1. Meaning of the Information Notice
This Information Notice aims to provide individuals, referred to as “Data Subjects,” with complete and comprehensive information regarding the type of their personal data that will be collected, the methods by which the related processing will be carried out, and the purposes for which it will be performed. Specifically, this Information Notice seeks to meet the data protection requirements set forth by the GDPR (EU Regulation 679/2016).
2. Data Controller and Data Processors
Pursuant to Article 13 of EU Regulation 2016/679 (GDPR), we inform you that Junior Enterprise Südtirol, hereinafter referred to as JEAA, VAT number 03279910214, with its registered office at Fr. Tavella 18A, Ortisei (BZ), will process, as the Data Controller, the personal data of the individuals to whom this notice is addressed, hereinafter referred to as “Data Subject,” for the purposes and in the manner outlined below.
The data referred to in paragraph 3 may also be processed by any Data Processors appointed by the Data Controller. This category of individuals will exclusively consist of members of JEAA. The Data Controller can be contacted at the following email address: info@jeaa.it.
3. Data Subject to Processing
The personal data required and subject to this Information Notice are as follows:
- First Name
- Last Name
- Email Address
If the Data Subjects act on behalf of a legal entity, the name of the entity will also be requested.
4. Methods of Processing
In accordance with the principles set out by the GDPR, the Data Controller ensures that the processing will be carried out in a fully transparent, lawful, and fair manner.
The data may be processed using various tools, including digital, electronic, and manual methods, provided they are suitable to ensure security, confidentiality, and prevent unauthorized third parties from accessing, stealing, disseminating, or altering the data. To this end, the Data Controller is committed to adopting appropriate technical, physical, and organizational security measures.
5. Purposes of the Processing
The collection and processing of personal data is intended to allow the Data Controller to contact the Data Subjects for any clarifications regarding the services provided by JEAA or to prepare a quote for the requested service or closely related activities.
These websites may collect data about you, use cookies, integrate additional third-party tracking, and monitor interactions with them, including tracking your interaction with embedded content if you have an account and are logged into those websites.
6. Recipients of Personal Data Communication
The recipients of the communication of the data referred to in paragraph 3 are solely the Data Controller and any appointed Data Processors.
The data may also be provided to public offices and public administration entities for the fulfillment of specific legal obligations.
7.Data Retention Period
The data collected in accordance with the limits specified in this Information Notice will be retained for the duration necessary to fulfill the purposes outlined in paragraph 5 and, in any case, for a period not exceeding 4 (four) months from the date the data is provided and consent is given to the Information Notice.
8. Rights of the Data Subjects
The Data Subject, pursuant to Articles 15 and following of the GDPR, has the right to request from JEAA, at any time, access to personal data concerning them, the limitation of processing, as well as the correction or deletion of such data.
The Data Subject has the right to withdraw their consent at any time, pursuant to Article 7 of the GDPR. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
The Data Subject has the right, pursuant to Article 15 of the GDPR, to obtain confirmation from the Data Controller as to whether or not processing of their personal data is ongoing. If so, the Data Subject has the right to request specific information, such as the purposes of the processing, the categories of data processed, the third parties to whom the data has been or will be disclosed, and the retention period of the data.
The Data Subject has the right to rectify incorrect personal data and to complete incomplete data, pursuant to Article 16 of the GDPR.
The Data Subject has the right to obtain, pursuant to Article 17 of the GDPR, the erasure of personal data processed by the Data Controller. This is possible only when there is a specific objectively appreciable reason, such as the data being unnecessary for the purposes for which it was collected, the unlawfulness of processing, or the need for deletion in order to comply with a legal obligation.
The Data Subject also has the right to request the restriction of processing in cases provided for by Article 18 of the GDPR, such as when the data is inaccurate, when the processing is unlawful, when the data is necessary for legal purposes, or during the pending procedure for objecting to processing.
In the case of a personal data breach, resulting from theft of records, cyberattacks, accidental events, etc., which may pose a high risk to the rights and freedoms of the Data Subject, such as the indiscriminate disclosure of data to third parties, the Data Controller will notify the Data Subject without undue delay, as required by Article 34 of the GDPR.
In any case, the Data Subject has the right to lodge a complaint with the Supervisory Authority for the protection of personal data, pursuant to Article 77 of the GDPR.
Requests by the Data Subject addressed to the Data Controller should be made in writing to the email address provided in paragraph 2 of this Information Notice. The Data Controller will respond to the Data Subject’s requests without delay.
9. Obligation of Processing
The provision of the data in question is considered mandatory in order to fulfill the purposes outlined in paragraph 5. Therefore, the failure to provide such data or to consent to their processing by the Data Subject will prevent the possibility of contacting JEAA. As a result, the registration will not be considered, and any data that may have been submitted to the Data Controller will be deleted without delay.
10. Changes to the Information Notice
The Data Controller reserves the right to modify or simply update the content, in whole or in part, also due to changes in the applicable regulations. In such cases, the Data Subject will be promptly informed of the changes through the contact information collected.