Privacy Statement

NOTICE ON THE PROCESSING OF PERSONAL DATA

(EU REGULATION 2016/679, hereinafter "Regulation")

 

Dear Customer,

In this document, we inform you of the characteristics of the processing of your personal data (by way of example and not limited to; name, surname, identification document details and copy of the same, telephone, email address) carried out by Pensa MultiMedia s.r.l. (hereinafter referred to as the "Publishing House"). The data of the journals available on the OJS platform of Pensa Multimedia s.r.l. (ojs.pensamultimedia.it) are also processed by the same, here information is provided on:

 

1) Who is the Data Controller?

2) How to contact the Data Protection Officer?

3) On what legal bases and for what purposes does the Publishing House process your data?

4) To whom can the data be communicated?

5) Can the data be transferred to countries outside the European Union?

6) How long is the data stored?

7) What are your rights?

8) Why might the Publishing House process special categories of data?

9) How is profiling for marketing conducted?

 

1) Who is the Data Controller?

The Data Controller of your personal data is Pensa MultiMedia s.r.l., located at Via A.M. Caprioli, 8 - 73100 Lecce – Phone: 0832.230435.

 

2) How to contact the Data Protection Officer?

The Data Protection Officer (hereinafter also referred to as "DPO" or "Data Protection Officer") can be contacted at the following addresses:

  • Postal address of Pensa MultiMedia s.r.l.: Via A.M. Caprioli, 8 - 73100 Lecce;
  • Email address: info@pensamultimedia.it.

 

3) On what legal bases and for what purposes does the Publishing House process your data?

The processing of your personal data is carried out by the Publishing House exclusively in the presence of at least one of the following conditions:

 

  • compliance with legal obligations;
  • execution of the contract you have entered into with the Publishing House and pre-contractual activities;
  • consent for specific purposes;
  • legitimate interest of the Publishing House.

 

Therefore, the processing is carried out in compliance with the conditions of legality provided for by the Regulation and is limited to what is necessary for the performance, by the Publishing House and/or third parties on its behalf, of activities related and instrumental to:

 

  • execute the contract and pre-contractual measures, including the management of judicial and extrajudicial disputes and authorizations to operate on accounts held by other subjects;
  • if you have expressed consent:
    • carry out activities aimed at continuous improvement of the service offered, such as:
      • detection of the degree of satisfaction with the quality of the services provided;
      • marketing activities for products and services;
      • conducting market studies and research;
      • profiling activity to offer you personalized products and services that meet your needs.
    • pursue the legitimate interest of the Publishing House in offering products and services that best meet the needs of customers. For this activity, the Publishing House identifies the recipients of the commercial offer through non-invasive criteria (e.g., age, residence, etc.). The Publishing House previously assesses the impact of this activity on the rights, interests, and freedoms of the recipients. Moreover, the Publishing House allows them not to benefit further from this service through the option to unsubscribe from the list at every contact opportunity.

 

Within the limits of the specific purposes indicated above, the processing of your personal data is carried out through manual, computerized, and telematic tools. The Publishing House adopts organizational and technical measures to ensure the security and confidentiality of your personal data.

 

4) To whom can the data be communicated?

The Publishing House may communicate your data to third parties belonging to the categories listed below:

 

  • for the execution of the contract of which you are a party and pre-contractual activities requested by you;
  • to carry out optional activities consented to by you:
    • marketing and market research companies.

 

5) Can the data be transferred to countries outside the European Union?

The Publishing House does not transfer personal data to third countries; however, it reserves the right to use cloud services and, in this case, the service providers will be selected among those who provide adequate guarantees, as provided for by Regulation 679/2016/EC.

 

6) How long is the data stored?

The Publishing House stores the data in a form that allows the identification of the interested parties for a period necessary to achieve the specific purposes of the processing, in compliance with contractual and/or regulatory obligations.

 

7) What are your rights?

