Church Communications and Organizational Vulnerability
Rome, April & May 2021
Who is the controller?
With respect to the purpose, described above, the controller of the processing of your data is the “Pontificia Università della Santa Croce” with C.F. 97071510586, and postal address at Piazza di Sant’Apollinare, 49, 00186, Roma (Italy) and e-mail address santacroce (at) pusc.it.
The Pontificia Università della Santa Croce has a Data Protection Officer (Luigi Dieli), whose contact details are: privacy (at) pusc.it.
What is the purpose of the processing?
Your personal data will be processed for the following purpose: to manage your participation in the “Webinar Series: Inspiring Trust", which involves processing some of your registration data (name, family name, email address, company and position) in order to send you information about the conference through a newsletter (from February through June 2021). In this case, the communication of your personal data is a necessary requirement to participate in the Conference, so if you do not provide your data for this purpose, we will not be able to manage your participation.
Under no circumstances will automated individual decision-making techniques be used, nor will profiles be created based on the information provided by the data subject.
What is the lawfulness of the processing of your personal data?
The legal basis for the processing of your personal data lies on the express consent given by you to the processing of your personal data [articles 6.1.a) GDPR.
Who will be the recipient of your personal data?
Your personal data will only be transferred to the controller for the fulfilment of the above purpose, unless they also have to be transferred to third parties for the fulfilment of a legal obligation.
How long do we keep your personal data?
The personal data obtained will be kept until they are no longer necessary for the purpose indicated, until you withdraw the corresponding consent or until the end of the period required for compliance with a legal obligation that requires their subsequent conservation.
What are your rights?
Access You may request confirmation as to whether or not we are processing personal data concerning you and, if so, you will have the right to access your personal data that is being processed
Rectification You can change your personal data when they are inaccurate or incomplete
Erasure You may request the erasure of your personal data when, among other reasons, and provided that there are no exceptions to the exercise of this right:
-They are no longer necessary for the purposes for which they were collected
-Withdraw your consent (where this is the legal basis for the processing)
-Objects to the treatment and no other legitimate grounds for such treatment prevail
-Your personal data have been processed unlawfully
Restriction of processing You may request a restriction of processing of your personal data:
-While the accuracy of your data is being checked;
-Where the processing is unlawful, but you object to the deletion of your personal data;
-When it is no longer necessary to process your personal data, but you need them for the exercise or defense of claims;
-Where you have objected to the processing of your personal data for the performance of a task carried out in the public interest or for the satisfaction of a legitimate interest, while verifying whether the legitimate grounds for the processing prevail over your own.
Data portability: You may receive, in electronic format, the personal data that you have provided to us, as well as transmit them to another entity
Object: You may object to the processing of your personal data, unless there are compelling legitimate grounds for doing so which prevail over your interests, rights and freedoms, or for the formulation, exercise or defense of any claim.
As a data subject, you may exercise these rights by writing to the above-mentioned Data Protection Officer, either via your postal address or by e-mail, enclosing proof of your identity. You will also have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to its withdrawal, and to file a complaint with the supervisory commission if, on our part, your request is not acted upon within a maximum period of one (1) month from its submission.