PERSONAL DATA PROCESSING POLICY
Registration for Festival Cartoons on the Bay
pursuant to Art. 13 of (EU) Regulation 679/2016 and Art. 13 of Italian Legislative Decree 196/2003 as amended
RAI COM S.p.A., with registered office in Via Umberto Novaro, no. 18 – 00195 Rome (RM), tax code and VAT no. 12865250158, (hereinafter “RAI COM”) – in its capacity of Controller – performs all personal data (“Data”) processing activities in observance of the principles of lawfulness, fairness and transparency, and in compliance with the provisions protecting the basic rights and freedoms of natural persons, pursuant to (EU) Regulation no. 2016/679 (hereinafter “GDPR”) and of Italian Legislative Decree no. 196 of 30 June 2003 amended by Italian Legislative Decree no. 101 of 10 August 2018.
Registration for Festival Cartoons on the Bay permits both access to the Cartoons on the Bay event and the possibility to upload and/or view the content of the “Pitch Me!” contest that allows creative Italian young people to present, for the first time, innovative animation projects (hereinafter for the sake of brevity “Content”) to an audience of professionals.
By filling in the form, the data subject (hereinafter “the Data Subject”) authorises RAI COM to process the Data provided and agrees to the purposes of the processing described hereunder, including activation of access credentials and all activities connected to the upload and viewing of the Content. No other data is necessary in order to carry out the service.
Purposes of the processing
In meeting the obligations set out in current legislation, RAI COM processes the Data provided in observance of the principles of lawfulness, fairness and transparency, accuracy and minimisation of risks, with the sole purpose of supplying the service of accessing Festival Cartoons on the Bay and viewing the Content. The Data provided might be viewed by RAI – Radiotelevisione italiana S.p.A., which acts in the capacity of Processor, when it manages the website.
Processing methods and data storage time
The Data are processed performing the operations specified under Art. 4 of Italian Legislative Decree 196/2003 and Art. 4, no. 2) of the GDPR, and particularly performing operations to: collect, record, organise, store, consult, process, modify, select, extract, compare, use, interconnect, block, disclose, delete and destroy data. The processing is carried out with the aid of electronic tools capable of protecting, at all times, the confidentiality and the rights of the Data Subject, in observance of the provisions of current legislation.
In compliance with the provisions of Art. 5, letter e) of the GDPR and with current legislation on the subject, the collected Data will be stored for a period of time no longer than what is necessary to achieve the purposes for which they are processed. Appropriate security measures are taken to prevent the loss of the Data, illegal and improper use, and unauthorised accesses.
In any case, RAI COM shall take all steps to prevent use of the Data for an unspecified time, and shall periodically verify continuation of the interest in processing said Data in an appropriate manner.
Nature of the provision of personal data, consequences of refusal, and communication of the data
Collecting the Data is optional, and refusal results in the impossibility to use the requested service. The Data are used only in the territory of Italy, for the purposes specified, and shall in no way be disclosed to third parties, circulated and/or in any case subsequently transferred.
Rights of the Data Subjects
Pursuant to Arts. 15 et seq. of the GDPR, the Data Subject is at any time entitled to request access to the Data and to verify their accuracy and/or to request their integration, update, correction, deletion, restriction of processing, including the right to object to processing for marketing purposes and for sending commercial notifications. The Data Subject also has the right to revoke their consent to the processing of their data at any time, without jeopardising the lawfulness of the processing based on the consent given prior to the revocation.
The GDPR allows the following specific rights to be exercised:
- confirmation of whether or not your personal data are being processed and, if so, to obtain access to them (right of access):
- correction of inaccurate personal data, or integration of incomplete personal data (right of correction);
- deletion of the data if one of the reasons envisaged by the Regulation exists (right to be forgotten);
- restriction of processing when one of the cases envisaged by the Regulation occurs (right of restriction);
- receiving, in a structured, commonly used and machine-readable format, the personal data you have provided to the Controller and sending said data to another Controller (right to portability).
To exercise the rights or to obtain information about the Data, you may formulate an explicit request in writing to Focal Point Privacy of RAI COM S.P.A., forwarding a request:
- to the email address: firstname.lastname@example.org;
- or by post to Focal Point Privacy of RAI COM S.p.A., located in Via Umberto Novaro, no. 18 – 00195 Rome (RM), Italy
Without prejudice to all other administrative or jurisdictional action, the Data Subject has the right to submit a complaint to the Authority for the Protection of Personal Data should they believe that the processing violates the GDPR.
Controller and Processor
The Controller is RAI COM S.p.A., which is located in Rome (Italy) in Via Umberto Novaro, no. 18, 00195, email address: email@example.com.
For those activities tied to the maintenance and/or management of the technological part of the Videolibrary, the Data provided may be processed by the Processor: RAI-Radiotelevisione italiana S.p.A., located in Viale Mazzini, no. 14, 00195 Rome, Italy (“RAI”). In the case of technical problems, send a report by email to: firstname.lastname@example.org.