INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Articles 13 of Regulation (EU) 2016/679 (the so-called GDPR)
Contact form “let’s stay in touch”
Pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter “Regulation” or “GDPR”), IRCCS Istituto Giannina Gaslini (hereinafter also “Institute”), with registered office in Via Gerolamo Gaslini, 5 – 16100 – Genoa, P.Iva 00577500101, (PEC: protocollo@gaslini.org, URP: relpublico@gaslini.org) as Data Controller provides information regarding the methods of processing of personal data of users who fill in the contact form “let’s stay in touch” on the website www.cantierenuovogaslini.org
DATA PROTECTION OFFICER
The Data Protection Officer (DPO or DPO) can be reached at the following address: IRCCS Istituto Giannina Gaslini, Via Gerolamo Gaslini n. 5 – 16100 Genova; email: dpo@gaslini.org
CATEGORIES OF PERSONAL DATA PROCESSED
The Institute will process through the above contact form the following personal data of users, including:
- First name
- Last name
- Additional information entered freely by the data subject in the contact form.
The information provided within the form should be only that which is strictly necessary to forward requests and/or reports and to enable the Institute to follow them up. It turns out, however, that within the messages, forwarded through the form, there may also be additional information entered freely by the interested parties.
PURPOSE OF PROCESSING, LEGAL BASIS, METHODS AND PERIOD OF STORAGE
Personal data are processed by the Owner within the limits of what is strictly necessary to follow up on the requests for information and/or reports made by filling out the form above.
The Institute will therefore process personal data exclusively to provide the requested service, through the use of electronic means.
Once the requests and/or reports made by the interested parties have been acknowledged and any services requested have been rendered, the data will be deleted, subject to possible litigation or fulfillment of legal obligations. Personal data will not be subject to any automated decision-making, including profiling.
DATA RECIPIENTS AND TRANSFER OUTSIDE THE EU
Personal data collected through the above form are processed by specially authorized and trained staff of the Institute, who act on the basis of specific instructions given regarding the purposes and methods of such processing.
To the extent relevant to the processing purposes indicated above, the data of data subjects will not be transferred outside the European Union but may also be disclosed to third parties such as, as appropriate:
- Data Processors in accordance with Article 28 of the Regulations such as, but not limited to, companies in charge of carrying out the management and maintenance of the site or external parties necessary to follow up on your requests and/or reports.
- Autonomous data controllers, for example, public authorities to whom your data are communicated in fulfillment of specific legal obligations.
RIGHTS OF THE INTERESTED PARTIES
The interested party has the right to obtain from the Institute, in the cases provided for, access to personal data, rectification, revocation, cancellation of the same, limitation or opposition to the processing concerning them (Articles 15 et seq. of the Regulations).
The appropriate petition can be submitted to the Data Controller at the contact details above or through the Data Protection Officer (so-called DPO or DPO) who can always be contacted at the email address dpo@gaslini.org
RIGHT TO COMPLAIN
A data subject who believes that the processing of personal data, carried out by means of the above form, takes place in violation of the provisions of the Regulations, also has the right to lodge a complaint with the Data Protection Authority, as provided for in Article 77 of the Regulations themselves, or to take the matter to the appropriate courts (Article 79 of the Regulations).