Privacy Notice on the Processing of Personal Data Pursuant to Art. 13 of EU Regulation 2016/679 and Legislative Decree 196/2003, as amended

Dear Customer, Collage S.p.A., in its capacity as Data Controller, represented by its legal representative pro tempore, with registered office in Via Umberto Giordano 55 – 90144 Palermo (PA), tel. 0916867401, e-mail: info@collage-spa.it, PEC: collagespa@pec.it, wishes to inform you that European Regulation 2016/679 (GDPR), together with the Personal Data Protection Code (Legislative Decree 196/2003) as amended by Legislative Decree 101/2018, guarantees that the processing of personal data is carried out in compliance with the fundamental rights and freedoms of the data subject.

In accordance with Articles 13 and 14 of EU Regulation 2016/679, we hereby provide this information to allow you to understand our processing policies regarding data collected upon your registration for our events (via website or dedicated form), enabling you to grant express, aware, informed, and specific consent.

Data Processed The personal data requested and subsequently processed include your identifying data and those necessary for administrative management, such as, by way of example: surname, first name, place and date of birth, tax code and/or VAT number, telephone number, e-mail address, billing address, payment method and/or bank details, as well as any other personal data functional to managing the relationship between the parties. Personal data may include public data or data accessible to anyone, within the limits established by current legislation.

Purposes of Data Processing on the Website The processing of personal data is directed exclusively to achieving the following purposes:

  • Administrative and organizational management of courses and events;

  • Compliance with obligations established by law, regulations, EU legislation, civil and tax law;

  • Sending communications and information regarding study courses.

Please note that, for activities involving virtual platforms, browsing data (clicks, viewed pages, content downloads) will be managed exclusively in anonymous and aggregated form. The provision of data for the aforementioned purposes is optional, but strictly necessary to allow your registration for the event; failure to provide such data will make it impossible to proceed with registration.

Communication, Dissemination, and Transfer of Personal Data Your personal data will not be subject to indiscriminate dissemination. For contractual fulfillment and related services, data may be communicated to:

  • Employees and collaborators of the Data Controller (e.g., secretarial staff, hostesses);

  • Third-party companies or outsourced entities (e.g., IT service and web platform providers, logistics, accounting, and tax consulting firms) duly appointed as Data Processors;

  • Public administrations, supervisory and control Authorities (e.g., Agenas for CME credits), where required by law;

  • Companies, entities, and associations for debt recovery. Any transfers of data outside the European Economic Area (e.g., for the use of specific web platforms or cloud services) will take place exclusively under adequate safeguards (e.g., Standard Contractual Clauses or EU Commission adequacy decisions).

Processing Methods and Data Retention Data will be processed using electronic or automated tools and retained for the period strictly necessary to achieve the purposes indicated above. Specifically, personal and accounting data will be retained for 10 years following the termination of the relationship, in compliance with administrative, tax, and civil law obligations.

Exercise of Rights You may exercise your rights towards Collage S.p.A. at any time (Articles 15–22 of EU Regulation 2016/679), including the right to request access to personal data, rectification, erasure (right to be forgotten), restriction of processing, the right to object to processing, and the right to data portability. These rights may be exercised by writing to: info@collage-spa.it. You also have the right to lodge a complaint with the Data Protection Authority (Garante per la Protezione dei Dati Personali).

Withdrawal of Consent Consent for data processing for purposes not strictly linked to contractual or legal obligations may be revoked at any time, without affecting the lawfulness of processing based on consent given prior to revocation.

Data Protection Officer (DPO) For further clarification regarding this notice or to exercise your rights, you may contact our Data Protection Officer (DPO) by writing to: privacy@collage-spa.it.

Cookie Policy This Application uses Cookies in compliance with the current “Guidelines on cookies and other tracking tools” issued by the Data Protection Authority. Further details regarding the types of cookies used and the methods for managing consent are available in the dedicated extended Cookie Policy accessible on the website.

Additional Information on Processing

  • Defense in legal proceedings: The User’s personal data may be used for defense in court by the Data Controller or in the steps leading to its possible institution. The User declares awareness that the Data Controller may be required to disclose data upon request by public authorities.

  • Specific privacy notices: Upon request by the User, this Application may provide additional and contextual notices concerning specific services.

  • System logs and maintenance: For operation and maintenance purposes, this Application and any third-party services may collect System Logs containing personal data such as IP addresses.

  • Information not contained in this policy: Further information regarding the processing of personal data may be requested at any time from the Data Controller using the provided contact details.

Exercise of Rights by Users Data subjects have the right at any time to obtain confirmation of the existence of their personal data, know their content and origin, verify their accuracy, or request their integration, updating, or rectification. Requests must be directed to the Data Controller. This application does not natively support “Do Not Track” requests. To determine whether any third-party services used support them, Users are invited to consult their respective privacy policies.

Changes to this Privacy Policy The Data Controller reserves the right to make changes to this privacy policy at any time by giving notice to Users on this page. Please consult this page frequently, referring to the date of the last modification indicated at the bottom. If a User does not accept the changes, they may request the removal of their personal data.

Information on this Privacy Policy The Data Controller is responsible for this privacy policy.

Use of Social Networks, Images, and Audiovisual Recordings During events, photographic and/or audio-video recordings may be taken. Subject to your specific, separate, and optional consent (by means of a dedicated release form pursuant to Art. 10 of the Civil Code and Law 633/1941 on Copyright, in compliance with the GDPR), your image may be used, stored, and published free of charge on our Websites, Social Networks, and informational materials. The Data Controller guarantees that images will in no case be reproduced in contexts that compromise personal dignity or decorum. You may withdraw consent for the use of your image at any time within the limits permitted by law.

Legal References This privacy notice is drafted in compliance with the obligations provided by Regulation (EU) 2016/679 (GDPR) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018, as well as current European and national provisions regarding Cookies (Directive 2002/58/EC as amended by Directive 2009/136/EC and related Guidelines issued by the Data Protection Authority).

This privacy policy applies exclusively to the services offered by Collage S.p.A.