Rilegno, National Consortium for the collection, recovery and recycling of wooden packaging, with registered office in Cesenatico (FC), Via Luigi Negrelli n°24/A, email info@rilegno.org – tel 0547 672946 as Data Controller, protects the personal data of data subjects by ensuring confidentiality and compliance with current legislation and ensuring the necessary level of protection from any event that may put them at risk of violation.

1. Types of personal data to be processed
   In particular, the following personal data of the data subject may be processed:
   common personal identification data:
   name
   • surname
   • email address
   • city
   • province
   • information about studies, if applicable.
   
   
2. Purpose and legal basis for the processing
   Your personal data will be processed for the following purposes:
   managing registration for the Rilegno “RI-forma” contest and all subsequent
   activities necessary for the development of the project.
   The processing of your personal data, specifically the data indicated in the
   registration form with (*) voluntarily given by you when registering on the site and
   indicated in point 1 of this document, will be processed exclusively to comply with
   your request to create a personal account to be used for participation in the “Riforma”
   contest.
   The legal basis underlying the processing referred to in this paragraph is:
   art. 6 para.1 letter b) GDPR processing is necessary for the performance of a contract
   to which the data subject is party or in order to take steps at the request of the data
   subject;

3. Processing methods
   The processing of personal data will be carried out mainly with the help of IT tools
   by subjects within the Controller’s team, appropriately authorised for this purpose,
   instructed on the methods and with the appropriate means to guarantee the security
   and confidentiality of the data, in accordance with the provisions of the GDPR.
   The Controller carries out periodic checks to ensure that personal data not needed
   for the processing and related purposes indicated in point 2 of this information are
   not processed, collected, filed or stored.

4. Recipients of the personal data
   The personal data processed for the purposes referred to in point 2 of this
   information may be communicated:
   to internal subjects of the Controller’s team appropriately authorised for processing parts
   according to their competence;
   • to external parties such as:
                1. IT and IT assistance companies;
                2. IT infrastructure and solutions providers;
                3. web service providers
                4. project partners
                5. members of the judging panel
   
   

The communication concerns the categories of personal data whose transmission to
the aforementioned third parties is necessary for the performance of the activities
and for the purposes referred to in this information and, in any case, depending on
the relationship established with the Controller.
For the processing in question, the consent of the data subject is not necessary since
it is given for the implementation of obligations deriving from the request of the data
subject and the relationship established for this purpose with the Controller.

5. Transfer outside the EU/EEA
   The Controller does not carry out any transfer of your personal data abroad (all
   countries not belonging to the European Economic Area are to be understood as
   abroad).

6. Storage period/Data Retention
   The personal data concerning you will be processed by the Controller for the entire
   duration of the relationship with the same.

7. Rights of the data subject
   In accordance with EU Regulation no. 2016/679 the data subject has the right to:
   obtain confirmation of the processing carried out by the Controller;
   • access their personal data and find out when and where it was acquired (whenever the data are not obtained directly from them), the purpose of the processing, details of the subjects to whom they are sent (recipients), their retention period or, failing that, the criteria used to determine it;
   • rectify personal data;
   • delete their personal data from the Controller’s databases in the event that they are no longer necessary for the purposes for which they were collected or if the processing is unlawful and in the other cases referred to in art. 17 GDPR;
   • limit the processing of personal data in cases where, for example, its accuracy is disputed, for the period necessary for the Controller to verify its accuracy and in all other cases referred to in art. 18 GDPR;
   • obtain personal data, in electronic format, in order to be able to communicate them to another Controller (portability).
   The data subject may assert their rights by writing to the Controller at the address
   privacy@rilegno.org.
   The Controller must comply with such request without delay and, in any case, no
   later than one month after receiving the request. The term can be extended by two
   months, and in this case the Controller will always provide information within thirty
   days about the reasons that make the extension necessary.

8. Complaint
   The data subject has the right to lodge a complaint with the Italian Data Protection
   
   In the event that the data subject resides in a different Member State or the violation
   of the legislation protecting personal data occurs in another EU country than the one
   where the Data Controller is based, the data subject must lodge a complaint with the
   Authority responsible for monitoring compliance with the legislation on the protection of personal data of that country.
   The filing of the complaint shall be without prejudice to the possibility for the data
   subject to bring any other legal action.

9. Provision of data and consequences
   The provision of data is necessary for the purposes referred to in point 2 of this
   
   The refusal to provide the requested personal data may result in the impossibility of
   performing the service requested by the user as a result it may not be possible to
   enrol and register on the site contest.rilegno.org.