Information concerning candidacy for the “Mario Merz Prize” and the processing of personal data (pursuant to Legis, Dec. no. 196/2003, art. 13 of EU Regulation 679/2016 and Legis. Dec. no. 101/2018)
Foreword
With the present text, the Fondazione Mario Merz, tax no. 97590980013 and VAT No. 09216820010, with registered offices in Via Limone no. 24 – 10141 Turin (TO), Italy, in its quality as Data Controller, intends fulfilling the requirements of the Italian Personal Data Protection Code Legislative Decree no. 196/2003, as modified by Legislative Decree no. 101/2018, in EU Regulation no. 6799/2016.
Regarding the definitions of personal data, processing and all other terms indicated in the present text, reference is made to the definitions set out in art. 4 of the Regulation.
- Purpose
In its capacity as Data Controller, the Fondazione Mario Merz informs the curator/museum director/art critic/gallery owner/member of cultural association that, with regard to the stipulation and execution of the existing contract, the Fondazione Mario Merz is required to process personal data concerning you.
The data that will be collected are your personal data.
- Purpose of the data processing
The data of the interested parties, specifically in this case their personal data, are collected for the following purposes:
-Administration of applications for the “Mario Merz Prize” award;
-Exercise the Data Controller’s
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.
- Methods of data processing
The data processing is undertaken with the aid of electronic tools or paper media, in compliance with the security and data protection measures referred to in Legislative Decree n. 196/2003 – as modified by Legislative Decree 101/2018 – and of the European Regulation n. 679/2016.
The processing of the personal data is effected by the Data Controller and the Data Processor designated by the company.
The data processing is effected by the Fondazione Mario Merz in compliance with the Principles of Lawfulness, Necessity and Proportionality of said processing.
- Conservation of data
The personal data processed for the purposes referred to in point 2 will be stored for the time strictly necessary to achieve the purposes and – given that the processing is effected for the provision of services – up to and not exceeding the period of time provided for and permitted by Italian legislation to protect the interests and the right of defence of the Fondazione Mario Merz, in compliance with the limitation periods provided for by the applicable legislation.
- Recipients
Your personal data may be shared for the purposes referred to in section 2 of this Privacy Policy with:
5.1. subjects who typically act as Data Processors, namely: i) people, companies or professional firms that provide assistance and consultancy services to the Fondazione Mario Merz in accounting, administrative, legal, tax and financial matters or other business consultancy; ii) subjects delegated to carry out technical maintenance activities; (collectively, the “Recipients”).
5.2. subjects, public bodies or authorities to whom it is required to communicate your personal data pursuant to current legal provisions or orders from the authorities;
5.3. persons authorised by the Fondazione Mario Merz to process the personal data necessary to carry out activities strictly relating to the provision of services, who have undertaken to maintain the confidentiality of the data or have an adequate legal obligation of confidentiality and who assure the processing of data in accordance with the General Data Protection Regulation (GDPR9.
The complete and updated list of Managers is kept at the Data Controller’s operating office, located in Turin (TO) and can be received by sending a written request to the Data Controller at the addresses indicated in the “Contacts” section of this notice.
- Legal basis and mandatory or optional nature of the Processing
The legal basis for the processing of personal data for the purpose referred to in section 2.1 is art. 6 (1) (a) of the GDPR ([…] the interested party has expressed his consent to the processing of his personal data […]). The consent for the processing of data is mandatory and in the event of your refusal, the application for the “Mario Merz Prize” prize cannot be processed.
The legal basis for the purpose referred to in section 2.2 is art. 6 (1) (f) of the GDPR ([…] processing is necessary for the pursuit of the legitimate interest of the owner or third parties, provided that the interests or fundamental rights or freedoms of the Interested person do not prevail […]) to in order to ascertain, exercise or defend a right in court. This processing is also required in the presence of the above requirements.
- Rights of the interested party
Articles 15 and following of the GDPR give the interested party the right to the exercise of specific rights, including that of obtaining from the Data Controller confirmation of the existence or otherwise of their personal data and making them available in an intelligible form; the interested party has the right to learn the origin of the data, the purpose and methods of the Processing, the logic applied to the Processing carried out with the aid of electronic tools, the identity of the Data Controller and the subjects to whom the data may be communicated; the interested party also has the right to obtain the updating, rectification and integration of data, the cancellation, transformation into anonymous form or blocking of data processed in violation of the law; the interested party has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, also, if pertinent, to the purpose of the collection and processing of personal data for sending advertising or sales material directly or for carrying out market research or commercial communication through the use of automated call systems without the intervention of an operator by e-mail and/or through traditional marketing methods by telephone and/or paper mail.
Where applicable, he also retains the rights referred to in articles 16 – 22 of the GDPR (right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition, right to object to automated processing including profiling).
- Data Controller and contacts
The Data Controller is the Fondazione Mario Merz, with registered offices in Via Limone, 24 – 10141 Turin (TO), Italy, phone +39.011 19719437, email merzprize@fondazionemerz.org