INFORMATION TO DATA SUBJECT FOR ATTENDING
FASHION FILM FESTIVAL MILANO 2023
This information to data subject governs the processing of personal data by using the website available at https://fashionfilmfestivalmilano.com/, performed by Sofiamar S.r.l., with headquarters in Milano, Via Paleocapa 6, email info@fffmilano.com (hereinafter the “Data controller”), complying with the existing legislation on the protection of personal data, for the attendance of the 2023 Edition of Fashion Film Festival Milano.
1. Identity and contacts of the data controller
The Data controller is Sofiamar S.r.l.
As the Data controller is established in the Italian territory, no representative has been appointed.
2. Contact details of the data protection officer of the data protection
The Data controller has not appointed a data protection officer.
3. Modalities for the processing
3.1 Data provided for the data subject’s registration
The data voluntarily and freely provided by the participant through the Submission form will be acquired and processed in order to allow the data subject to rightly and fully attend the 2020 Edition of Fashion Film Festival Milano.
In particular, Data controller will process any personal data provided by the data subject with the Submission form, together with the Data subject’s email address, for the registration to the 2020 Edition of Fashion Film Festival Milano.
3.2 Data provided voluntarily by individuals
The data voluntarily and freely provided by the data subject, by sending unsolicited communications, could be used for the purposes indicated on a case-by-case basis.
In particular, in addition to the address (physical, email, telephone, fax) necessary to reply to the sender, any further data indicated in the same communication shall be processed. The data subject should not insert special categories of personal data (for example, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation) in the communications to be sent to the Data controller.
The data collected will be stored and processed exclusively for the conservation of the correspondence and will in no case be used for further purposes.
For any further information, please consult the Privacy of the website (“Information to data subject”).
4. Purpose of the processing and relative legal basis
4.1 The personal data provided by the data subject for the registration to the 2020 Edition of Fashion Film Festival Milano will be processed exclusively for pre-contractual and contractual purposes, including for the organization and the right and sure running of the cinematographic contest “Fashion Film Festival Milano 2020” according to the Terms and conditions of the Contest (for example: select the participants, contact and invite the winners to the Award Ceremony, communicate the assigned prizes). This data processing will be performed through traditional contact systems and automated communication systems, including email or SMS. In this case, the legal basis for processing of personal data is the data subject’s consent, given in compliance with this information to data subject, also by flagbox.
The personal data provided by the participants will be also processed in order to comply with legal obligations.
4.2 In relation to the data voluntarily provided by email, the processing of the personal data allows to answer to the requests of the data subjects. The legal basis of this processing is the legitimate interest of the Data controller to reply to the data subjects’ requests.
5. Modalities to express the consent
The consent to personal data processing for attending the 2023 Edition of Fashion Film Festival Milano (purposes as indicated at points 3.1 and 4.1 of this information to data subject) could be given through paper, computerized, telematic or automated tools and management software type CRM, as well as by electronic mail systems.
In any case, the Data controller reserves to require from the data subject the relative, free, consent to personal data processing before initiating a specific processing activity requiring the data subject’s consent.
6. Source of the personal data
Data controller processes only personal data provided by the data subject in compliance with this information to data subject and collected by the website, forms in both paper and electronic formats or by the email sent by the data subject. Data deriving from public sources will not be processed.
7. Recipients and categories of recipients of personal data
Recipients of the data subject’s personal data may be:
Communication companies that carry out commercial communication and profiling activities on behalf of the Data controller and are responsible for the processing;
The companies that offer services of an information society, including, in particular, those offering hosting services.
8. Categories of data
The data subject’s personal data will be processed. The personal data belonging to the special categories pursuant to Article 9 of GDPR will not be processed.
9. Transfer of data
The Data controller may intend to transfer personal data to a third country or to an international organisation. Such subjects may be represented, for example, by:
Communication companies that conduct communication activities on behalf of the Data controller;
The companies that offer services of an information society, including, in particular, those offering hosting services;
Suppliers of communication services.
