Data Processing Policy

Rilegno, National Consortium for the collection, recovery and recycling of wooden packaging, with registered office in Cesenatico (FC), Via Luigi Negrelli n°24/A, email – tel 0547 672946 as Data Controller, protects the personal data of data subjects by ensuring confidentiality and compliance with current legislation and ensuring the necessary level of protection from any event that may put them at risk of violation.

  1. Types of personal data to be processed
    In particular, the following personal data of the data subject may be processed:
    common personal identification data:
    • surname
    • email address
    • city
    • province
    • information about studies, if applicable.

  2. Purpose and legal basis for the processing
    Your personal data will be processed for the following purposes:
    managing registration for the Rilegno “RI-forma” contest and all subsequent
    activities necessary for the development of the project.
    The processing of your personal data, specifically the data indicated in the
    registration form with (*) voluntarily given by you when registering on the site and
    indicated in point 1 of this document, will be processed exclusively to comply with
    your request to create a personal account to be used for participation in the “Riforma”
    The legal basis underlying the processing referred to in this paragraph is:
    art. 6 para.1 letter b) GDPR processing is necessary for the performance of a contract
    to which the data subject is party or in order to take steps at the request of the data


  1. Processing methods
    The processing of personal data will be carried out mainly with the help of IT tools
    by subjects within the Controller’s team, appropriately authorised for this purpose,
    instructed on the methods and with the appropriate means to guarantee the security
    and confidentiality of the data, in accordance with the provisions of the GDPR.
    The Controller carries out periodic checks to ensure that personal data not needed
    for the processing and related purposes indicated in point 2 of this information are
    not processed, collected, filed or stored.


  1. Recipients of the personal data
    The personal data processed for the purposes referred to in point 2 of this
    information may be communicated:
    to internal subjects of the Controller’s team appropriately authorised for processing parts
    according to their competence;
    • to external parties such as:
                 1. IT and IT assistance companies;
                 2. IT infrastructure and solutions providers;
                 3. web service providers
                 4. project partners
                 5. members of the judging panel


The communication concerns the categories of personal data whose transmission to
the aforementioned third parties is necessary for the performance of the activities
and for the purposes referred to in this information and, in any case, depending on
the relationship established with the Controller.
For the processing in question, the consent of the data subject is not necessary since
it is given for the implementation of obligations deriving from the request of the data
subject and the relationship established for this purpose with the Controller.

  1. Transfer outside the EU/EEA
    The Controller does not carry out any transfer of your personal data abroad (all
    countries not belonging to the European Economic Area are to be understood as


  1. Storage period/Data Retention
    The personal data concerning you will be processed by the Controller for the entire
    duration of the relationship with the same.


  1. Rights of the data subject
    In accordance with EU Regulation no. 2016/679 the data subject has the right to:
    obtain confirmation of the processing carried out by the Controller;
    • access their personal data and find out when and where it was acquired (whenever the data are not obtained directly from them), the purpose of the processing, details of the subjects to whom they are sent (recipients), their retention period or, failing that, the criteria used to determine it;
    • rectify personal data;
    • delete their personal data from the Controller’s databases in the event that they are no longer necessary for the purposes for which they were collected or if the processing is unlawful and in the other cases referred to in art. 17 GDPR;
    • limit the processing of personal data in cases where, for example, its accuracy is disputed, for the period necessary for the Controller to verify its accuracy and in all other cases referred to in art. 18 GDPR;
    • obtain personal data, in electronic format, in order to be able to communicate them to another Controller (portability).
    The data subject may assert their rights by writing to the Controller at the address
    The Controller must comply with such request without delay and, in any case, no
    later than one month after receiving the request. The term can be extended by two
    months, and in this case the Controller will always provide information within thirty
    days about the reasons that make the extension necessary.


  1. Complaint
    The data subject has the right to lodge a complaint with the Italian Data Protection

    In the event that the data subject resides in a different Member State or the violation
    of the legislation protecting personal data occurs in another EU country than the one
    where the Data Controller is based, the data subject must lodge a complaint with the
    Authority responsible for monitoring compliance with the legislation on the protection of personal data of that country.
    The filing of the complaint shall be without prejudice to the possibility for the data
    subject to bring any other legal action.


  1. Provision of data and consequences
    The provision of data is necessary for the purposes referred to in point 2 of this

    The refusal to provide the requested personal data may result in the impossibility of
    performing the service requested by the user as a result it may not be possible to
    enrol and register on the site