and/or on the Site.
You can contact District as indicated in the paragraph n.1 if you wish to request to see the list of data
processors and other entities to whom we disclose your personal data.
In any case, any communication of your personal data will take place in full compliance with the provisions of
the GDPR and the Privacy Code.
6.Transfer to third countries
The District guarantees that the Data relating to this Contract will be processed exclusively within countries
belonging to the European Union (EU) or the European Economic Area (EEA).
7.Personal data protection rights and the right to lodge complaints with the Personal
Data Protection Authority
Each User, subject to the existence of the legal basis for the request, is entitled to obtain from the District:
- the access to personal data, as provided for in Article 15 of the GDPR;
- the rectification or integration of personal data held by the District that are considered inaccurate, as
provided for in Article 16 of the GDPR;
- the deletion of personal data for which the District no longer has any legal grounds for processing, as
provided for in Article 17 of the GDPR;
- the restriction of the way in which personal data are processed, if one of the cases provided for in Article 18
of the GDPR applies;
- the copy of the personal data provided to the District, in a structured, commonly used and machine-readable
format and the transmission of such data to another data controller (so-called portability), as provided for by
Article 20 of the GDPR.
Right to object: in addition to the rights listed above, the User may, at any time, object to the processing of
his/her data by the data controller for the pursuit of his/her own legitimate interest. In addition, he/she may
always object, at any time, if personal data are processed for marketing purposes.
The exercise of such rights, which can be done through the addresses indicated in point 1, is free of charge and
it is not subject to formal requirements. It will be the responsibility of the District to verify that the User
is entitled to exercise such rights and to reply, as a rule, within one month.
In the event that the User considers that the processing of his/her personal data is in breach of the provisions
of the GDPR, he/she has the right to lodge a complaint with the competent Personal Data Protection Authority, or
to take appropriate legal action.