The External Data Processor is the Ugo Bordoni Foundation, in the person of its Chairman and current legal representative, with registered office in Rome, viale del Policlinico no. 147, in its capacity as manager of the Public opt-out registry.

Pursuant to Art. 37 of Regulation (EU) 2016/679, the Data Protection Officer (DPO) of the Ministry of Enterprises and Made in Italy can be contacted at the following addresses: e-mail: protezionedati@mise.gov.it, protezionedati@pec.mise.gov.it; telephone: 0647052039 | via V. Veneto, no. 33, 00187 – Rome (ITALY).

The processing of data is aimed at: a) enabling subscription to the Public opt-out registry, renewal of subscription or revocation, including selective revocation with regard to specific operators, of the same subscription, pursuant to and for the purposes of Article 7 of Presidential Decree 26/2022; b) the actual provision of the service relating to the Registry itself; c) the preservation of the records of the events of access to the systems of subscription, renewal of subscription or revocation, including selective revocation with regard to specific operators, of the same subscription, and of the operations of subscription, renewal of subscription or revocation, including selective revocation with regard to specific operators, by the contractors referred to in Article 1, paragraph 1, letter b) of Presidential Decree No. 26/2022 (hereinafter referred to as telephone contractors) pursuant to Article 7 of the same decree; d) the implementation and maintenance of the systems through which the service is provided; e) the handling of any complaints, disputes and requests for assistance; f) the sending of notices and/or the exercise of the power of inspection and/or control by institutional subjects.

The legal basis for the processing of personal data is the exercise of the public powers of the data controller pursuant to Presidential Decree 26/2022, in accordance with Article 6(1)(e) of Regulation (EU) 2016/679.

The processing of the data you provide is carried out by means of manual, computerised and telematic tools, with logics and methods strictly related to the performance of the service and the purposes of Presidential Decree 26/2022 regulating the Public opt-out registry.
The data will be processed in accordance with the rules of confidentiality and security provided for by law, including in the event of any disclosure to third parties.
However, you are invited to enter data in accordance with the requirements of the procedure described on the website www.registrodelleopposizioni.it.

Subscription to the Public opt-out registry is for an indefinite period and ceases only in the event of revocation by the telephone contractor.
In compliance with Art. 7 of Presidential Decree 26/2022, the registry manager is responsible for keeping a log, for twelve months from the time of their generation, of any access to the subscription, renewal or revocation systems, as well as of the operations for the subscription, renewal or revocation of subscription in the Public opt-out registry by telephone contractors, including therein transmissions of correspondence with the relevant attachments, in accordance with criteria of completeness, integrity, unalterability and verifiability. These records are protected by the manager of the Public opt-out registry against unauthorised access, so that they can only be accessed for inspection purposes by the Data Protection Authority or by the judicial authority.

The data you provide are compulsory for the achievement of the above-mentioned purposes; failure to provide them, or providing them in part or incorrectly, may make it impossible for us to provide the services requested.

Your data may be communicated in compliance with Regulation (EU) 2016/679 to the employees in charge of the processing for purposes functional to the activity of the Ugo Bordoni Foundation as manager of the Public opt-out registry.
They may also be communicated in compliance with Regulation (EU) 2016/679: a) to the Data Protection Authority for the exercise of the power of inspection and/or control under Article 12 of Presidential Decree 26/2022; b) to public authorities and/or supervisory and control bodies entitled to request the data in accordance with the law; c) to judicial authorities; d) to consultants, legal experts and law firms appointed by the Data Controller or Data Processor for the purposes described herein.

Your personal data will be processed by the operator of the Public opt-out registry within the territory of the European Union.
Should it become necessary, due to technical and/or operational issues, to use entities located outside the European Union, or should it become necessary to transfer some of the collected data to technical systems and cloud-managed services located outside the European Union, the processing will be carried out in accordance with the provisions of Regulation (EU) 2016/679 and updated processing information will be provided.
All necessary precautions will be taken in order to ensure the protection of personal data by basing such transfer: a) on adequacy decisions of third country recipients expressed by the European Commission; b) on adequate safeguards expressed by the third country recipient pursuant to Article 46 of Regulation (EU) 2016/679; c) on the exceptions relating to specific situations set out in Article 49 of Regulation (EU) 2016/679.

With reference to the processing of your personal data as per Presidential Decree 26/2022, Regulation (EU) 2016/679 gives data subjects the following rights:

a) right of access (Art. 15 of Regulation (EU) 2016/679), i.e. to obtain in particular:

• confirmation of the existence of personal data,
• the origin and the categories of personal data, the purpose and method of their processing,
• the approach applied in case of processing by electronic means,
• the identification details of the Data Controller, of the Data Processor and of the persons or categories of persons to whom the data have been or may be communicated,
• the retention period,
• rectification, erasure or restriction of the processing of personal data,
• the right to opt-out to their processing,
• the right to lodge a complaint with the Data Protection Authority;
  

b) right of rectification (Art. 16 of Regulation (EU) 2016/679);

c) right to restriction of processing (Art. 18 of Regulation (EU) 2016/679);

d) right to opt-out (Art. 21 of Regulation (EU) 2016/679).

In relation to the processing of data concerning you, you may use the contacts in this document to exercise your rights.