Privacy
Articles 13-14 of EU Regulation 2016/679
Disclosure is a general obligation that must be fulfilled before, or at the latest, upon initiation of the direct collection of personal data. For personal data not collected directly from the data subject, disclosure must be provided within a reasonable timeframe or upon disclosure (not recording) of the data (to third parties or the data subject). Pursuant to the General Data Protection Regulation (GDPR – Reg. (EU) 2016/679), the undersigned organization, as data controller, hereby informs you of the following:
Sources and categories of personal data
The personal data held by this organization is collected directly from the data subjects. This site does not collect sensitive data, which means data revealing racial or ethnic origin, religious, philosophical, or other beliefs, political opinions, membership in trade unions, associations, or organizations of a religious, philosophical, political, or trade union nature, health, or sex life.
Browsing data
The computer systems and software procedures used to operate the website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user's operating system and IT environment. This data is used solely to obtain anonymous statistical information on site usage and to verify its proper functioning, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site.
Profiling data
No profiling data regarding the user's habits or consumer choices is directly collected. It is possible that such information may be collected by independent or separate entities through links or the incorporation of third-party elements. Please see the Third-Party Cookies section for more information.
Cookies
Like other websites, this website saves cookies on the user's browser to transmit personal information and enhance the user experience. Cookies are small text files that websites visited by the user send to their terminal (usually the browser), where they are stored, sometimes for a long time, before being retransmitted to the same websites on the next visit.
As explained below, you can choose whether and which cookies to accept, keeping in mind that refusing their use may impact your ability to complete certain transactions on the site, the accuracy and appropriateness of certain customizable content offered, or the ability to recognize you from one visit to the next. If you do not make any choices, the default settings will apply and all cookies will be activated. However, you can communicate or change your preferences at any time.
Technical cookies
Specifically, we use so-called session cookies, which are not stored permanently on the user's computer and disappear when the browser is closed. Their use is strictly limited to transmitting session identifiers (consisting of random numbers generated by the server), which are necessary to enable safe and efficient browsing of the site. These cookies avoid the use of other IT techniques that could potentially compromise the privacy of users' browsing and do not allow the acquisition of personal data that could identify the user. To manage the display of the cookie usage notice, we use a technical cookie called cb-enable, which does not store any personal information about the user and is used to decide whether or not to display the notice bar (if the notice has already been displayed in the last three months, it is not shown again). Analytics cookies are also used to understand how visitors interact with the site's content, collecting information (geographical and web origin, technology used, language, entry and exit pages, pages visited, times spent on the site, etc.) and generating website usage statistics without personally identifying individual visitors. All of these are considered technical cookies, and since consent is not required, an opt-out mechanism applies. Technical cookies are not shared with third parties because they are necessary or useful for the site's operation; therefore, they are processed only by qualified persons such as data processors, data controllers, or system administrators.
Third-party cookies
Finally, the site incorporates cookies and other elements (tags, pixels, etc.) from third parties (independent and for which the Data Controller has no responsibility) who also perform profiling activities and for which reference is made to the respective sites:
Google Analytics
YouTube (widget)
Vimeo (widget)
Data provided voluntarily by the user
The optional, explicit, and voluntary sending of emails to the addresses indicated on the website entails the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other personal data included in the email. The explicit and voluntary sending of fillable forms on the website containing the data subject's data also entails processing to fulfill pre-contractual obligations or to perform the services provided for by the forms. Such information in the forms may include personal details, contact information, addresses, telephone numbers, and email addresses of the data subjects and of identified and identifiable third parties related to the website user. However, specific summary information will be progressively reported or displayed on the website pages dedicated to particular services upon request.
Registration form
You can apply for inclusion in a database by submitting your details and an updated CV, including authorization for the processing of personal data.
Purposes and legal bases of the processing
Personal data are used (ref. art. 6(b) of the GDPR):
a) to allow navigation on the site and
b) possibly to perform the service or performance requested as part of the undersigned organization's normal activities (film and television productions, international promotion and marketing). Furthermore, all personal data may be processed:
c) for purposes related to obligations established by law, as well as by provisions issued by authorities legitimated by law to do so (ref. articles 6(c) and 9(b,g,h) of the GDPR);
d) for the establishment, exercise or defence of legal claims in and out of court (legitimate interest) of the undersigned organisation (ref. Articles 6(f) and 9(f) of the GDPR);
e) for direct marketing purposes based on the Data Controller's legitimate interest, in particular; for cookies and advertising IDs used to display advertisements and announcements; for email addresses used to send the newsletter; for navigation and usage logs used to protect the site and the service from cyberattacks; in these cases, the data subject may always withdraw consent, so that the Data Controller will refrain from processing (ref. Article 6(f) of the GDPR);
f) for purposes related to the activity for which the interested party has the right to express or withhold consent, such as sending a CV and communicating data to third parties (GDPR art. 6(a))
Consequences of refusing to provide data
Providing the data collected from the interested party is optional but essential for processing for the purposes referred to in points (a) and (b). If the interested party fails to provide their essential data and refuses to consent to processing, it will not be possible to provide and implement the services offered and fulfill the contractual obligations undertaken. This could jeopardize the proper fulfillment of regulatory obligations, such as accounting, tax, and administrative requirements, etc.
