Privacy policy

In accordance with Article 5 of the European Regulation 2016/679, personal data shall be:

• Processed in a lawful, fair, and transparent manner with respect to the data subject;
• Collected for specified, explicit, and legitimate purposes (see Article 3.1 of this document) and not further processed in a manner incompatible with those purposes;
• Adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed;
• Accurate and, where necessary, kept up to date. All reasonable measures must be taken to ensure that personal data which is inaccurate, in relation to the purposes for which it is processed, is erased or rectified without delay;
• Kept in a form which permits identification of the data subjects for no longer than necessary for the purposes for which the data is processed;
• Processed in a manner that ensures appropriate security of the collected data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Processing is lawful if at least one of the following conditions is met:

• The data subject has consented to the processing of their personal data for one or more specific purposes;
• The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at their request;
• The processing is necessary for compliance with a legal obligation to which the data controller is subject;
• The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller;
• The processing is necessary for the purposes of the legitimate interests pursued by the data controller or by a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the data subject, particularly when the data subject is a child.