Legal Notice / Public Disclaimer:
Updated: 25th March 2022
IRMC service is owned and operated by: The Risk Banking and Finance Society
Privacy Policy
The Risk Banking and Finance Society Non-profit Organization, with registered offices at Via Ponte a Giogoli n. 1, Sesto Fiorentino, Firenze, Italy (hereinafter, “RBF”) is committed to protecting the online privacy of the users of its websites. As such, this Privacy Policy has been written, under Article 13 of EU Regulation 2016/679 (hereinafter, the “Regulation”), in order to allow you to understand RBF’s policy regarding your privacy, and how your personal information will be handled when using our websites (www.therisksociety.com, hereinafter, collectively, “Website”). This Privacy Policy will also provide you with information so that you are able to consent to the processing of your personal data in an explicit and informed manner, where appropriate.
The information and data which you may provide, or which may otherwise be collected in the context of your use of RBF’s services – e.g., access to reserved areas in the Website, registration section, etc. (hereinafter, the “Services”) – will be used by RBF in compliance with the Regulation. This means, in particular, that any personal data processing carried out by RBF will respect the principles of lawfulness, fairness, transparency, purpose limitation, storage limitation, data minimization, accuracy, integrity and confidentiality.
CONTENTS
- Data controller
- Personal Data processed
- Browsing data
- Special categories of Personal Data
- Data provided voluntarily by the data subject
- Purpose of the processing
- Recipients of Personal Data
- Transfers of Personal Data
- Data subjects’ rights
- Amendments
Data Controller
The data controller regarding all personal data processing operations carried out through the Website is RBF, as identified at the start of this Privacy Policy. For any information regarding the processing of Personal Data by RBF, including a list of RBF’s data processors, please contact: irmc@therisksociety.org
Personal Data processed
As you use the Website, we inform you that RBF may collect and process information related to you as an individual and which allows you to be identified (either directly, or together with additional information), or which is related to other individuals (“Personal Data”), such as your name, an identification number, an online ID or one or more characteristic elements of your physical, physiological, mental, economic, cultural or social identity.
Personal Data which may be processed by RBF through the Website are as follows:
Browsing Data
The Website’s operation, as is standard with any website on the Internet, involves the use of computer systems and software procedures, which collect information about the Website’s users as part of their routine operation. While RBF does not collect this information in order to link it to specific users, it is still possible to identify those users either directly via that information, or by using other information collected – as such, this information is also considered Personal Data.
This information includes several parameters related to your operating system and IT environment, including your IP address, location (country), the domain names of your computer, the URI (Uniform Resource Identifier) addresses of resources you request on the Website, the time of requests made, the method used to submit requests to the server, the dimensions of the file obtained in response to a request, the numerical code indicating the status of the response sent by the server (successful, error, etc.), and so on.
These data are used exclusively to compile anonymous, statistical information on the use of the Website, as well as to ensure its correct operation and identify any faults and/or abuse of the Website – the data is deleted immediately after processing, unless it must be used to identify responsible parties in the event of cybercrime committed which harms the Website or third parties, in which case information on web contacts may be kept for a period of 7 (seven) days.
Special categories of Personal Data
Personal Data which may fall under the category of Personal Data referred to in Art. 9 of the Regulation – i.e. “[…] data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation”.
RBF remind you that, if you disclose such special categories of Personal Data in absence of an explicit consent to process them, RBF may not in any case be held liable and cannot receive complaints in this regard because in such case the processing is permitted as it is based on the fact that you have publicly disclosed this information, according to Art. 9(1)(e) of the Regulation.
Data provided voluntarily by the data subject
When using some of the Website’s Services, you are allowed to submit Personal Data related to other persons.
In any situation where you decide to share Personal Data related to other persons through the Website, you will be considered as an independent data controller regarding that Personal Data and must assume all inherent legal obligations and responsibilities. This means that you must also make sure that you have these third parties’ consent to their Personal Data being used in this manner before providing them to RBF, or another appropriate legal basis which may allow for lawful processing of this information.
To this end, you must fully indemnify RBF against any complaints, claims or demands for compensation for damages which may arise from the processing of this Personal Data, initiated by the third parties whose information is processed via the Website by your initiative.
Purpose of the processing
RBF intends to use your Personal Data, collected through the Website, for the following purposes:
- To provide Services you request, such as: i) granting access to reserved areas of the Website; ii) subscription to newsletters; iii) RBF, etc.;
- To respond to any of your requests for assistance or information;
- To contact any candidates who submit their submissions;
- For compliance with law which impose upon RBF the collection and/or further processing of certain kinds of Personal Data.
- To send you promotional and marketing communications, including sending newsletters and market research, by automated means (e-mail, SMS, MMS, push notifications and fax) and other means (paper mail or telephone with an operator).
Please note that the data controller collects a single consent for the marketing purposes described herein, pursuant to the General Provision of the Italian Data Protection Authority “Guidelines on promotional activities and combating spam” of 4 July 2013. If, under any circumstances, you wish to object to the processing of your data for marketing purposes carried out by the means indicated herein and withdraw, the consent given, you may do so at any time either by contacting the data controller without prejudice to the lawfulness of the processing based.
Recipients of Personal Data
Entities acting as data processors on RBF’s behalf, in particular:
- Persons, companies or professional firms providing RBF with advice and consultancy regarding accounting, administrative, legal, tax.
- Entities engaged in order to provide the Services (e.g., hosting providers or e-mail platform providers); and
- Persons authorized to perform technical maintenance (including maintenance of network equipment and electronic communications networks);
- Public entities, bodies or authorities to whom your Personal Data may be disclosed, in accordance with the applicable law or binding orders of those entities, bodies or authorities;
- Persons authorized by RBF to process Personal Data needed to carry out activities strictly related to the provision of the Services, who have undertaken an obligation of confidentiality or are subject to an appropriate legal obligation of confidentiality (e.g., employees of RBF).
Transfers of Personal Data
Some of your Personal Data are shared with Recipients who may be located outside the European Economic Area. The Company ensures that your Personal Data are processed by these Recipients in accordance with the Regulation. Under the Regulation, these transfers can be based on an adequacy decision or on the Standard Contractual Clauses approved by the European Commission. Further information is available at the Company at the following address: irmc@therisksociety.org
Data subject rights
Under Articles 15 and following of the Regulation, you, as a data subject, are entitled to request from RBF, at any time, access to your Personal Data, the correction and erasure of your Personal Data, as well as to object to its processing. You are also entitled to request the restriction of the processing of your Personal Data in the cases set out in Article 18 of the Regulation, as well as to obtain the Personal Data you have provided to RBF in a structured, commonly used and machine-readable format, in the cases set out in Article 20 of the Regulation.
Requests should be made in writing to RBF at: irmc@therisksociety.org.
In any case, please note that, as a data subject, you are entitled to file a complaint with the competent supervisory authorities for the protection of Personal Data, if you believe that the processing of your Personal Data carried out through this Website violates applicable law.
Amendments
This Privacy Policy entered into force on 24/05/2018. RBF reserves the right to partly or fully amend this Privacy Policy, or simply to update its content, e.g., as a result of changes in applicable law. RBF will inform you of such changes as soon as they are introduced, and they will be binding as soon as they are published on the Website. RBF therefore invites you to regularly visit this Privacy Policy in order to acquaint yourself with the latest, updated version of the Privacy Policy, so that you may remain constantly informed on how RBF collects and uses Personal Data.
THE RISK BANKING AND FINANCE SOCIETY, Non-profit Organization
C.F. 94191680480
Via Ponte a Giogoli 1, 50019 Sesto Fiorentino- Florence – Italy