Privacy information for Journalists and Influencers
According to the EU Regulation 2016/679 with regard to the protection of personal data (hereinafter “GDPR”), Say What? Srl (hereinafter “Company” or “Data Controller”) as Data Controller hereby informs you of the following. The Company operates in the marketing and communication industry. In order to carry out its professional activities, it liaises with several newspapers, journalists and influencers. In respect of the abovementioned relationships, the company has access to and processes some personal data, including special categories of personal data. The company wants to provide you useful and understandable information about the processing of such data.
Information according to articles 13 and 14 of the regulation 2016/679
According to articles 13 and 14 of the EU Regulation (hereinafter “GDPR”) and with regard to personal data, including special categories of personal data, available or that will be available to SAY WHAT? both directly or through third parties, by virtue of the abovementioned relationship, we inform you of the following:
Data controller and processors of the protection of personal data
The Data controller is Say What? Srl having its registered office in Milan, via Procaccini 73.
The Data Controller can be contacted by certified e-mail or email at firstname.lastname@example.org and email@example.com or by phone at 02.3191181. The company hasn’t appointed a DPO – Data protection officer.
Purposes of the processing of personal data
Your data are processed in order to send you communications of various types and contents on the basis of the Company’s legitimate interest in carrying out communication and information activities towards you, which corresponds to your interest in being informed to perform the journalistic activity (art. 6.1, lett. f del GDPR). Therefore the legal base is legitimate interest.
As far as the processing of special categories of personal data is concerned, the purpose is carrying out specific communication and information activities, in order to send you information and invitation to conferences and selected events on the bases of the preferences you declared, the legal base is consent.
Categories of individuals
Journalists, newspapers contact persons and influencers.
Personal data collection sources
The company can collect your personal data:
• directly from you;
• through the participation to events;
• through third parties conducting businesses with the company.
Categories of data processed
By way of example but not of limitation, the company will be able to process identifying and contact data (name, surname, email, phone number), marital or family status, automotive preferences, and upon express consent also health data (including nutritional and beauty habits).
Consequences of the refusal to provide personal data
The provision and the update of your personal data, including special categories of personal data is non-obligatory and a possible erasure request does not entail any consequences, except for the Company inability to process data to fulfill the abovementioned purposes and activities.
Your personal data will be stored for the entire duration of your working relationship with the newspaper you are working for.
Data / recipients communication
Your personal data will not be disseminated. According to GDPR principles and for the abovementioned purposes, these Data can be disclosed to: employees authorized to process data, co-workers and professionals. Your data may be transferred to clients, public and private organizations, or to public authorities, to comply with legal obligations, with obligations deriving from contract relations or upon your request.
Your data will not be transferred to Third Countries outside EU. The processing and storage of personal data will be through the servers of the Data Controller and / or of Third Companies appointed as Data processors.
The company uses a cloud computing system for the management of emails, whose service is provided via Web by the system provider and can use also public or hybrid storage systems.
Your data will be processed by the Company in compliance with the data protection safeguards in the field of data protection and will be compliant to the following principles:
• Relevance and non excessive-use
Profiling and dissemination of the Data
Your personal data will not be subjected to further processing through modalities that are incompatible with the abovementioned purposes and will not be diffused neither processed by any fully automated decision process, including profiling.
Rights of persons concerned
We inform you that GDPR gives to persons concerned the possibility to exercise specific rights: the right of access (article 15), so the possibility to access all the personal information concerning him or her, the right to rectification (article 16), so the possibility to obtain without undue delay the rectification of inaccurate personal data concerning him or her, the right to erasure (article 17), so the right to cancel personal data concerning him or her, the right to restriction of processing (article 18), the right to data portability (article 20), so the possibility to receive his/her own personal data in a machine-readable format and to transmit those data to another controller without hindrance, the right to right to withdraw his or her consent at any time (article 7), the right to lodge a complaint with a supervisory authority if considers that the processing of personal data relating to him or her infringes the Regulation (article 77), the right to an effective judicial remedy against a supervisory authority in case of an illegal data treatment (article 78), the right to oppose the processing for commercial or advertising purposes at any time, by requiring the deletion of his/her data from the list.