RELEASE FOR THE PUBLICATION OF IMAGES

NOTICE

PreGel S.p.A., with registered office in Arceto, Scandiano (RE), in Via 11 Settembre 2001, no. 5/A – in its capacity as Data Controller – would like to inform you, pursuant to art. 13 of GDPR 2016/679, that your data will be processed in the ways and for the purposes set forth below:

  1. Object and Purpose of Processing

The Data Controller will take photographs and/or make video recordings for corporate communication purposes at their stand at the Sigep Exhibition. Therefore, anyone visiting the PreGel stand may be photographed or filmed. Given the particular nature of the event, the Data Controller will provide easily identifiable red ribbons with a tag indicating that the wearer does not wish to be photographed and/or filmed. These will be available at the stand to allow wearers to make it absolutely clear that they do not consent to the processing of their data for the purposes indicated above.

The posing and use of images is understood to be free of charge.

 

  1. Means of processing

Your images will be processed using the operations indicated in art. 4 no. 2 of the GDPR, and specifically: collection, recording, storage, consultation, communication, disclosure by dissemination, use, adaptation, erasure and destruction.

The data will be processed for the length of time required for the pursuit of the purposes indicated above.

Data will in any case be processed fairly, lawfully and in a transparent manner, using instruments and procedures to prevent the risk of loss, unauthorised access or unlawful use or disclosure.

 

  1. Disclosure of data

Within the limits pertinent to the purposes of processing indicated, your data will be published on the company’s website and social media pages.

 

  1. Transfer of data

Your data will be stored at the registered office of the company and on servers located within the European Union.

It is understood that, where necessary, the Data Controller shall be entitled to move said servers and files outside of the EU. In such cases, the Data Controller guarantees forthwith that such transfer outside of the EU shall be conducted in compliance with the legal measures applicable (in accordance with arts. 44 et seq. of the GDPR 679/2016).

  1. Provision of data

The provision of data for the purposes indicated is not mandatory: you may choose not to give your consent for those purposes (by requesting the dedicated tag and wearing it all the time while visiting the Data Controller’s stand), or to withdraw it subsequently, informing the Data Controller of your decision using the contact details provided in art. 7 below. Any processing carried out prior to said withdrawal remains valid and lawful.

 

  1. Rights of the data subject

With regard to the processing of your personal data, you have the right:

-to be informed of the details and location of the Data Controller and of the Data Processor;

-to obtain the following without delay from the Data Controller or Data Processor:

1) confirmation of the existence of personal data regarding you, and the communication of said data and their origin in an intelligible form, as well as the purposes the processing is based on;

2) deletion of personal data regarding you, when: i) the data are no longer necessary for the purposes for which they were collected, ii) consent for their use has been withdrawn and there are no other legal grounds for their processing, iii) the data have been processed in breach of the law, iv) the data subject has opposed the processing of the data and there is no other legitimate reason for processing them, v) the Data Controller is legally obliged to delete the personal data;

3) updating and rectification, or, where in your interest, the completion of your data;

4) a statement that the operations referred to at points 2) and 3), and their content, have been notified to those subjects to whom your data were communicated or disclosed, except for cases in which this proves impossible or requires a use of resources that is manifestly disproportionate with regard to the right protected;

– for reasons related to your particular circumstances, to oppose the processing of personal data regarding you, pursuant to art. 6, para. 1, letters e) or f);

– to deny your consent for the processing of personal data regarding you for direct marketing purposes;

– to file a claim with a supervisory authority;

– to receive the personal data regarding you in a structured, machine-readable format, and to transfer said data to another Data Controller, without any impediment on the part of the Data Controller to whom you originally provided them. In the exercise of their rights with regard to data portability, the data subject has the right to obtain direct transmission of their personal data from one Data Controller to another, if this is technically feasible;

– not to be subjected to a decision based solely on automated data processing, including profiling, which has legal effects that regard you or that may have a significant impact on you.

The Data Controller shall provide a copy of the personal data subject to processing; if the data subject requests further copies, the Data Controller may charge for a contribution to any administrative costs effectively sustained.

  1. How to exercise your rights

You may exercise the rights set forth above at any time, by sending your requests to the Data Controller, by the means indicated below:

– by sending a registered letter with return receipt to PreGel S.p.A., with registered office in Arceto, Scandiano (RE), in Via 11 Settembre 2001, no. 5/A;

– by sending an e-mail to privacy@pregel.it.

  1. Data Processors

An updated list of Data Processors is kept at the registered office of the Data Controller.

  1. Data Protection Officer

The company has appointed the lawyer Emanuela Arduini as DPO (Data Protection Officer). She may be contacted at: emanuela.arduini@studio.le.it.

Scandiano, 20 January 2023