Kind Sir/Madam,
Pursuant to Article 13 of the Legislative Decree of 30 June 2003, no. 196 (“personal data protection code”, hereinafter also “code”) and Article 13 of the EU Regulation of 27 April 2016, no. 2016/679 (“on the protection of natural persons with regard to the processing of personal data”, hereinafter also “regulation”), as data controller, the Venetian District for Research and Innovation, (hereinafter “Controller” or “VDRI”) domiciled in Venice, Ca’ Dolfin, Dorsoduro 3825/D, informs that your data will be processed according to the following rules and for the following purposes.
Personal data (hereinafter also “data”), provided for the purpose of obtaining the VDRI community card or “SMart Passport” (specifically name, surname, date of birth, tax code, identity card number, photo) shall be processed for the issue of the card and for the supply of related services, discounts and concessions (access to facilities, computer resources and libraries, discounts and concessions, activities, events). Data will also be processed for the purpose of emailing the VDRI newsletter.
Personal data is currently processed by data processors working on behalf of the Venetian District for Research and Innovation, (hereinafter “Controller” or “VDRI”) domiciled in Venice, Ca’ Dolfin, Dorsoduro 3825/D, tax code 94085160276 e P.IVA. 04303370276 (e-mail dvr@unive.it, tel. 0412346961, pec postmaster@pec.distrettovenezianoricerca.it, website distrettovenezianoricerca.it), and stored in a DRIVE folder associated with the Ca’ Foscari University of Venice domain named “unive.it”. In the future, under specific agreements, data will be processed by Ca’ Foscari University of Venice, the institutional body owning the university database that is also accessed by the other public and private subjects involved in supplying the services, concessions and discounts to which holders of the SMart Passport community card are entitled, and in sending newsletters.
Under the aforementioned law, your data will be processed fairly, lawfully, and in a transparent manner, ensuring confidentiality and the protection of your rights. Personal data shall only be processed for the purposes listed above and in a manner compatible with those purposes, without prejudice to the foregoing, and in such a way as to guarantee the security and confidentiality of said data.
The consent given with regard to the provision of personal data for the purposes under point 1 is necessary for the issue of the SMart Passport community card and supply of related services, discounts and concessions, as well as for the sending of the VDRI newsletter. Refusal to provide personal data makes it impossible to issue the card, related services or to send the VDRI newsletter.
DVRI may need to disclose a user’s personal data for the purposes outlined in point 1) above. The following could be potential recipients of said data: Ca’ Foscari University of Venice, external partners and all public and private subjects involved in the issue of the community card, supply of related services and sending of the newsletter.
Personal data collected shall not be disseminated.
The rights of data subjects with regard to the data controller are described in Article 7 of the Code and in Article 15 and following articles of the Regulation. Data subjects have the right to:
i. receive confirmation of the existence or otherwise of personal data regarding them, even if said data has not yet been recorded, and to have such data communicated to them in an intelligible form.
ii. be informed about: a) the origin of the personal data; b) the purposes and methods used in processing; c) the system used to process data by means of electronic instruments; d) the identity of the data controller or, if the data controller has nominated a processor or a representative, the identity of that processor or representative; e) the third parties to whom their personal data may be
disclosed or who may have access to personal data by virtue of their capacity as designated representative in Italy, as persons responsible or otherwise nominated.
iii. require data controllers to: a) update, rectify, or, should data subjects wish, integrate personal
data; b) erase, delete, render anonymous or block data processed in breach of the law, including data that does not require storing for the purposes
or which it was originally obtained or subsequently processed; c) issue a statement confirming that the operations described in letters a) and b above have been brought to the attention of those to whom such data has been notified or disclosed, save in cases where such measures are impossible or involve manifestly disproportionate effort with regard to the right that would be safeguarded.
iv. object: a) on legitimate grounds, to the processing of personal data regarding them, either in part or in whole, even
if relevant to the purpose for which the data was collected; b) to the processing of personal data regarding them for the purposes of sending advertising or direct sales material or of carrying out market research or for commercial communications.
These rights can be exercised by sending a letter via registered mail, addressed to Venice, Ca’ Dolfin, Dorsoduro 3825/D, or by e-mail, addressed to dvr@unive.it.
Sensitive data shall be kept for no longer than is necessary to achieve the purposes described in point 1).