Aside from what is specified for navigation data, the user is free to provide personal data for cookies and specific requests via forms, such as those regarding products and/or services. Failure to provide such data may make it impossible to obtain what is requested. For all non-essential data, including sensitive data, provision is optional. Failure to provide consent or incomplete or incorrect provision of certain data, including sensitive data, may result in the incomplete completion of the requested services, resulting in potential harm or penalties or loss of benefits. This may be due to the impossibility of ensuring the appropriateness of the processing itself for the obligations for which it is performed, or the potential failure of the processing results to comply with the obligations imposed by the applicable laws. This organization is therefore exempt from any and all liability for any penalties or punitive measures.
Data processing methods
Data related to the website's web services is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Data is processed on servers in Italy or the EU and is handled only by technical personnel in charge of processing, or by any persons in charge of maintenance and administration. Specific security measures are implemented to prevent data loss, illicit or improper use, unauthorized access, and loss of confidentiality. The facility is equipped with intrusion prevention devices, firewalls, logs, and disaster recovery systems. Specific data encryption and segregation mechanisms, as well as user authentication and authorization, are used.
Data processing means the collection, recording, organization, storage, processing, modification, deletion, and destruction of data, or the combination of two or more of these operations. In relation to the aforementioned purposes, personal data is processed using manual, computerized, and electronic means, with methods strictly related to those purposes and, in any case, in a manner that guarantees the security and confidentiality of personal data. Personal data will therefore be processed in compliance with the methods indicated in Article 5 of EU Regulation 2016/679, which requires, among other things, that data be processed lawfully and fairly, collected and recorded for specific, explicit, and legitimate purposes, accurate, and, if necessary, updated, relevant, complete, and not excessive in relation to the purposes of the processing, in compliance with fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality and personal identity, through protection and security measures. This organization has established and will further improve the security system for data access and storage.
No automated decision-making process (e.g. profiling) is carried out.
Transfers outside the EU
The processing does not take place in non-EU and non-EEA countries.
Retention period
Personal data will generally be retained for as long as the purposes of the processing continue, depending on the category of data processed.
The data (only the essential ones) are communicated:
to data processors and data controllers, both internal to the undersigned organization and external, who perform specific tasks and operations (site administration, analysis of browsing data, traffic, and profiling, management of emails and forms voluntarily sent by the user, processing of e-commerce requests and orders, etc.)
in the cases and to the subjects provided for by law.
Recipient categories
The data will not be disclosed unless otherwise provided by law or after anonymization. Except as specified for cookies and third-party elements, without the data subject's prior general consent to disclosure to third parties, only services that do not require such disclosure will be provided. Where necessary, specific and specific consents will be requested, and the parties receiving the data will use them as independent data controllers.
In some cases (not covered by the ordinary management of this site), the Authority may request information for the purposes of monitoring the processing of personal data. In these cases, a response is mandatory under penalty of administrative sanctions.
Rights of the interested party
At any time, you may: exercise your rights (access, rectification, erasure, restriction, portability, objection, and the right to opt-out of automated decision-making) against the data controller, pursuant to Articles 15 to 22 of the GDPR (link to the regulation); lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it); and, if the processing is based on consent, withdraw the consent given, given that the withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Disabling cookies
Almost all browsers offer the ability to manage or disable cookies, in order to respect user preferences. Some browsers allow you to set rules to manage cookies on a site-by-site basis, which offers more precise control over user privacy. Another feature available on some browsers is incognito mode, which deletes all cookies created in this mode when you close the browser.
Please see the following instructions for managing cookies in your browser:
Chrome
Firefox
Internet Explorer
Safari
Contact details and contact information
The data controller is the Veneto Film Commission Foundation, represented by its legal representative.
The headquarters are in Via Carducci 32 – 30171 Venice.
Email info@venetofilmcommission.com