We inform you that you, as a subject affected by the processing, can exercise specific rights on data protection, listed in the following list:

 

  • right of access: the right to obtain from the Controller confirmation of whether or not personal data processing is underway and in this case, to obtain access to personal data and detailed information regarding the origin, purposes, categories of data processed, recipients of communication and/or data transfer, and more;
  • right to rectification: the right to obtain from the Controller the rectification of inaccurate personal data without undue delay, as well as the integration of incomplete personal data, even by providing a supplementary statement;
  • right to erasure ("right to be forgotten"): the right to obtain from the Controller the erasure of personal data without undue delay in the case where:
    • the personal data are no longer necessary in relation to the purposes of the processing;
    • the consent on which the processing is based is revoked and there is no other legal basis for the processing;
  • the personal data have been processed unlawfully;
    • the personal data must be erased to comply with a legal obligation;
  • right to object to processing: the right to object at any time to the processing of personal data that have a legitimate interest of the Controller as a legal basis and/or to the processing for marketing purposes, including profiling. In case of objection to processing for marketing, the personal data are no longer subject to processing for such purposes;
  • right to restriction of processing: the right to obtain from the Controller the restriction of processing, in cases where the accuracy of the personal data is contested (for the period necessary for the Controller to verify the accuracy of such personal data), if the processing is unlawful and/or the data subject has objected to the processing;
  • right to data portability: the right to receive in a structured format, commonly used and readable by automatic device the personal data and to transmit such data to another data controller, only for cases where the processing is based on consent or on the contract and only for data processed through electronic tools;
  • right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, the data subject who believes that the processing concerning him or her violates the Regulation has the right to lodge a complaint with the supervisory authority of the Member State in which he or she resides or habitually works, or of the State in which the alleged violation occurred.

 

We also inform you that you have the right to revoke at any time the consent possibly given for specific optional activities, without prejudice to the lawfulness of the processing carried out before the revocation.

 

To exercise your rights, you can forward your request to the following addresses:

  • Postal address of Pensa MultiMedia s.r.l.: Via A.M. Caprioli, 8 - 73100 Lecce - Tel. 0832.230435;
  • Email addresses: info@pensamultimedia.it

 

The Publishing House provides you with information on the  action taken regarding your request without undue delay and at the latest within one month of receiving it.

 

8) Why might the Publishing House process special categories of data?

The Publishing House does not ask you to provide your special data (by way of example and not limited to; personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, data concerning health or sex life or sexual orientation of the person). However, the Publishing House may incidentally process them to execute your specific requests for services and operations (e.g., application of discounts and facilitations). For this reason, pursuant to art. 9 of the Regulation, the Controller is obliged to request your specific consent to the processing of these data. The Publishing House limits itself to processing this information exclusively to comply with legal obligations and/or to execute the contract.

 

9) How is profiling for marketing conducted?

Profiling, aimed at personalizing the services and/or products we offer you, concerns the personal data you provide us directly and/or indirectly, as well as those available on social networks. This processing takes place to the extent that you have given your optional consent. You have the right to object at any time to profiling for the personalization of the commercial offer. In case of opposition, your personal data will no longer be subject to processing for this purpose.

 

Glossary

 

Data Protection Authority. Independent administrative authority established by law no. 675 of December 31, 1996, responsible for supervising compliance with data protection regulations.

 

Personal Data. According to art. 4, paragraph 1, no.1, it refers to "any information concerning an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person."

 

Special Data. Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data intended to uniquely identify a natural person, data concerning health or sex life or sexual orientation of the person.

 

Profiling. According to art. 4, paragraph 1, no. 4 of the Regulation, it refers to "any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location or movements."

 

Regulation. The EU Regulation 2016/679 of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

 

Data Processor. According to art. 4, paragraph 1, no. 8 of the Regulation, it refers to the "natural or legal person, public authority, agency or other body that processes personal data on behalf of the data controller."

 

Data Protection Officer (DPO). Role introduced by the Regulation, with the main tasks of informing and providing advice to the Data Controller, Data Processors, and Data Subjects regarding data protection; monitoring compliance with the Regulation; providing opinions on the data protection impact assessment; cooperating with the supervisory authority.

 

Data Controller. According to art. 4, paragraph 1, no. 7 of the Regulation, it refers to the "natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data […]"

 

Processing of Personal Data. According to art. 4, paragraph 1, no. 2, it refers to "any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction."