PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA
(pursuant to Articles 13 and 14 of Regulation (EU) 2016/679)
(pursuant to Articles 13 and 14 of Regulation (EU) No. 679/2016 and Article 13.2 of Federal Decree-Law No. 45 of 2021)
The website of ITALIAN INDUSTRY & COMMERCE – UAE OFFICE (IICUAE), from the moment of its design, aims to ensure compliance with the principles established by Regulation (EU) 2016/679 and Federal Decree-Law No. 45 of 2021, relating to the protection of natural persons with particular regard to the processing of personal data, without exception, as well as the free movement of such data, also in the public interest, consistently with the principle of transparency.
IICUAE guarantees data subjects the possibility to interact with its portal in order to freely access the requested services, such as the sending of newsletters or informational communications for which the data subject has knowingly provided consent to the processing.
The personal data processed — possibly collected or provided by the user through the appropriate forms — and any other relevant information may be accessible through the address https://iicuae.com
, corresponding to the official website of IICUAE.
Through this notice, IICUAE, in addition to describing the methods for freely accessing the website, intends to inform users and visitors also about the processing of personal data and the related safeguards recognized by law, pursuant to Article 13 of the aforementioned Regulation and Article 13.3 of Federal Decree-Law No. 45 of 2021.
This notice is provided exclusively for the personal data contained in or collected during the use of the IICUAE website and not for other websites (for which the Association is not responsible or a non-contractual joint controller) that may be consulted by the user through links.
Data Controller
The Data Controller of personal data is IICUAE, represented by its legal representative pro tempore, domiciled for the purposes of the office at the institutional headquarters of IICUAE at the address indicated on the official website.
Purpose of Processing and Legal Basis
Personal data will be processed in accordance with the services offered by IICUAE through its portal in order to ensure the provision of services consistent with the objectives set out in the Association’s statute and to enable the informational activities of the Chamber Association.
Within these purposes, the processing also includes data relating to portal registrations necessary for managing relations with IICUAE, as well as enabling effective institutional communication and fulfilling any legal, regulatory, or contractual obligations.
Place and Method of Processing
Data are processed within the United Arab Emirates and the territory of Italy by personnel who are instructed, trained, and authorized to lawfully process personal data in accordance with the principles of fairness, lawfulness, transparency, relevance and data minimization with respect to the purposes of collection and subsequent processing.
Processing is carried out in compliance with GDPR Regulation (EU) 679/2016, Federal Decree-Law No. 45 of 2021, Federal Decree-Law No. 34 of 2021, and Federal Law No. 15 of 2020.
The processing of data related to the services offered by the IICUAE website takes place for the time strictly necessary to achieve the purposes established by the user. All minimum security and confidentiality measures are applied to prevent data loss, unlawful or improper use, or unauthorized access.
Personal data provided by users who register or use the services of the IICUAE website may also be used for other processing operations compatible with the purposes of the collection, such as sending communications via email consistent with the services offered and requested exclusively by IICUAE and not by third parties.
Personal data of users requesting documents or informational material (newsletters, responses to inquiries, acts and official measures, etc.) are used solely to perform the requested service and are not disclosed or distributed.
No automated processing, automated decision-making processes, or profiling activities concerning users of the IICUAE institutional website are carried out.
Categories of Data Processed and Recipients
The categories of data processed, as well as the categories of recipients to whom the data may be disclosed, are indicated in the Register of Processing Activities, available at the headquarters of IICUAE.
Data Retention Period
Personal data will be retained for a period not exceeding the time necessary to achieve the purposes indicated above (“principle of storage limitation”, Article 5 of the EU Regulation) or according to the retention periods provided by applicable laws under the GDPR and/or pursuant to Article 5.7 of Federal Decree-Law No. 45 of 2021.
Transfer of Data Abroad
Personal data are not transferred to third countries outside the European Economic Area or outside the United Arab Emirates.
DATA SUBJECT RIGHTS
(Regulation (EU) 2016/679)
The rights of the data subject (Articles 15–21 of the EU Regulation) may be exercised at any time and include the right:
- to obtain confirmation as to whether or not personal data concerning him or her are being processed and access to such data;
- to obtain the rectification of personal data without undue delay, including the completion of incomplete data;
- to obtain the erasure of personal data;
- to obtain restriction of processing and notification of any revocation thereof;
- to data portability;
- to lodge a complaint with a supervisory authority.
The above rights apply without prejudice to the existence of legitimate grounds on the part of the Data Controller.
Federal Decree-Law No. 45 of 2021
DATA SUBJECT RIGHTS
The rights of the data subject (Articles 13–18) may be exercised at any time and include the right to receive information regarding the processing of personal data, the right to data portability, the right to rectification of inaccurate data, the right to erasure of personal data (right to be forgotten), the right to restriction of processing, and the right to object to the processing of personal data, including automated processing.
The above rights apply without prejudice to the existence of legitimate grounds on the part of the Data Controller.