PRIVACY POLICY FOR THE PROCESSING OF PERSONAL DATA
Pursuant to and for the purposes of the provisions of art. 13 of the European Regulation on the protection of personal data 2016/679 ("GDPR"), and the National Privacy Law in force, we inform you that your personal data will be processed by electronic and manual means, in Italy and abroad. This statement, drawn up on the basis of the principle of transparency and all the elements required by the GDPR, is divided into individual sections, each of which deals with a specific subject in order to make reading faster, simpler and easier to understand (hereinafter the "Information").
Data controller
The Data Controller (hereinafter the "Data Controller") is Mediaset Spa, a company belonging to the Mediaset Group, with registered office in Via Paleocapa 3, 20121 Milan.
Data Protection Officer
The Mediaset Group has appointed a Data Protection Officer (hereinafter referred to as "DPO") with headquarters in Viale Europa 48 - 20093 Cologno Monzese (MI). According to Article 38, par.4, you may contact the DPO for all matters relating to the processing of your personal data and the exercise of your rights under the GDPR at the following contact: infoprivacy.dpo@mediaset.it
Legal basis of the processing.
The legal basis for the processing of your personal data is the consent given by you through the forwarding of communications.
Purpose of the processing.
Your personal data are processed for the following purposes:
- management of communications, reports and/or requests for assistance;
- fulfillment of legal obligations;
The provision of your data is required for the achievement of the above purposes and the failure, partial or inaccurate provision will make it impossible to respond to communications received.
Data communication.
Your personal data may be disclosed to persons expressly authorised to process them (art. 29 of the GDPR) and by third parties, internal and external to the Mediaset Group, expressly designated as Data Processors (art. 28 of the GDPR), in order to carry out all processing activities necessary to pursue the purposes detailed in this Information. Personal Data may be communicated to public bodies or to judicial authorities, where required by law or in order to prevent or repress the commission of a crime.
Period of data retention.
The personal data collected will be processed by the Data Controller for the time strictly necessary for the pursuit of the above purposes, without prejudice to a further retention period that may be imposed by law.
Territorial scope of processing
Your personal data will be processed by the Data Controller within the territory of the European Union.  
If, for technical and/or operational reasons, it is necessary to use subjects located outside the European Union, we inform you as of now that the processing will take place in compliance with the rights and guarantees provided for by the regulations in force, therefore, the transfer of personal data to such subjects will take place with adequate guarantees for the protection of personal data as provided for by articles 44-49 of the GDPR. 
In any case, you may request further details from the Data Controller if your personal data have been processed outside the European Union, requesting evidence of the specific guarantees adopted.
Rights of the data subject.
Articles 15 et seq. of the Regulation give you the right to exercise specific rights and allow you to obtain them:
- confirmation whether or not personal data concerning you are being processed and the right to obtain access to the data and the following information: purposes of processing, categories of personal data, recipients and/or categories of recipients to whom the data have been and/or will be communicated, period of data retention;
- the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data, including by providing an additional statement;
- the cancellation of personal data, in the cases provided for by the GDPR;
- the limitation to the processing in the cases provided for by current legislation;
- the portability of the data concerning you, and in particular to request the personal data concerning you provided to the Data Controller and/or request the direct transmission of your data to another Data Controller  of the processing;
- the opposition to the processing at any time, for reasons related to a particular situation, and/or the processing of personal data concerning you in full compliance with the Privacy Policy in force, as well as for any commercial purposes.
You may exercise these rights by contacting the following e-mail address, enclosing a copy of your identity document: infoprivacy@mediaset.it
If you believe that the processing of your data is contrary to current privacy legislation, we inform you that you can, at any time, make a complaint to the competent supervisory authority (Guarantor for the Protection of Personal Data), pursuant to art. 77 GDPR.