INFORMATION PROVIDED PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679

This information is provided pursuant to and in accordance with Article 13 of the EU Regulation 2016/679 on data protection (General Data Protection Regulation, hereinafter "GDPR").

Data will be processed by applying appropriate security measures to ensure compliance with the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimisation, accuracy, integrity and confidentiality, in accordance with applicable regulations.

 

CO-OWNERS OF DATA PROCESSING

The co-owners of the processing of personal data are AIAF Associazione Italiana per l'Analisi Finanziaria and AIAF Formazione e Cultura Srl, with a registered office in Corso Magenta no. 56 - 20123, Milan.

AIAF Associazione Italiana per l'Analisi Finanziaria and AIAF Formazione e Cultura S.r.l. share the aims, methods and purposes of the processing of personal data. Therefore, a co-ownership agreement has been defined pursuant to and for the purposes of Article 26 of the GDPR 2016/679which regulates obligations and responsibilities regarding the processing of personal data in accordance with current legislation.

For any further information or clarification, a specific request may be sent to the mail address indicated, or to the e-mail address privacy@aiaf.it.

  

 

PERSONAL DATA BEING PROCESSED

The personal data being processed are

• identification data: name, surname, tax code, date and place of birth

• contact data: telephone number, mobile phone number, email address, address of residence and domicile

• data required to make payment

•  job-related data

•  audio and video footage

 

PURPOSE AND LEGAL BASIS OF PROCESSING

Your personal data will be processed for the purposes specified below:

a.       Registration for a specific event/training course and management of the request for participation;

b.       Processing of requests received and forwarding of communication related to event participation through various means of communication (telephone, email, other);

c.       Fulfilment of administrative, accounting and tax obligations arising from existing relations, as well as obligations provided for by law, regulation, EU legislation or an order from the Authority;

d.       Exercise of the Controller's rights, e.g. the right to a defence in court.

The legal basis for processing is represented by a contract which the Participant is a party to or the execution of pre-contractual measures taken at the Participant's request as well as the legitimate interest of the Controller to process the data in order to efficiently manage the relationship with the Participants and the related internal and external organisational processes. The provision of data for such purposes is mandatory and, therefore, any refusal to provide such data in whole or in part would not allow the contract to be executed.

e.       Entry of of the subscriber's personal data (name, surname, company name) on a "List of Participants" made available to all Course participants.

The legal basis of data processing for these purposes is represented by his or her explicit consent. Providing data for this purpose is optional.

f.        In the case of events and classroom courses, taking photographs and videos during the event for the dissemination and promotional purposes of the Owner through the dissemination of the images on their institutional websites and social networks, in printed media and/or any other means of dissemination, without any territorial and/or temporal limitation

The legal basis for processing for this purpose is your explicit consent. Such consent shall be expressed, on the occasion of events organised by the Data Controller, through the voluntary act of the data subject to go to the premises where the event is held, clearly identified with special iconic information.

g.       In the case of courses and events delivered through the use of IT platforms, audio and video filming during the course for teaching purposes it is specified that the filming will be made available to the other participants of the Training Course.

The legal basis for processing for this purpose is your explicit consent represented by your participation in the Course and your failure to deactivate your webcam and microphone, which is always possible for every participant.

h.       Marketing activities. We would be pleased to keep you up to date on events and training courses organised by AIAF, by sending you promotional communications through automated systems of e-mail, posts and social media. However, the Contractors reserve the right to send, even without explicit consent, informative newsletters on products similar to those covered by the service provided. We would also like to remind you that you may object to the processing of your data even at a later date and revoke your previously given consent for such purposes.

 

DISSEMINATION AND COMMUNICATION OF DATA

Your personal data may be processed by employees expressly authorised to process them as well as by companies providing outsourced services such as Data Processors. They may also be communicated to the competent authorities and public administration in order to fulfil the obligations  established by laws, regulations and national or European legislation or to enable the legal defence of the data controller.

In the case of events and classroom courses, the video and photo footage taken for the Controller's dissemination and promotional purposes will be "disseminated and communicated", i.e. they will be made known to unspecified parties, by means of computerised methods on the Data Controller’s social networks and internet channels.

In the case of courses delivered through the use of IT platforms, audio and video recordings made for teaching purposes will be made available exclusively to other participants in the training course (repetition – check).

Your personal data, with the exception of video and photo recordings for dissemination and promotional purposes of the Data Controller as specified above, will not be disseminated.

 

TRANSFER OF PERSONAL DATA

The Data Controller does not transfer personal data to third countries or international organisations. However, it reserves the right to use cloud services. In this case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 GDPR.

When using certain IT platforms, data may be transferred to the USA, insofar as the platform operator has adopted guarantee mechanisms such as BCRs - Binding Corporate Rules - or has adhered to specific protocols (e.g. Privacy Shield).

Should participation in the event lead to the issue of international certificates, the data may be transferred to the third countries concerned.

In any case, data processing will take place in accordance with one of the modalities permitted by applicable law, such as, for example, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programmes for the free circulation of data (e.g. EU-USA Privacy Shield) or operating in countries considered safe by the European Commission.

 

RETENTION PERIOD

Personal and contact data will be kept until the fulfilment of contractual obligations and subsequently for the fulfilment of legal obligations and will be processed only for the achievement of the specific purposes pursued from time to time. Data collected for information and promotional activities will be kept until consent is revoked and in any case for a period not exceeding 3 years.

 

YOUR RIGHTS

The participant may exercise the rights provided for in Articles 15 et seq. of the GDPR, i.e.: Article 15 - "Right of access of the data subject", Article 16 - "Right of rectification", Article 17 - "Right to cancel ", Article 18 - "Right to restriction of processing", Article 20 - "Right to data portability", within the limits and under the conditions provided for in Article 12 of the GDPR.

Requests should be made in writing to the contact details indicated in the "Data Processors" section of this policy.

In any case, the interested party always has the right to lodge a complaint with the competent supervisory authority (Garante per la protezione dei dati personali).

The undersigned ________________________________________________________ declares that he/she has received full information pursuant to Art. 13 of EU Regulation 2016/679 and declares his/her consent to the processing of his/her personal data.

Marketing: I wish to stay updated on events and training courses organised by AIAF

□ I consent □ I do not consent

 

Date ___ /___ /____ Signature of the interested party _______________________________________________