The personal data of the user are used by IEEE ITALY SECTION, which is the holder for the treatment, in compliance with the principles of protection of personal data established by the GDPR 2016/679 Regulation.

MODALITIES AND PURPOSES OF DATA PROCESSING
1) We inform you that the data will be processed with the support of the following means:
- Mixed - electronic and paper
with the following purposes:
- Courses and training activities
- Management and administration of the association and related activities
The data will be kept for the time necessary to achieve the purpose for which they were collected.

We also inform you that the activities could be subject to audio/video capturing in order to document and display the event experience. This material can be used for promotional and dissemination purposes, also through publication on the institutional portals and on the IEEE ITALY SECTION institutional social channels.
By attending the event, you acknowledge to the use of the audio-video footage for the above mentioned purposes.
In agreement with the IEEE events policy, which imposes certain restrictions on the use of multimedia at its events, an attendee is permitted to use hand-held cameras and/or smart phones to take photographs and capture digital images for personal, non-commercial use, provided the photography is not disruptive. Photographs may not be published, sold, reproduced, transmitted, distributed or otherwise commercially exploited in any manner whatsoever.
IEEE Italy Section disclaims all liability for the capture of your image in any multimedia format by other attendees at the event.

LEGAL BASIS
2) The provision of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to supply them in whole or in part may give rise to the impossibility of providing the services requested. The association deals with the users' optional data on the basis of their consent, that is through the explicit approval of this privacy policy and in relation to the methods and purposes described below.

CATEGORIES OF RECIPIENTS
Without prejudice to the communications carried out in compliance with legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of stakeholders: Consultants and freelancers also in partnership; Businesses and Professional Associations.
Furthermore, the following categories of authorized persons and/or internal and external managers identified in writing and to whom specific written instructions have been provided regarding the processing of data can be involved in the processing of your data: responsible for organizing the events ; Legal representative; Treasurer; Secretary; Information Management Coordinator.

TRANSFER PERSONAL DATA TO THIRD COUNTRIES
Activity description: IEEE training activities and management of membership
Country: United States

INFORMATION STRUCTURES
Activity description: IEEE training activities and management of membership
IT structures: Office archive
Structure type: Internal
Registered office: Rome

CONSERVATION PERIOD
3) The mandatory data for contractual and accounting purposes are kept for the time necessary to carry out the commercial and accounting relationship.
The data of those who do not buy or use products / services, even if they have had a previous contact with representatives of the association, will be immediately canceled or processed anonymously, where their conservation is not otherwise justified, unless it has been validly acquired the informed consent of the interested parties regarding a subsequent commercial promotion or market research activity.
The data retention period is: Five years.

RIGHTS OF THE DATA SUBJECT
According to European Regulation 679/2016 (GDPR) and national legislation, the interested party may, in accordance with the procedures and within the limits established by current legislation, exercise the following rights:
- Request confirmation of the existence of personal data concerning him / her (right of access);
- Know its origin;
- Receive intelligible communication;
- To have information about the logic, the methods and the purposes of the processing;
- Request the updating, correction, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected;
- In cases of consent-based processing, receive their data provided to the holder, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
- The right to lodge a complaint with the Control Authority.

HOW AND WHEN CAN THE DATA SUBJECT OPPOSE THE PROCESSING OF PERSONAL DATA? (Article 21 GDPR)
For reasons relating to the particular situation of the interested party, the same may oppose at any time the processing of their personal data if it is based on legitimate interest or if it takes place for business promotion, by sending the request to the Owner at the time communicated the improvement of the relationship on which the treatment itself is based.

The interested party has the right to cancel his/her personal data if there is no legitimate overriding reason for the Data Controller than the one giving rise to the request, and in any case in case the Data Subject opposes the processing for commercial promotion activities.

TO WHOM CAN THE INTERESTED PARTY SUBMIT A COMPLAINT? (Article 15 GDPR)
Without prejudice to any other action in administrative or judicial proceedings, the interested party may lodge a complaint with the competent supervisory authority on the Italian territory (Authority for the protection of personal data) or the one carrying out its duties and exercising its powers in the Member State where the GDPR violation took place.

The data controller of your personal data is:
IEEE ITALY SECTION
p.iva 06211830481, c.f. 94126920480
mail: IEEE_ITALY@IEEE.ORG
Legal representative: IEEE Italy Section Chair