The Controller of the Processing is Fondazione Arena di Verona, with registered offices in Via Roma 7/D - 37121 Verona – e-mail: protocollo@arenadiverona.it (hereafter for brevity indicated as “Fondazione”).

The Data Protection Officer (DPO) appointed by Fondazione can be contacted at rpd@arenadiverona.it

The following personal data are collected and processed: common personal data (name, surname and e-mail) regarding addressees, for marketing purposes including sending via e-mail institutional communications, advertising material, material promoting the events and activities organized by Fondazione or in which Fondazione participates. Also non-personal data  may be processed through compilation of a survey, following the participation to the performances for statistical purposes and analysis of approval ratings.

The legal basis of the processing: compliance with the request of the data subject to receive the service/consent of the data subject.

Fondazione can communicate processed data for the abovementioned purposes: to in-house staff responsible for the management of the newsletter and commercial and promotional communications; to external communication companies / companies providing the newsletter mail-out service.

The processed data could be transferred by the Controller to third countries for the above-mentioned purposes. Nevertheless, in the event of the transfer of data to third countries, this will be done respecting the current provisions at the time on matters of transfer of personal data to Third Countries according to Art. 44 et seq. GDPR 2016/679.

The data will be processed in digital format until the eventual withdrawal or cancellation by the data subject and in any case for a maximum period of 24 months. At the end of the aforesaid period, the Controller will request further appropriate consent or proceed with the elimination of the contact.

Should the legal prerequisites exist, the data subject has the right at any time to request access to his/her personal data, their rectification, cancellation or restriction, or to block processing and to exercise the right to data portability.

In any case, the data subject has the right to withdraw at any time any consent given for data processing, without prejudicing the legality of the processing based on the consent granted prior to the withdrawal.

In the event of a presumed violation, the data subject, in the event of the prerequisites existing, also has the right to submit a complaint to a data processing control authority in the EU member country in which he/she habitually resides, in the EU country in which he/she works or in which the presumed violation occurred.

Data release is optional. Failure to release data makes it impossible to accomplish the aforementioned aims.

Processing is not carried out using automated decision-making procedure.

To receive further information on the processing of personal data, opposing processing or exercising the rights foreseen by the current law on matters of personal data protection (access, amendment, deletions, limitation, opposition, portability) and/or receive the complete list of the internal and external subjects responsible for the processing and/or receive information regarding the transfer of data to Non-EU countries and relative guarantees, including data transfer procedure and protection as per Art. 44 et seq. GDPR requests can be sent via e-mail to protocollo@arenadiverona.it.