Privacy policy

Bookings for free events

Pursuant to Article 13 of Regulation (EU) 2016/679 on the processing and protection of personal data (the “GDPR”), we inform you that all data that you have communicated to Società OGR-CRT or that the latter has acquired in the course of its activities, will be manually or electronically processed in accordance with the criteria of lawfulness, correctness, full protection of your rights and, in particular, of confidentiality.

DATA PROCESSING PURPOSES
Your personal data, requested or otherwise acquired by OGR – CRT, will be processed solely for the purpose of dealing with your booking request for an event to be held at our facility, for the institutional purposes specified in OGR - CRT's Articles of Association and in its internal regulation, to comply with laws, rules and regulations in force, and to enable effective administration activities.

LEGAL BASIS
The personal data necessary to deal with your booking request will be processed in accordance with the provisions of Article 6(f) of the GDPR (the Data Controller's pursuit of a legitimate interest).

DATA PROCESSING METHODS
Personal data will be processed using appropriate tools that ensure security and confidentiality and may even be processed by automated means to store, handle and convey them for the purposes set out above.

DATA RETENTION PERIOD
In accordance with the principles of proportionality and necessity, the data will not be kept for longer than strictly required for the purposes stated above. In particular, the storage of the personal data required to admit you to an event to be held at OGR-CRT will cease 48 hours after such event has taken place.

DISCLOSURE OF DATA TO THIRD PARTIES
Your data may be disclosed to external data Processors appointed by OGR-CRT to achieve the above purposes or to public authorities expressly requesting such data in accordance with the law. Personal data collected for the purposes indicated above will not be disseminated.

PROVISION OF DATA
Providing your personal data is optional. However, refusal to provide and/or consent to their processing may prevent OGR-CRT from completing your booking request to attend the event scheduled at OGR-CRT.

RIGHTS OF DATA SUBJECTS
Data Subjects have the right, at any time, to obtain confirmation of the existence of their own personal data and to know their content and source, verify their accuracy,  request their integration, updating, or rectification (art. 7 of the Privacy Code and art. 15 and 16 of the GDPR)

Furthermore, Data Subjects have the right to request the rectification, erasure, restriction of processing and portability of their own personal data; the right to lodge a complaint with the supervisory authority and, for legitimate reasons, the right to object to any processing (Art. 7 of the Privacy Code and Art. 17 et seq. of the GDPR)

Requests must be addressed to: privacy@ogrtorino.it

DATA CONTROLLER
The Data Controller is OGR - CRT, with registered office in Via XX Settembre, 31, Turin, Italy.