We hereby inform users, in accordance with articles 13-14 of EU Reg. 2016/679, about the processing of personal data carried out through this website (hereinafter also referred to as “the Site”). This policy does not extend to other websites that may be reached by the user through referral links.
The processing of personal data is carried out in compliance with current legislation on the protection of personal data and it is based on the principles of fairness, lawfulness, transparency and data protection.
The data controller is Fondazione Film Commission Torino Piemonte based in Via Cagliari 42, cap 10153, Torino (TO).
Phone number: 011 237 92 01; fax 011 237 92 98; e-mail info@fctp.it.
The privacy policy is a general obligation that must be fulfilled before initiating the direct collection of personal data, or, at the latest, at the time of its start-up. In the case of personal data is not collected directly from the data subject, the privacy policy must be provided within a reasonable duration, or at the time of the communication of the data to third parties or the data subject. Pursuant to the EU Reg. 2016/679, the undersigned organisation, as data controller, informs as follows:
Sources and categories of personal data
The personal data held by the undersigned organisation are collected directly from the data subjects. This site does not collect special categories of data, which are data that may reveal racial or ethnic origin, religious, philosophical or other beliefs, political opinions, membership of trade unions, associations or organisations of a religious, philosophical, political or trade-unionist character, state of health and sex life.
Cookies
This website saves cookies on the browser used by the user concerned to transmit personal information and to improve the user experience. Indeed, cookies are small text strings that the sites visited by the user send to his/her terminal (usually to the browser), where they are stored, sometimes even with wide temporal persistence, to be then re-transmitted to the same sites on the next visit. Further details, as well as the possibility to change your consent to the use of cookies, are available by consulting the Cookie Policy of our website.
Browsing data
The computer systems and software procedures required to keep the website working, acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This privacy policy is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. This data is used to obtain anonymous statistical information on the use of the site and to check its correct operation; this data is deleted immediately after processing. The data could be used to ascertain liability assuming hypothetical computer crimes against the site. This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests you send to us as a site operator. You can recognise an encrypted connection in the browser address line when it changes from “http://” to “https://” and the padlock icon is displayed in the browser address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
Profiling data
No profiling data is directly acquired concerning the habits or consumer choices of the data subject. However, it is possible that through links or by incorporating third-party elements, such information may be acquired by autonomous or separate parties. For more details see the section on Third-party cookies.
Voluntarily provided data
The optional, explicit and voluntary sending of e-mails to the addresses indicated on the website entails the subsequent acquisition of the sender's address, which is necessary to reply to requests, as well as any other personal data included in the e-mail. The explicit and voluntary sending of the website forms containing the data of the data subject, involves a processing to comply with pre-contractual obligations or to perform the services provided with the sending of the forms. This information in the forms may concern personal data, contact details, telephone numbers, accommodation facility, e-mail addresses of the interested parties and of identified and identifiable third parties specified in the communication. The user assumes liability for the personal data of third parties obtained, published, or shared through this website and he guarantees that he/she has the right to communicate or disseminate them, releasing the owner from any liability towards third parties.
Newsletter, Mailing-list
E-mails sent from the website are sent to recipients who have voluntarily registered and confirmed their consent. This registration process is part of the privacy policy, which is also provided when purchasing products or services from the data controller. This includes the sending policies, promotional communications and material. It is emphasised that contacts are not acquired from public lists of subscribers. Should the communications not be of interest to the recipient, it is possible to avoid any further contact by clicking on the appropriate link contained in each message, or by writing to the contact details at the bottom of the page exercising one's right to unsubscribe from the newsletter.
Membership of services:
- Location guide https://www.fctp.it/users/login-register.php
- Registration Service Facilities https://www.fctp.it/iscrizione-strutture-di-servizio.php
- Production company registration https://www.fctp.it/iscrizione-societa-di-produzione.php
While filling out the application forms for the services listed above with your details, you consent to their use to provide the services requested. Any interest in the collection and/or registration of particular or judicial data is excluded; therefore, users are requested not to provide such information when filling in the registration forms. If the user voluntarily communicates his/her personal data belonging to special categories (e.g. regarding health), in which case the undersigned organisation will provide for the deletion of this data if it does not prejudice its processing.
The personal data, collected in full compliance with the principles of the law on the protection of personal data, will be entered into specific databases allowing for the rapid identification of professionals or companies operating on the Piedmont territory in the field of entertainment, film production and post-production. The provision of personal data is optional, but failure to register such data will make it impossible to provide the consultation and promotion service offered by Film Commission Torino Piemonte. The personal data provided by you will be made public on the website www.fctp.it and can be consulted by anyone with an interest in them. The owner does not intentionally collect or store personal data of individuals under the age of eighteen, nor does it intentionally allow such minors to use the website. Users under the age of eighteen are requested not to register on the website and not to provide personal data.
Purposes and legal bases of processing
Personal data are used:
(a) to allow navigation on the website (ref. article 6 par. 1 letter f) of the GDPR).
b) to perform the service or provision requested as part of the normal activity carried out by this organisation (ref. article 6 par. 1 letter b) of the GDPR).
