Privacy Policy - Photos and Audio/Video footage

Dear guest and user,

we would like to inform you that the General Data Protection Regulation (EU Reg. 2016/679, hereinafter "GDPR" (or "Regulation") provides for the protection of natural persons with regard to the processing of personal data as a fundamental right. According to the aforementioned legislation, the processing of personal data must be based on the principles of fairness, lawfulness and transparency and the protection of your privacy and rights.

This privacy policy (the "Information Notice") is provided in relation to your personal data that will be collected by Pluribus One S.r.l. (also the "Company" or "Pluribus One" or the "Controller") for the promotional and commercial purposes of the Company as indicated below, upon your explicit consent.

1. CONTROLLER
The Controller of the personal data provided by you is Pluribus One S.r.l., with registered office in Cagliari, via Vincenzo Bellini 9, in the person of the sole director pro tempore Davide Ariu as legal representative. You may contact the Controller by sending an e-mail to privacy[at]pluribus-one.it or to the pec address pluribus-one[at]pec.it.

2. PURPOSE OF PROCESSING, METHODS AND LEGAL BASIS
Your personal data (photos and audio-video footage) will be collected and processed, subject to your express consent, for the production of images, audio-video content and promotional material of the Company for the purpose of carrying out communication activities, commercial campaigns, editorial initiatives, concerning the presentation of the Company, its commercial offer and the research and development activities carried out, as well as for the production of publications, articles and interviews, both printed and digital, including historical ones, on the corporate website, in the company's social channels (Facebook, Twitter, Instagram, Youtube, etc.. ..) and in all communication channels used by the Company, including TV and web channels (collectively, the "Promotional Purposes").
The legal basis for the processing consists of your express consent to the processing of your personal data for the specific purposes listed above (Art. 6, par. I, lett. a) GDPR; (Art. 9, par. II, lett. a) GDPR).

3. PROFILING
Your personal data will not be subject to any partially or fully automated decision-making process, including profiling.

4. DATA RETENTION PERIOD AND WITHDRAWAL OF CONSENT
Your data will be kept in the company's archives in accordance with the principle of proportionality and minimization until you revoke your specific consent to the processing for the Promotional Purposes described above, and therefore the retention period is linked to the choice of the person concerned to proceed with the revocation.
The data subject may revoke his/her consent at any time by simply sending an e-mail to privacy[at]pluribus-one.it. Following receipt of this opt-out request, the Controller will promptly proceed to remove and delete the data from the databases used for processing.

5. DISSEMINATION, RECIPIENTS AND POSSIBLE TRANSFER OF DATA
In relation to and exclusively for the purposes described above, your personal data may be disseminated in the manner indicated in paragraph 2 above.
Your personal data may be transmitted to subjects that process the images and sounds acquired as well as to suppliers, distributors, business partners that the Company uses to carry out the Promotional Purposes described above, who will act as Data Processors on the basis of a specific contract pursuant to Art. 28 GDPR. A list of external Processors will be made available to you upon request forwarded to the Controller at the addresses indicated in paragraph 1 above.
Your personal data may also be used by employees and collaborators of the Company, duly authorised pursuant to Article 29 GDPR, solely and exclusively on the basis of the instructions given by the Controller and for the pursuit of the Promotional Purposes indicated above.
The management and storage of personal data collected by Pluribus One takes place on servers located within the European Union. It is in any case understood that the Controller, if necessary, will have the right to use external providers based in countries outside the European Union and/or the European Economic Area. In this eventuality, all necessary technical, IT and contractual precautions will be taken to ensure that the transfer to third parties and processing by the latter takes place with a level of personal data protection that is adequate and at least equal to that guaranteed by the GDPR, as well as in compliance with the conditions established by the latter.

6. RIGHTS OF THE DATA SUBJECT (REVOCATION, ACCESS, RECTIFICATION, ERASURE, RESTRICTION, OBJECTION, PORTABILITY, COMPLAINT)
In your capacity as data subject, you have the right to request from the Company, as Controller, pursuant to Articles 15, 16, 17, 18, 19 and 21 of the GDPR
- access to your personal data and to all the information referred to in Article 15 of the GDPR;
- the rectification of their personal data that is inaccurate and the integration of incomplete data;
- the deletion of one's own data, except for those contained in documents that must be
compulsorily kept by the Company and unless there is an overriding legitimate reason
to proceed with the processing;
- the restriction of processing in the cases referred to in Article 18 of the GDPR.
You also have the right
- to object to the processing of your personal data, without prejudice to what is provided with regard to the
necessity and obligatory nature of the data processing in order to benefit from the services offered;
- to revoke any consent you may have given for non-compulsory data processing, without
the lawfulness of the processing based on the consent given before the revocation. You may exercise all of the above rights by sending an e-mail to the following e-mail address: privacy[at]pluribus-one.it.
As a data subject, you also have the right to lodge a complaint with the Data Protection Authority pursuant to Article 77 of the GDPR.