• Italian

Feeling Italian – Privacy

PRIVACY, THE RESPONSIBILITY OF AUTHORS AND THE RIGHT TO EXCLUDE SUBMISSIONS

A.1 PRIVACY

Notice of privacy rights provided pursuant to Article 13 of EU Regulation 2016/679, known as the “General Data Protection Regulation” (GDPR)

With this information document (Privacy Notice/Notice), the Data Controller as defined below wishes to apprise you of the purpose and the modalities used to process your personal data, as well as of the rights to which you are entitled under Regulation (EU) 2016/679 (GDPR), which relates to the protection and the transfer of the data of physical persons..

 

1 Data Controller

The party in charge of processing your data (the Data Controller/Controller) is SIETAR Italia, whose registered office is at Via Marco Burigozzo No 8, 20122 Milan.

You may contact the Data Controller to exercise your rights or to receive information relating to your rights and/or relating to this Privacy Notice by writing to:

info@sietar-italia.org

 

2 Type of data processed

For the purposes indicated in this Notice, the Controller shall process the following personal information:

  • Your name and surname
  • The email address, website address and any social media accounts you provide
  • Your phone numbers
  • Your place of birth
  • Your nationality

 

3 Purpose of data processing

Your data is processed for the purpose of your participation in the photography competition called “Italian Feeling” and for the subsequent fulfilment of administrative and organizational requirements.

Your data shall be processed for the amount of time necessary for your participation in the “Italian Feeling” photography competition and for the subsequent fulfilment of administrative and organizational requirements.

Your personal data shall be retained for 10 years from the date of your participation in the “Italian Feeling” photography competition, as permitted by law.

 

4 Purpose and legal basis of data processing

With reference to Article 3 of this Notice, which relates to your participation in the “Italian Feeling” photography competition, and for the purpose of fulfilling administrative and organizational requirements, the legal basis for the processing of your data shall be your consent to the same, as per Article 6.1 (a) of the GDPR.

Your refusal to grant authorization for the processing of your data will preclude your participation in the “Italian Feeling” photography competition, and will prevent the subsequent fulfilment of administrative and organizational requirements.

Be advised that you have the right at any time to revoke your consent and prevent the processing of your data by contacting the Data Controller at the address indicated in Article 1 of this Notice.

 

5 Method and scope of processing

Your data shall be processed using paper-based, electronic and digital instruments pursuant to the provisions of the GDPR. The processing modalities shall strictly accord with the purpose indicated and, in any case, appropriate procedures shall be followed to guarantee the security and confidentiality of your data, as per Article 32 of the GDPR.

 

6 Parties who may gain knowledge of your data or with whom it may be shared

For the purposes of Article 3 above, your personal data shall be available both to the Data Controller’s employees and similar and to the Data Controller’s partners, who, in their capacity as Data Processors, shall be authorized to handle your data.

Your personal data shall be processed also by third parties belonging to the following categories:

  1. Parties that, in their various capacities, the Controller uses for the execution of the photography competition;
  2. Parties that provide the Controller with services relating to the management of its data processing and storage systems;
  3. Parties that provide the Controller with legal and/or tax and/or labour-law advisory services;
  4. Authorities and supervisory and control bodies.

In some circumstances, the parties belonging to the foregoing categories operate separately and independently as Data Controllers; in other circumstances, they operate as Data Processors if so appointed by the Data Controller pursuant to Article 28 of the GDPR.

A complete and updated list of parties to whom your personal data may be transferred is available upon request from the Data Controller at one of the addresses indicated in Article 1 of this Notice.

Personal information processed by the Data Controller is stored on servers located in Italy. However, should the need arise, the data may be transferred to a place outside the European Union. In such an eventuality, the Data Controller shall provide assurances that your personal information has been transferred to a “third” (non-EU) country on the basis of an adequacy decision of the European Commission under the meaning of Article 45 of the GDPR, or on the basis of standard contractual clauses under the meaning of Article 46 of the GDPR, or on the basis of a specific exemption under the meaning of Article 49 of the GDPR.

Your personal data shall not be disseminated.