Furthermore, all personal data may be processed:
(c) for purposes related to obligations laid down by law, as well as by provisions issued by authorities empowered by law (ref. article 6 par. 1 letter c) of the GDPR), by way of non-exhaustive example: - performance of obligations of an administrative and/or accounting and/or fiscal nature, connected to the provision of e-commerce services and/or the purchase contract concluded (e.g.: the keeping of accounting records and the issue of the sales invoice).
d) for the ascertainment, exercise or defence of a right in and out of court (legitimate interest) of the undersigned organisation (ref. article 6 par. 1 letter f) of the GDPR)
e) for functional purposes, according to the legitimate interest of the data controller; for navigation and usage logs to protect the site and the service from cyber-attacks, identify any malicious or fraudulent activity (ref. article 6 par. 1 letter f) of the GDPR)
f) for direct marketing purposes according to the legitimate interest of the Data Controller in particular; for cookies, advertising ids used to show advertisements and announcements; for e-mail addresses to send (newsletter) privacy policy about initiatives, events and communications of a commercial nature, promotion, sale of services and detection of the degree of satisfaction by the Data Controller (ref. article 6 par. 1 letter a) of the GDPR).
Consequences of refusal to provide data
The provision of the data collected from the data subject is optional, but essential for the purpose of processing the data for the purposes under letters a) and b). If the interested parties do not communicate their essential data and do not allow the processing, it will not be possible to proceed with the fulfilment and implementation of the proposed services and to follow up on the contractual obligations undertaken, with consequent prejudice to the correct fulfilment of regulatory obligations, such as accounting, tax and administrative obligations, etc. Apart from what is specified for navigation data, the user is free to provide personal data for cookies and specific requests through forms e.g. on products and/or services. Failure to provide them may result in the impossibility of obtaining what has been requested. For all non-essential data, including those belonging to special categories, provision is optional. Failure to provide consent or the incomplete or incorrect provision of certain data, including those belonging to special categories, may result in the fulfilment of the requested tasks being so incomplete as to cause prejudice or in terms of sanctions or loss of benefits, both due to the impossibility of guaranteeing the congruity of the processing itself with the obligations for which it is carried out, and due to the possible failure of the results of the processing itself to correspond to the obligations imposed by the legal provisions to which it is addressed, the undersigned organisation being understood to be exempt from any and all responsibility for any sanctions or afflictive measures.
Methods of data processing
Processing related to the site's web services is carried out using automated tools for the time strictly necessary to achieve the purposes for which it was collected; it takes place at the server in Italy or the EU and it is handled only by technical personnel in charge of processing, or by those responsible for maintenance and administration operations. Specific security measures are observed to prevent loss of data, unlawful or incorrect use and unauthorised access and loss of confidentiality. Data processing means the collection, recording, organisation, storage, processing, modification, deletion and destruction of data, or the combination of two or more of these operations. In relation to the aforementioned purposes, the processing of personal data is carried out using manual, computerised and telematic tools, with logic strictly related to the purposes themselves and, in any case, in such a way as to guarantee security and confidentiality personal data will therefore be processed in compliance with the methods indicated in Article 5 of EU Reg. 2016/679, which provides, among other things, that the data shall be processed lawfully and fairly, collected and recorded for specified, explicit and legitimate purposes, accurate, and if necessary updated, relevant, complete and not excessive in relation to the purposes of processing, respecting the fundamental rights and freedoms, as well as the dignity of the data subject with particular reference to confidentiality and personal identity, by means of protection and security measures. The undersigned organisation has put in place and will further improve the security system for access and storage of data. No automated decision-making (e.g. profiling) is carried out. Transfers outside the EU The processing will take place in Italy and the EU, but it may also take place in non-EU and non-EEA countries when deemed functional to the efficient performance of the purposes pursued in compliance with the guarantees in favour of the data subjects. Lastly, processing that takes place in non-EU and non-EEA countries when, at the request of the data subject, connections to the site originate from such countries is outside the responsibility of the Data Controller.
Retention period
Personal data will be retained, in general, if the purpose of the processing lasts, depending on the category of data processed. The Controller may be obliged to retain personal data for a longer period in compliance with a legal obligation or by order of an authority.
Categories of recipients
The data (only the indispensable ones) are communicated: - to data processors and persons in charge of processing, both internal to the writer's organisation and external, who carry out specific tasks and operations (site administration, analysis of navigation and traffic data, management of e-mails and forms sent voluntarily by the user, etc.) - in the cases and to the persons envisaged by law. Data shall not be disseminated unless otherwise provided for by law or after anonymisation. Without prejudice to what has been specified for cookies and third-party elements, without the prior general consent of the person concerned to communications to third parties, it will only be possible to carry out services that do not provide for such communications. If necessary, specific and punctual consents will be requested and the subjects receiving the data will use them as autonomous data controllers. In some cases (not object of the ordinary management of this site) the Authority may request news and information, for the purpose of controlling the processing of personal data. In these cases, a reply is compulsory under penalty of administrative sanction.
Rights of the data subject
You may at any time: exercise your rights (access, rectification, cancellation, limitation, portability, objection, no automated decision-making processes) when provided against the data controller, pursuant to articles 15 to 22 of the GDPR (standard); lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it); where the processing is based on consent, withdraw such consent given, bearing in mind that revocation of consent does not affect the lawfulness of the processing based on consent before revocation. Requests should be addressed to the Data Controller by e-mail to: info@fctp.it.
Format of the privacy policy
This privacy policy can be consulted automatically via any web browser. In any case, please report any difficulties you encounter in viewing this privacy policy so that we can, if necessary, provide alternative means. This document will be subject to updates; it is your responsibility to consult the document and its updates.