RELEASE OF AUTHORISATION FOR VIDEO-PHOTOGRAPHIC SHOOTING

SOCIAL REPOST

 

whereas

- Nomination S.r.l. has an interest in reposting content you published on your social channels in which Nomination-branded products appear;

- it is in the interest of the Data Controller, subject to obtaining your authorisation, to use photos or videos published by you and in which you may appear (hereinafter the "Material");

- it is in the interest of the Data Controller, at its sole discretion, to use all or part of the Material in the context of the activities of promotion, information, and communication of the selected content, carried out by and/or in the interest of the Data Controller (hereinafter the "Activities");

- you (hereinafter also "interested party") have been informed about the content of Art. 13 of EU Regulation 2016/679.

Given the above, pursuant to this, you

hereby authorise

The Company NOMINATION SRL, Via F.lli Bandiera 22, 50019 Sesto Fiorentino (FI) to hold and use, free of charge, the Material within the scope of the Activities of the same, without having anything to claim. In particular:

- Publication via the web, including social network, or in any case by means of any other instrument dedicated to the pursuit of the aforementioned purposes and in any other way connected to them (for example, website of the Data Controller);

- Holding and archiving, with the Data Controller and/or with third parties authorised for this purpose by the Data Controller, in any format and manner, of the Material;

- Any other use of the Material related to the purposes indicated above. 

The use of the Material is granted for the time necessary to achieve the purposes pursued by the Data Controller, as detailed in the information notice at the bottom of this release.

This authorisation may be revoked at any time by sending the revocation in writing to the Data Controller at privacy@nomination.com. The revocation will take effect from the date of receipt of the aforementioned request by the Data Controller company which will be required to certify the removal of the Material subject to revocation. It is understood that the revocation will not have any effect with respect to the processing already carried out and the same must be done in the event that the deletion/removal of the data has become impossible or in any case difficult to carry out, such as in the case of saving carried out by third parties on their PCs or other media.

The interested party releases the Data Controller from any financial obligation and any liability inherent to an incorrect use of the Material by third parties; with this release the Data Controller is released from any direct or indirect liability inherent to the damage to image or confidentiality that go beyond the obligations to which it is bound by law.

Prohibit the Data Controller from using the Material in ways that affect personal and professional dignity and decorum. The setting of the images is to be considered carried out completely free of charge.

 

Social Repost subjects disclosure

Who are we and what do we do with your personal data?

The Company NOMINATION SRL, Via F.lli Bandiera 22, 50019 Sesto Fiorentino (FI) hereinafter the Data Controller, protects the confidentiality of your personal data and guarantees them the necessary protection from any event that may put them at risk of breach. 

The Data Controller applies policies and practices concerning the collection and use of personal data and the exercising of the rights recognised by the applicable legislation. The Data Controller is responsible for updating the policies and practices adopted for the protection of personal data whenever it becomes necessary and, in any case, whenever regulatory and organisational changes that may affect the processing of your personal data arise.

The Data Controller has appointed a Data Protection Officer (DPO) who you can contact if you have questions about the policies and practices adopted. 

You can contact the DPO at the addresses and contact details below:

nm-gdpr@nomination.com 

How does the Data Controller collect and process your data?

Personal information about you will be processed in relation to:

1. the dissemination and publication of data on the websites of the Data Controller and/or social networks to promote and advertise Nomination-branded products

Your data may be disclosed for the purposes represented and, in any case, linked to the processing for documentation and promotion purposes with respect to Nomination-branded products and in any case to promote its business, and only if you authorise processing and/or if you do not oppose this. In particular, they can be published and then disseminated on:

- the websites and social networks of the Data Controller.

 

2. for communication to third parties and recipients 

Your data will not be disclosed to third parties/recipients for their own purposes unless:

  1. you have given consent.

Your data will be disclosed to third parties/recipients, if:

  1. it is necessary for the fulfilment of obligations dependent on the authorisation and on the law governing it (e.g., for the defence of your rights, reporting to authorities, etc.);
  2. communication takes place with companies and/or professionals in the advertising sector, graphic and/or typographic services companies, web marketing and/or multimedia publishing services companies, marketing companies, companies and law firms for the protection of rights, data processing and IT services companies (e.g. web hosting, data entry, management and maintenance of IT infrastructure and services, web-streaming services, etc.), and for organisational, management, promotional and/or dissemination purposes of the products and activities of the Data Controller.

The personal data that the Date Controller processes for this purpose are:

- username, images, and videos, as well as sound recordings attributable to you. 

3. for IT security purposes

The Data Controller processes, also through suppliers (third parties and/or recipients), your personal data if strictly necessary and proportional and solely to ensure the security and ability of a network, or servers connected to it, to withstand, at a given level of security, unforeseen events or illicit/malicious acts that compromise the availability, authenticity, integrity, and confidentiality of the Personal Data stored or transmitted. 

For these purposes, the Data Controller provides procedures for managing personal data breaches in compliance with the legal obligations to which it is held. 

What happens if you do not give your consent to the disclosure (reposting) of your personal data for management and business organisation purposes, as well as promotion and disclosure with respect to the products of the Data Controller and in any case to promote its activity? 

The processing of your personal data will not be carried out, this could result in effects related to the sharing of the content published by you and for which consent to sharing is requested.