The transfer of personal data to the aforementioned subjects, if based in a third country or international organization, is carried out according to a decision of suitability of the European Commission, which evaluates how the third country, the territory or one or more specific sectors in the third country or the international organization ensure an adequate level of protection of the data subject’s rights.
In order to obtain a copy of such data or the place where they have been made available, a request may be sent to the following email address: info@fffmilano.com.
10. Personal data retention period
The personal data processed and retained for the purposes indicated in this information to data subject are processed and stored as long as the data subject withdraws the previous consent, by sending a request for cancellation.
Where necessary, the Data controller reserves the right to require from the data subject the renewal the consent to the personal data processing and/or the verification of the consents already given.
11. Optional nature of the consent and consequences in case of lack of consent
In relation to the personal data given for attending the 2020 Edition to the contest of Fashion Film Festival Milano (purposes indicated at point 4.1 of this information to data subject) personal data are provided on the basis of contractual or legal obligations. The personal data are voluntarily provided by the data subject; however, if personal data are not provided, data subject can not attend the contest.
In relation to the data voluntarily provided by email, the personal data processing is not based on a contractual obligation, but on a legitimate interest of the Data controller in replying to the data subject; in case of the lack of this processing, it will be impossible to reply to data subject’s requests.
12. Rights of data subject
12.1 Right to object
The data subject has the right to:
object to processing his or her personal data, at any time, on grounds relating to his or her particular situation, according to point (e) or (f) of Article 6(1) of the GDPR, including profiling based on those provisions. The Data controller shall no longer process the personal data unless the Data controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims;
object to processing his or her personal data, at any time, for direct marketing, including profiling to an extent exceeding the direct marketing, if processed for such purposes.
In case of objection against the personal data processing for direct marketing purposes, personal data shall no longer be processed for such purposes.
If personal data are processed for scientific or historical research purposes or statistical purposes, according to Article 89(1) of the GDPR, on grounds relating to his or her particular situation the data subject shall have the right to object to processing of personal data concerning him or her, except that the processing is necessary for reasons of public interest.
12.2 Other rights
The Data controller shall also inform the data subject about the existence of his or her following rights:
Right of access by the data subject: the data subject shall have the right to obtain from the Data controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and other specific information, pursuant to article 15 of the GDPR;
Right to rectification: the data subject shall have the right to obtain from the Data controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement, pursuant to article 16 of the GDPR;
Right to erasure, including the right to withdraw the consent: the data subject shall have the right to obtain from the Data controller the erasure of personal data concerning him or her without undue delay and the Data controller shall have the obligation to erase personal data without undue delay; the data subject shall have also the right to withdraw the consent, where the grounds set out in Article 17 of the GDPR apply; in that case, the right to withdraw the consent can be exercised in any time without prejudice to the lawfulness of the processing performed before the withdrawal and based on the consent already given;
Right to restriction of processing: the data subject shall have the right to obtain from the Data controller restriction of processing where the grounds set out in Article 18 of the GDPR apply;
Right to data portability: the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to the Data controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance from the Data controller to which the personal data have been provided under the conditions set out in Article 20 of the GDPR.
Right to object to commercial communications: the data subject shall have the right to object, at any time, free of charge, to receiving commercial communications.
13. Exercise of the rights
The request to exercise the rights outlined in this information to data subject, including particularly the right to erase and the right to withdraw the given consent, must be addressed directly to the Data controller at the email address info@fffmilano.com. Alternatively, such rights may be exercised by sending a letter to such effect by registered post with acknowledgement of receipt to Sofiamar S.r.l. at the address Via Paleocapa 6, 20121 Milano (MI);
14. Accessibility to information to data subject
The information to data subject is accessible at the following address https://fashionfilmfestivalmilano.com/privacy/ and at the Data controller’s headquarters at Via Paleocapa 6, 20121 Milan (MI).