Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter “GDPR” or “Regulation”), we inform you that your personal data, freely provided by you in the newsletter subscription form, will be processed by Fondazione GAL Hassin, Centro Internazionale per le Scienze Astronomiche – Via della Fontana Mitri, 90010 Isnello (PA).
Data Controller and Data Protection Officer
The data controller is Fondazione GAL Hassin, Centro Internazionale per le Scienze Astronomiche – Via della Fontana Mitri, 90010 Isnello (PA).
Categories of processed data
The Data collected and processed by the Owner for the purpose of the newsletter are the following:
Identification data (First name, last name);
Contact data (e-mail).
The Data collected and processed by the Data Controller for the purpose of requesting the booking of a school visit are the following:
School contact data (e-mail);
School address data (address, city, postal code, province);
Name of the organizer (first and last name);
Organizer contact information (email, phone);
Number of student participants;
Number of participating students with disabilities;
Number of participating teachers;
Average age of students;
The Data collected and processed by the Owner for the purpose of contact from the site form are as follows:
Identification Data (First Name, Last Name);
Contact data (e-mail, telephone).
Purposes and methods of treatment
In consideration of the activity carried out by the Owner, the collection and treatment of your Data have the following purposes
subscription to our newsletter containing information about events or news concerning the Astronomical Centre, as well as about promotions of our online store and the sale of tickets
requesting the booking of a visit to the Astronomical Center for the purpose of better organization;
Your Data will be processed by authorized personnel in accordance with Article 29 of the GDPR. The processing of the Data for said purposes will take place by computer and telematic means according to logical criteria compatible and functional with the purposes for which the Data were collected, in compliance with the rules of confidentiality and security provided by law and internal company regulations and the security measures referred to in the GDPR.
Legal bases of processing
The legal bases of the indicated treatments are reported below:
for the treatment sub 5) the legal basis consists in the legitimate interest of the Owner to use the email coordinates provided by the data subject in the context of information, promotion and sales (art. 6, par. 1, lett. f), of the GDPR and art. 130 paragraph 4 of D. Lgs.196/03). The Customer, as data subject, may always object to such processing in the manner indicated in the paragraph “Rights of the data subject”.
For the treatment sub 6) and 7) the legal basis is your consent (art. 6, paragraph 1, letter. a) of the Regulation), which will be expressed by the affixing of a flag, please note that the consent you may have given may be revoked at any time by clicking on the appropriate link in any commercial communication / information or by writing directly to the data controller in the manner indicated below. We also remind you that any withdrawal of consent will not affect the legitimacy of the treatment carried out before the revocation itself.
Consequences in case of refusal to provide Data
In the presence of a normative or contractual obligation to confer, the refusal to provide your personal data does not allow the Owner to carry out the operations that presuppose the treatment of the aforementioned data and this with all the consequences and damages at its own expense. If the Data are necessary or strictly instrumental to the execution of the contractual relationship, refusal to provide them may determine the impossibility of carrying out the operations connected to such Data (or, in any case, may determine delays in carrying out such operations).
Any refusal to provide personal data functional to the activities of the Data Controller, other than those necessary or strictly instrumental to the execution of the contractual relationship (for example, personal data that can only be processed on the basis of your consent) prevents the conduct of such further activities but does not interfere with the performance of the contractual relationship in progress.
Categories of recipients of the Data and transfer of Data to third countries
In no case your data will be disclosed outside the management of the site GAL Hassin, International Center for Astronomical Sciences. The personal data you provide will not be disclosed to third parties located in third countries (understood to be outside the EU and EEA); in the event that it becomes necessary to communicate the data to subjects located in third countries, GAL Hassin, International Center for Astronomical Sciences guarantees that such transfer will take place exclusively in compliance with the measures provided for in Chapter V of EU Reg. 2016/679.
Period of Data Retention
Data processed for the possible implementation of newsletter activities will be kept until consent is revoked.
The data processed for the request of a reservation at the Astronomical Center will be kept until the expiration of the legal obligations for the preservation of data concerning the records of access to the facility.
The data processed for the contact from the form on the site will be kept until the conclusion of the communication with the person concerned.
Rights of the interested party
We remind you that pursuant to Articles 15 to 21 of Regulation (EU) 2016/679, you have the right to request from the data controller access to personal data, rectification or erasure of personal data or restriction of processing concerning you or to object to their processing, as well as the right to data portability and revocation of consent given for the purposes of processing where it has been given. For the exercise of rights, the owner can be contacted by email at firstname.lastname@example.org or by writing a registered letter A/R to GAL Hassin, International Center for Astronomical Sciences – Via della Fontana Mitri, 90010 Isnello (PA).
If you believe that the processing of personal data is in violation of the provisions of the Regulation, you have the right to complain to the Guarantor Authority, as provided for in art. 77 of the Regulation itself, or to take appropriate legal action (art. 79 of the Regulation).