If you have given authorisation and subsequently revoke it or oppose the dissemination of your data, the same will no longer be disclosed by the Data Controller as long as the revocation will take effect from the date of receipt of the request. The Data Controller will be required to certify the removal of your post containing the photographic images and/or audio-video recordings subject to revocation. It is understood that the revocation will not have any effect with respect to the processing already carried out and the same must be done in the event that the deletion/removal of the data has become impossible or in any case difficult to carry out, such as in the case of saving carried out by third parties on their PCs or other media.

 

How and for how long are your data stored?

 

How

The processing of data is done through paper support or IT procedures by expressly authorised and trained individuals. They are allowed access to your personal data to the extent and to the degree that it is necessary for the performance of data processing activities concerning you. 

The Data Controller periodically checks the instruments with which your data is processed and the security measures provided for the same, which are constantly updated, verifying, also by means of the subjects authorised to the processing, that no personal data is collected, processed, kept, or stored for which no processing is necessary, as well as verifying that the data is kept with the guarantee of integrity and authenticity and its use for the purposes of the processing is actually performed. 

Where

The data is stored in paper, computer, and electronic archives located within the European Economic Area, and appropriate security measures are ensured. 

How long

The personal data processed by the Data Controller is kept for the time necessary to carry out the activities indicated in the "RELEASE OF AUTHORISATION FOR SOCIAL REPOST VIDEO-PHOTOGRAPHIC SHOTS" and authorised by you. Your images and audio-visual recordings that concern you will be kept by the Data Controller as long as the latter will use them, in compliance with the authorisation received, and for the following 10 years.

It is however without prejudice to the revocation of consent and authorisation and without prejudice to your right to object at any time to processing based on legitimate interest for reasons related to your particular situation. 

What are your rights?

The rights granted to you allow you to always be in control of your data. Your rights are:

- access;

- correction;

- erasure;

- Withdrawal of consent;

- restriction of processing;

- objection to the processing;

- portability. 

Your rights are guaranteed to you without special charges and formalities for the request for their exercising, which is essentially intended free of charge. You are entitled to:

- obtain a copy, even in electronic format, of the data you have requested access to. Should you require further copies, the Data Controller may charge you a reasonable fee; 

- to obtain the cancellation of the same or the limitation of the processing or even the updating and rectification of your personal data. 

- In the latter cases, you have the right to obtain that other data controllers to whom your data have been disclosed or recipients of your data be informed by the Data Controller of your request and of the outcome of the exercising of your rights so that they too may cancel, suspend, or stop processing or rectify your data:

- obtain any useful communication regarding the activities carried out following the exercising of your rights without delay and in any case, within one month from your request date, unless there is a reasoned extension, up to two months, which must be duly communicated to you.

In essence, at any time and free of charge and without special charges and formalities regarding your request, you can:

- obtain confirmation of the processing carried out by the Controller;

- access your personal data and know its origin (when the data is not obtained from you directly), the purposes and objectives of the processing, the data of the persons to whom it is communicated, and the retention period of your data or the useful criteria for determining it;

- withdraw their consent at any time, where it constitutes the basis of the processing. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;

- update or rectify your personal data so that it is always accurate;

- delete your personal data from the Data Controller's databases and/or archives, including backup archives, in the event, among others, that they are no longer necessary for the purposes of the processing or if the processing is assumed to be unlawful, and always if the conditions provided for by law are met; and in any case if the processing is not justified by another equally legitimate reason;

- limit the processing of your personal data in certain circumstances, for example where you have challenged its accuracy, for the period necessary for the Controller to verify its accuracy. You must also be informed, in a reasonable time, of when the period of suspension has ended or the cause for the restriction of processing has ceased, and thus the restriction itself lifted;

- obtain your Personal Data, if received or otherwise processed by the Data Controller with your consent and/or if its processing is carried out based on a contract and with automated tools, in electronic format, as this would allow transmission to another Data Controller.

The Data Controller must comply with such a request without delay and, in any case, no later than one month after receiving your request. The deadline may be extended by two months if necessary, considering the complexity and number of requests received by the Data Controller. In such cases, the Data Controller must inform you and inform you of the reasons for the extension within one month of receiving your request. 

For any further information and to send your request, you must contact the Data Controller at the address privacy@nomination.com

How and when can you object to the processing of your personal data?

For reasons related to your particular situation, you can object at any time to the processing of your personal data if it is based on legitimate interest by sending your request to the Data Controller, at privacy@nomination.com 

You have the right to the cancellation of your personal data if there is no legitimate reason prevailing with respect to that which gave rise to your request, and in any case the Data Controller specifies that the revocation will not have any effect with respect to the processing already carried out of the images and the same must also be the case in the event that the cancellation/removal of the same has become impossible or in any case difficult to carry out, such as, for example, in the case of saving carried out by third parties on their PCs or other media and the publication of brochures, or company brochures.

Who can you send a complaint to?

Without prejudice to any other action in administrative or judicial proceedings, you may lodge a complaint with the competent supervisory authority or the authority that performs its duties and exercises its powers in Italy where you have your permanent residence or work or if different in the member state where the breach of (EU) Regulation 2016/679 occurred.

Every update to this policy will be communicated to you promptly and by appropriate means and you will be notified if the Data Controller processes your data for purposes other than those referred to in this policy before proceeding and in time to give your consent if necessary.