PRIVACY INFORMATION PURSUANT TO ART. 13 OF THE 2016/679 EU REGULATION

This information is provided, in compliance with the provisions of art. 13 of EU Regulation 2016/679, concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data, to those interested in receiving news, information, invitations, publications, institutional communications and related newsletters site activities

© 2021 Biba Art Studio - Photographic art

​

​

​

Definitions
By "personal data" (pursuant to art. 4 number 1 of EU Regulation 2016/679) we mean any information concerning an identified or identifiable natural person ("interested party"); the natural person is considered identifiable who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social.

By "particular categories of data" (pursuant to art. 9 number 1 of EU Regulation 2016/679) we mean those personal data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership , as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person.

By "processing" (pursuant to art. 4 number 2 of EU Regulation 2016/679) we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, deletion or destruction.

Identity of the Data Controller
Pursuant to art. 24 EU Regulation 2016/679, Biba Art Studio - Photographic art , based in Rome (RM), Via Cassia n ° 569, is the Data Controller in the person of the legal representative hereinafter Biba Art Studio

Contact
Biba Art Studio email:  biba@bibaartstudio.com

Data subject to processing
Biba Art Studio , as part of its business, processes the personal data provided by the interested parties - such as identification data - necessary and useful for achieving the purposes indicated below.

Purpose of the processing and profiling activities
The purposes of the processing for which personal data is collected concern:

a) carrying out artistic activities 
b) the communication of information on the activities of the site
c) the promotion relating to the activity, such as the transmission of news, information, invitations, publications, institutional communications and newsletters by sending e-mails;
d) carrying out monitoring, analysis and research activities
e) registration on the site
f) information and training activities

It should be noted that the purposes of the processing for which the personal data provided by the interested party are collected also include profiling activities; Biba Art Studio in fact asks interested parties for information regarding the municipality and the province of origin for the sole purpose of advertising and informing the same about events, activities and projects that involve the place where it resides. 
Furthermore, the interested party is requested to specify the areas of interest so that he or she receives communications as relevant as possible to the preferences of the subject.

The interested party has a legitimate interest in being able to change the preferences expressed at any time if he deems it appropriate.

Legal basis of the processing
The legal basis of the treatments, as regards the purposes indicated below, can be found in the consent given by the interested party.

Rights of the interested party
The interested party, in relation to the personal data provided, has the right to exercise the rights provided for by the EU Regulation listed below:

right of access of the interested party [art. 15 of the EU Regulation];
right of rectification [art. 16 of the EU Regulation];
right to cancellation ("right to be forgotten") [art. 17 of the EU Regulation];
right to limitation of treatment [art. 18 of the EU Regulation];
right to data portability [art. 20 of the EU Regulation];
right to object [art. 21 of the EU Regulation].
The interested party also has the right to revoke any consent given at any time. The aforementioned rights can be exercised in writing by sending an email to biba@bibaartstudio.com

Biba Art Studio , in compliance with art. 19 of the EU Regulation, undertakes to report to the recipients to whom the personal data of the interested party have been communicated, any corrections, cancellations or limitations of the processing requested by the interested party, where this is possible. 
The interested party also has the right to lodge a complaint with the Guarantor Authority for the protection of personal data. Further information on the rights and how to exercise them are provided on the Biba Art Studio website.

Duration of treatment
The acquired health data will be processed by  Biba Art Studio up to 60 months from the acquisition of consent and in any case within the terms of the law

Nature of the provision of data
The consent to the processing of personal data for the aforementioned purpose is free but necessary to allow Biba Art Studio to proceed with its institutional purposes. 
Any refusal will make it impossible for Biba Art Studio to follow up on the aforementioned purposes.

Communication of data outside Biba Art Studio
The personal data acquired by Biba Art Studio may be communicated and / or disseminated externally for various reasons; in particular, the data may be made available to subjects who carry out IT system management activities, competent authorities and / or public bodies and supervisory and control bodies for the possible fulfillment of legal obligations, agencies and communication companies, others subjects who in any capacity collaborate - for the achievement of institutional purposes - with Biba Art Studio . 
These subjects, when appropriate, will be formally appointed as external data processors pursuant to art. 28 of EU Regulation 2016/679. 
The detailed list of recipients to whom the personal data are disclosed is available upon request by the interested party.

