Personal Data Processing Information

This notice, issued pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), is addressed to those who submit an application to participate in the CSC-International Students Film Festival.

DATA SUBJECT TO PROCESSING

Personal data included in the application form, or possibly communicated through supplementary documents submitted by applicants to the CSC-International Students Film Festival.

DATA CONTROLLER

The Data Controller is the Director General of Centro Sperimentale di Cinematografia, Dr.ssa Tiziana Bianchi, acting under delegation from the incumbent President.

Contact: dirgen@fondazionecsc.it — PEC: csc@cert.fondazionecsc.it

DATA PROTECTION OFFICER

The Data Protection Officer (DPO) is Dr.ssa Alessandra Felli.

Email: dpo@fondazionecsc.it — PEC: csc@cert.fondazionecsc.it

LEGAL BASIS FOR PROCESSING

The processing of personal data requested from the data subject is carried out pursuant to Article 6(1)(e) of the GDPR, for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller, as well as pursuant to Articles 9 and 10 of the GDPR, and in connection with the relationship established by the application for participation in the Festival.

PROCESSING METHODS

Personal data will be processed using electronic and digital tools that are suitable to ensure the security and confidentiality of the data, by formally appointed personnel. Data collection and processing are carried out in compliance with the principles of lawfulness, fairness, transparency, relevance, completeness, and non-excess in relation to the purposes for which they are collected and the legal bases for processing referred to above. Processing is conducted using tools capable of recording, storing, and retaining the data in a manner that guarantees security and protects the data subject’s privacy to the fullest extent.

CATEGORIES OF DATA RECIPIENTS AND POSSIBLE DATA TRANSFERS

Data processed for the above purposes will be communicated to, or made accessible to, employees and collaborators of Centro Sperimentale di Cinematografia who are authorised to process it.

Centro Sperimentale di Cinematografia may also disclose personal data to public authorities where they need to process it in connection with proceedings within their institutional remit, as well as to all public entities for which such disclosure is mandatory under EU law, national legislation, or regulation.

Personal data collected by Centro Sperimentale di Cinematografia is managed and stored on servers located within the Centre and/or on external servers of service providers whose involvement is necessary for administrative and technical management purposes. Such providers may have access to personal data solely for the purpose of delivering the requested service, and will be duly appointed as Data Processors pursuant to Article 28 of the GDPR.

The Centro Sperimentale di Cinematografia will not transfer data to countries outside the European Union.

DATA RETENTION PERIOD

Personal data relating to personal records and data contained in rankings or official minutes may be retained indefinitely, including for historical purposes, in accordance with the archiving obligations imposed by applicable law. All other collected data will be retained for the period prescribed by applicable law.

RIGHTS OF THE DATA SUBJECT

As a data subject, you have the right to request the following from Centro Sperimentale di Cinematografia, in its capacity as Data Controller, pursuant to Articles 15, 16, 17, 18, 19 and 21 of the GDPR:

• access to your personal data and to all information referred to in Article 15 of the GDPR;
• rectification of inaccurate personal data and completion of incomplete data;
• erasure of your personal data, except for data contained in records that must be mandatorily retained by the Centro Sperimentale di Cinematografia or where a legitimate and overriding reason for continued processing exists;
• restriction of processing where one of the conditions set out in Article 18 of the GDPR applies.

You also have the right:

• to object to the processing of your personal data, subject to what is required with regard to the necessity and mandatory nature of processing for the purposes of establishing the relationship;
• to withdraw any consent given for the non-mandatory processing of data, without prejudice to the lawfulness of processing carried out on the basis of consent prior to its withdrawal.

HOW TO EXERCISE YOUR RIGHTS

You may exercise all of the above rights by contacting the Data Protection Officer at the contact details provided above.

RIGHT TO LODGE A COMPLAINT

As a data subject, you also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) pursuant to Article 77 of the GDPR.