Information for the processing of personal data pursuant to articles. 12 and following of EU Regulation 679/2018 (GDPR)
Information on the processing of personal data pursuant to the articles 12 and following of EU Regulation 679/2018 (GDPR)
The University of Modena and Reggio Emilia (hereinafter the "Data Controller" or "Unimore"), and for it the Department of Biomedical, Metabolic and Neurosciences, as Data Controller, pursuant to and for the purposes of provisions of Legislative Decree 30 June 2003, n. 196 (hereinafter, the “Privacy Code”), as well as EU Regulation 679/2016 (hereinafter, the “Privacy Regulation” or “GDPR”), and subsequent amendments and additions, collects and subsequently processes personal data of the participants (of hereinafter, the “Interested Party”) at the MoReMED Student Congress (hereinafter, the “Congress”).
1. Purpose and methods of processing. The personal data of the interested party are processed within the institutional activity of the Data Controller, for the pursuit of the following purposes:
1. registration and related participation of the interested party in the Congress;
2. use - free of charge - of the image and/or voice of the interested party collected during the recording of the Congress which will be held in hybrid mode (in presence and via streaming). In particular, videos, audio and/or photographs of the Event itself will be used for information purposes.
2. Legal basis of the processing. The legal basis of the processing for the purposes referred to in the previous paragraph 1.1 consists in the need to respond to a request from the interested party himself. With reference, however, to the purpose referred to in paragraph 1.2 and the hypothesis of communication of the data referred to in the following paragraph 3, the legal basis of the processing lies in the express consent of the interested party.
3. Subjects or categories of subjects to whom personal data may be communicated and scope of communication. The personal data of the interested party, with the prior consent of the same, will be communicated to the sponsoring bodies of the event, who will process them as independent data controllers, assuming all burdens required by current regulations regarding the protection of personal data.
4. Categories of data processed, nature of the provision of the same and consequences of any refusal. To allow registration for the Congress, data of a common, essentially identifying nature will be collected (name, surname and e-mail address). The provision of the requested data is not mandatory, but any refusal would make it impossible for the interested party to obtain registration for the Congress.
5. Treatment methods. The data will be collected, processed and archived mainly on IT and/or electronic media. Some processing activities that cannot be digitized will be carried out on paper. In any case, the processing will be carried out exclusively by subjects duly authorized by the Data Controller.
6. Period of retention of personal data. The personal data of the interested party will be stored for the institutional purposes of the University and by virtue of specific legal obligations, without any time limit. Limited to the processing legitimated by the consent of the interested party, personal data will be stored without time limit, without prejudice to the exercise of the right to withdraw the consent itself.
7. Rights of the interested party. Under the conditions established by the GDPR, the interested party may exercise the following rights:
art. 15 Right of access of the interested party;
art. 16 Right of rectification;
art. 17 Right to Erasure;
art. 18 Right to limitation of processing;
art. 20 Right to data portability;
art. 21 and art. 22: Right to object and automated decision-making relating to natural persons;
Art. 7: Right to withdraw consent without prejudice to the lawfulness of the processing based on consent before the revocation.
In order to verify the existence of the conditions and methods for the exercise of the aforementioned rights, please refer to the full text of the aforementioned provisions, available on the website:
www.garanteprivacy.it.
If the interested party believes the above rights have been violated, current legislation allows him to lodge a complaint with the national supervisory authority. 8. Identification data of the Data Controller and the Data Protection Officer. The Data Controller, pursuant to the Law, is the University of Modena and Reggio Emilia and for it the Department of Biomedical, Metabolic and Neurosciences, with headquarters in via Giuseppe Campi, 287 – 41125 – Modena. The Data Protection Officer is the lawyer. Vittorio Colomba, available at the email address: dpo@unimore.it.