Processing methods
Personal data will be processed in paper, computerized and telematic form and entered in the relevant databases which employees of  Biba Art Studio , collaborators, interns and professionals.
These subjects will be able to carry out consultation, use, processing, comparison and any other appropriate operation, even automated, in compliance with the provisions of the law necessary to guarantee, among other things, the confidentiality and security of the data as well as the accuracy, updating. and the relevance of the data with respect to the declared purposes.

Transfer of data to non-EU third countries
Personal data may be transferred to non-EU countries for the sole purpose of managing the business of  Biba Art Studio , also through the use of social channels. 
In particular, the owner reserves the right to transmit the data to third parties also located in non-EU countries that guarantee an adequate level of protection on personal data and that adhere to agreements with the European Commission.
For medically assisted procreation activities that require the involvement of structures present in non-EU countries, the personal and health data of the interested party who has previously provided authorization for consent are transferred; the risk of this transfer is due to the non-application of this legislation in the non-EU country concerned and the absence of:
a) a legally binding and enforceable instrument between public authorities or public bodies;
b) the binding corporate rules in accordance with article 47 of the code;
(c) the standard data protection clauses adopted by the Commission in accordance with the examination procedure referred to in Article 93 (2);
(d) standard data protection clauses adopted by a supervisory authority and approved by the Commission in accordance with the examination procedure referred to in Article 93 (2);
e) a code of conduct approved in accordance with Article 40, together with the binding and enforceable commitment on the part of the data controller or processor in the third country to apply adequate safeguards, including as regards the rights of the data subjects; 
f) a certification mechanism approved in accordance with Article 42, together with the binding and enforceable commitment on the part of the data controller or data processor in the third country to apply the appropriate guarantees, also as far as
it concerns the rights of the data subjects. Consent is also provided In the absence of an adequacy decision pursuant to Article 45 (3) or adequate safeguards pursuant to Article 46, including binding corporate rules, for the following:
a) explicit consent to the proposed transfer, after having been informed of the possible risks of such transfers for the data subject, due to the lack of an adequacy decision and adequate guarantees;
b) the transfer is necessary for the execution of a contract concluded between the interested party and the data controller or for the execution of pre-contractual measures adopted at the request of the interested party;
c) the transfer is necessary for the conclusion or execution of a contract stipulated between the data controller and another natural or legal person in favor of the data subject;

Changes and Updates
Biba Art Studio could also make changes and / or additions to this information also as a consequence of any subsequent amendments and / or regulatory additions.

Right of access by the interested party
The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients of third countries or international organizations;
d) when possible, the retention period of the personal data envisaged or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
g) if the data are not collected from the data subject, all available information on their origin;
h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party
i) transfer of data to a third country or to an international organization pursuant to Article 46 
l) provide a copy of the personal data being processed and in case of further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. 
m) provide the information in the manner requested by the interested party and, if electronically, are provided in a commonly used electronic format.

Right of rectification
The interested party has the right to obtain the correction of inaccurate personal data concerning him without undue delay. 

Right to erasure ("right to be forgotten")
The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay, if one of the following reasons exists:
a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing ;
c) the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2;
d) the personal data have been unlawfully processed;
e) the personal data must be deleted to fulfill a legal obligation under the law of the Union or of the Member State to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1.

The right to rectification and cancellation does not apply for: 
a) to exercise the right to freedom of expression and information;
b) for the fulfillment of a legal obligation that requires the processing provided for by the law of the Union or of the Member State to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority of which the data controller is invested;
c) for reasons of public interest in the field of public health in accordance with Article 9 (2) (h) and (i) and Article 9 (3);
d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89 (1), insofar as the right referred to in paragraph 1 is likely to render impossible or seriously prejudice the achievement of the objectives of this treatment; or
e) for the assessment, exercise or defense of a right in court.


Right to limitation of treatment
The interested party has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
c) although the data controller no longer needs them for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party opposed the processing pursuant to article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.


CONSENT REQUEST PURSUANT TO ART. 7 OF THE 2016/679 EU REGULATION

By reading the information and clicking I AGREE in the appropriate box or by signing the consent

The undersigned declares receipt of the information and gives consent  

​