Mario Merz Prize

Information concerning participant

Information concerning participant for the “Mario Merz Prize” and the processing of personal data (pursuant to Legis, Dec. no. 196/2003, art. 13 of EU Regulation 679/2016 and Legis. Dec. no. 101/2018)

 

 

Foreword

With the present text, the Fondazione Mario Merz, tax no. 97590980013 and VAT No. 09216820010, with registered offices in Via Limone no. 24 – 10141 Turin (TO), Italy, in its quality as Data Controller, intends fulfilling the requirements of the Italian Personal Data Protection Code Legislative Decree no. 196/2003, as modified by Legislative Decree no. 101/2018, in EU Regulation no. 6799/2016.

Regarding the definitions of personal data, processing and all other terms indicated in the present text, reference is made to the definitions set out in art. 4 of the Regulation.

 

 

Purpose

In its capacity as Data Controller, the Fondazione Mario Merz informs the participant that, with regard to the stipulation and execution of the existing contract, the Fondazione Mario Merz is required to process personal data concerning you.

The data that will be collected are your personal data, your CV and a short biography.

 

 

  1. Purpose of the data processing

The data of the interested parties, specifically in this case their personal data, are collected for the following purposes:

  1. Management of participants during the selection process of the winner of the Mario Merz Prize
  2. Possible awarding of the “Mario Merz Prize”;
  3. Dissemination of the competition participant’s personal details on the Mario Merz Prize website;
  4. Exercise the Data Controller’s rights.

Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.

 

 

  1. Methods of data processing

The data processing is undertaken with the aid of electronic tools or paper media, in compliance with the security and data protection measures referred to in Legislative Decree n. 196/2003 – as modified by Legislative Decree 101/2018 – and of the European Regulation n. 679/2016.

The processing of the personal data is effected by the Data Controller and the Data Processor designated by the company.

The data processing is effected by the Fondazione Mario Merz in compliance with the Principles of Lawfulness, Necessity and Proportionality of said processing.

 

 

  1. Conservation of data

The personal data processed for the purposes referred to in point 2 will be stored for the time strictly necessary to achieve the purposes and – given that the processing is effected for the provision of services – up to and not exceeding the period of time provided for and permitted by Italian legislation to protect the interests and the right of defence of the Fondazione Mario Merz, in compliance with the limitation periods provided for by the applicable legislation.

 

 

  1. Recipients

Your personal data may be shared for the purposes referred to in section 2 of this Privacy Policy with:

5.1. subjects who typically act as Data Processors, namely: i) people, companies or professional firms that provide assistance and consultancy services to the Fondazione Mario Merz in accounting, administrative, legal, tax and financial matters or other business consultancy; ii) subjects delegated to carry out technical maintenance activities; (collectively, the “Recipients”).

5.2. subjects, public bodies or authorities to whom it is required to communicate your personal data pursuant to current legal provisions or orders from the authorities;

5.3. persons authorised by the Fondazione Mario Merz to process the personal data necessary to carry out activities strictly relating to the provision of services, who have undertaken to maintain the confidentiality of the data or have an adequate legal obligation of confidentiality and who assure the processing of data in accordance with the General Data Protection Regulation (GDPR9.

 

 

  1. Legal basis and mandatory or optional nature of the Processing

The legal basis for the processing of personal data for the purpose referred to in section 2.1 is art. 6 (1) (a) of the GDPR ([…] the interested party has expressed his consent to the processing of his personal data […]). The consent for the processing of data is mandatory.

The legal basis for the processing of personal data for purposes of 2.4 is art. 6(1)(b) of the GDPR ([…] if the transfer is necessary for the performance of obligations resulting from a contract to which the data subject is a party, or to take steps at the data subject’s request prior to entering into a contract) as the processing is necessary for the awarding of the prize in case of winning.

The legal basis for the purpose referred to in section 2.2 is art. 6 (1) (f) of the GDPR ([…] processing is necessary for the pursuit of the legitimate interest of the owner or third parties, provided that the interests or fundamental rights or freedoms of the Interested person do not prevail […]) to in order to ascertain, exercise or defend a right in court.

 

 

  1. Rights of the interested party

Articles 15 and following of the GDPR give the interested party the right to the exercise of specific rights, including that of obtaining from the Data Controller confirmation of the existence or otherwise of their personal data and making them available in an intelligible form; the interested party has the right to learn the origin of the data, the purpose and methods of the Processing, the logic applied to the Processing carried out with the aid of electronic tools, the identity of the Data Controller and the subjects to whom the data may be communicated; the interested party also has the right to obtain the updating, rectification and integration of data, the cancellation, transformation into anonymous form or blocking of data processed in violation of the law; the interested party has the right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, also, if pertinent, to the purpose of the collection and processing of personal data for sending advertising or sales material directly or for carrying out market research or commercial communication through the use of automated call systems without the intervention of an operator by e-mail and/or through traditional marketing methods by telephone and/or paper mail.

Where applicable, he also retains the rights referred to in articles 16 – 22 of the GDPR (right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition, right to object to automated processing including profiling).

 

 

  1. Data Controller and contacts

The Data Controller is the Fondazione Mario Merz, with registered offices in Via Limone, 24 – 10141 Turin (TO), Italy, phone +39.011 19719437, email merzprize@fondazionemerz.org