Privacy Policy for Partners

Privacy Policy – art. 13-14 EU Regulation 2016/679

This document sets out the methods and purposes of the processing of personal data put in place by the Data Controller, as well as any further information required by law, including information on the rights of the data subject and their related exercise.

The EU Regulation 2016/679 on the protection of personal data establishes rules relating to the protection of individuals with regard to the processing of personal data, as well as rules relating to the free circulation of such data and protects the fundamental rights and freedoms of individuals, with particular reference to the right to the protection of personal data.

Art. 4, no. 1 of the EU Regulation 2016/679 provides that “Personal Data” must be understood as any information concerning an identified or identifiable natural person (hereinafter, “Data Subject”).

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (Art. 4, no. 2 EU Regulation 2016/679)

Pursuant to art. 12 and ss. of the EU Regulation 2016/679, it is also provided that the data subject must be made aware of the appropriate information relating to the processing activities that are carried out by the data controller and the rights of the data subjects.

Data Controller

World Manufacturing Foundation

Via Pantano 9

20122 Milano (MI) – Italy

FISCAL ID NUMBER 97823660150

Phone: +39 0258370812

Mail: info@worldmanufacturing.org

WebSite: https://worldmanufacturing.org

Data subject to processing and their sources

The data being processed, which will be collected from the data subject and / or from third parties, may be those relating to:

– personal data (Name, Surname), contact details (email and telephone).

Purpose and legal basis of the processing

The purpose of the processing of personal data is to allow the regular establishment, evolution, administration, management and execution of the contractual relationship of which the data subject and / or the employer of the data subject are or will be a party, attributable to the events that will take place as part of the “World Manufacturing Week 2021”, as well as for the fulfillment of the legal obligations to which the data controller is subject.

The legal basis for the pursuit of the aforementioned purposes are represented by art. 6 par. 1 let. b) and c) of EU Regulation 2016/679.

Mandatory or optional nature of providing data

The provision of data is necessary in order to correctly fulfill the obligations deriving from the contract. The essential data must be provided for the fulfillment of legal obligations, regulations, community regulations, or by authority provisions legitimated by the law and by supervisory and control bodies.

Processing methods

In accordance with the provisions of art. 5 of the EU Regulation 2016/679, the personal data processed are:

(i) processed in a lawful, correct and transparent manner towards the data subject;

(ii) collected and recorded for specific, explicit and legitimate purposes, and subsequently processed in terms compatible with those purposes;

(iii) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;

(iv) accurate and, if necessary, updated;

(v) processed in such a way as to guarantee an adequate level of security;

(vi) kept in a form that allows the identification of the data subject for a period of time not exceeding the achievement of the purposes for which they are processed.

The data processing will be carried out both with manual and / or IT and telematic tools with organizational and processing logics strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data in compliance with the organizational and physical measures. and logic provided for by the provisions in force.

Subjects involved in the processing and communication of data

The processing will be carried out, in part, directly by the Data Controller: the recipients of the Data Subject’s personal data include the authorized subjects belonging to the Data Controller’s organization, appropriately trained and made aware of the constraints imposed by EU Regulation 2016/679.

Furthermore, without prejudice to the communications required by law or the exercise of the right of defense, the personal data being processed may be disclosed to persons, companies, associations or professional firms that provide services or assistance and consultancy activities to the data controller, with particular attention but not exclusively with reference to IT, organizational, accounting, legal, administrative, tax and financial matters. For the pursuit of the aforementioned purposes, the data may be disclosed to third parties acting as independent data controllers or as data processors designated by the controller involved in the events that will take place in the “World Manufacturing Week 2021”.

The updated list of the data processors appointed by the data controller can be provided at the request of the data subject.

Data dissemination

The data will not be disseminated, unless this is required by law.

Data transfer abroad

For the purposes indicated above, the Personal Data will be processed within the European Economic Area (EEA). If they were transferred to third countries, in the absence of an adequacy decision by the European Commission, the provisions of the applicable legislation on the transfer of personal data to third countries will be respected, such as the Standard Contractual Clauses provided by the European Commission.

Data retention

In general, personal data will be kept for the time strictly necessary to achieve the purposes for which they were collected and processed. The data collected will be kept for the entire duration of the relationship with the Data Controller and for 10 years from the date of termination of the relationship, except for the possible need for the Data Controller to defend their right in court.

Rights of data subject

Pursuant to EU Regulation 2016/679 art. 15 and following as well as of the national legislation in force, the data subject may, according to the methods and within the limits established by current legislation, exercise the following rights:

– request confirmation of the existence of personal data concerning him or her (right of access);

– know its origin;

– receive intelligible communication;

– have information about the logic, methods and purposes of the processing;

– request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;

– in cases of consent-based processing, receive the data provided to the data controller at the cost of any support, in a structured and readable form by a data processor and in a format commonly used by an electronic device;

– the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor);

– as well as, more generally, to exercise all the rights that are recognized by the current provisions of the law.

The exercise of rights may take place by sending a request that must be addressed without any formalities to the Data Controller.

Before providing an answer, the data controller may need to identify the data subject, by requesting to provide a copy of his identity document.

Written feedback will be provided without undue delay and, in any case, no later than one month from receipt of the request.