 

Your rights as Data Subject

In respect of the purposes described in this Notice, the GDPR entitles you, the Data Subject, to exercise the rights enshrined in its Articles 15-21, notably the following:

  • Right of access by the Data Subject – GDPR Article 15 grants you, the Data Subject, the right to require the Controller to disclose whether your personal data is being processed and, if such should be the case, to access the data in question, including through the receipt of a copy of the data, and further grants you the right to demand of the Data Controller the following information:
    1. the purpose of the processing;
    2. the categories of personal data concerned;
    3. the recipients to whom the data has been or will be disclosed;
    4. the length of time for which the data will be retained, and the criteria used to determine the period;
    5. your rights as Data Subject to rectify or erase the data, or to restrict or object to its processing;
    6. your right to lodge a complaint;
    7. your right to be informed of the origin of personal data about you if it has not been collected from you;
    8. whether an automated decision-making process, including profiling, has been applied to your data.
  • Right to rectification – GDPR Article 16 grants you, the Data Subject, the right to obtain, without undue delay, the rectification of personal data pertaining to you where it is inaccurate, and the completion of your personal data where it is incomplete;
  • Right to erasure (the right to be forgotten) ​​- GDPR Article 17 grants you the right to obtain, without undue delay, the erasure of personal data concerning you, if:
    1. The data is no longer necessary in relation to the purposes for which it was collected or otherwise processed;
    2. You have withdrawn your consent and no other legal basis exists for its processing;
    3. Your objection to the processing of your data has been upheld;
    4. The data has been unlawfully processed;
    5. The data must be erased for the sake of compliance with a legal obligation;
    6. The personal data has been collected in relation to the offer of information society services referred to in Article 8(1) of the GDPR.

 

The right to erasure does not extend to cases in which processing is necessary for legal compliance or for the performance of a task carried out in the public interest or for the establishment, exercise or defence of legal claims.

 

  • Right to restriction of processing – Article 18 of the GDPR grants you the right to restrict processing if:
    1. The accuracy of the personal data is contested by you as the Data Subject;
    2.  The processing is unlawful, and you demand the erasure of the personal data or request the restriction of its use;
    3. You require the personal data for the establishment, exercise or defence of a legal claim;
    4. You have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the Controller override those of the Data Subject.

     

  • Right to data portability – Article 20 of the GDPR grants you the right to receive, in a structured, commonly used and machine-readable format, your own personal data that you have provided to a controller, as well as the right to transmit the data to another controller without hindrance from the Controller provided that the processing has been carried out by automated means. In addition, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
  • Right to object – Article 21 of the GDPR grants you the right to object at any time, on grounds relating to your particular situation, to the legitimate processing of personal data concerning you on grounds of legitimate interest, including for profiling purposes, unless the Controller demonstrates compelling grounds for the processing that override your interests, rights and freedoms or requires the data for the establishment, exercise or defence of legal claims.

In addition, you have the right to object at any time to the processing of your personal data for direct marketing purposes, including the right to object to profiling to the extent that it is related to direct marketing.

  • Complaints should be submitted to the Data Privacy Authority at Piazza di Montecitorio No 121, 00186, Rome (RM).

To exercise the foregoing rights, contact the Data Controller at the address indicated in Article 1.

The Controller shall be responsible for responding to your request and for providing, without undue delay and in no case later than one month after receiving the request, the relevant information about what action has been taken to fulfil your request.

Pursuant to Article 12 of the GDPR, your exercise of these rights as a Data Subject shall be free of charge. However, in the case of requests that are manifestly unfounded or excessive, including by virtue of their repetitive nature, the Data Controller may charge a reasonable fee in view of the administrative costs incurred in the handling of your request, or may refuse to fulfil it.

Be advised also that the Data Controller may demand further information from you in order to confirm your identity.

 

A.2. RESPONSIBILITY OF AUTHORS AND THE RIGHT TO EXCLUDE SUBMISSIONS

All participants shall be accountable for the material they submit to the competition. Therefore, participants agree to hold SIETAR Italia free of all liabilities to third parties, including any parties who are represented in the photographs. In no circumstances may the images sent to the competition contain data that can be deemed sensitive.

SIETAR Italia reserves the right to protect participants and visitors by excluding from the competition and not publishing photographs whose form or subject matter does not comply with these competition rules or with commonly accepted standards of morality, ethics and decency. Therefore, no images shall be accepted that are deemed offensive, improper or prejudicial to human and social rights.

All participants herewith declare that they have read the foregoing Privacy Notice and consent to the processing of their data in the manner indicated therein.