Privacy Policy

In accordance with Article 5 of Regulation (EU) 2016/679 (GDPR), personal data must be:

• Processed lawfully, fairly, and transparently in relation to the data subject;
• Collected for specified, explicit, and legitimate purposes (see Article 3.1) and not further processed in a way incompatible with those purposes;
• Adequate, relevant, and limited to what is necessary for the purposes for which they are processed;
• Accurate and, where necessary, kept up to date. All reasonable steps must be taken to ensure that inaccurate personal data are erased or rectified without delay;
• Kept in a form that permits identification of data subjects for no longer than is necessary for the purposes for which they are processed;
• Processed in a manner that ensures appropriate security of the data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Processing is lawful only if at least one of the following conditions applies:

• The data subject has given consent for one or more specific purposes;
• Processing is necessary for the performance of a contract to which the data subject is a party or to take steps prior to entering into a contract;
• Processing is necessary for compliance with a legal obligation;
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority;
• Processing is necessary for the purposes of legitimate interests pursued by the data controller or by a third party, unless overridden by the interests or fundamental rights and freedoms of the data subject, especially if the data subject is a child.