Dear Madam/Sir, pursuant to articles 13 and 14 of EU regulation 2016/679 on personal data protection (“GDPR”) we would like to inform you of the following.
Purpose and legal basis of processing.
The le Olivastre Association processes your personal data or the data provided by you exclusively to fulfil your request or the service requested by you, to manage any contract/convention or other relationship and to fulfil any legal obligations . The legal basis is represented by the contract (art. 6 paragraph 1 lett. b GDPR) or by a legal obligation (art. 6 paragraph 1lett. c GDPR)
Processing method and principles.
Processing is conducted in compliance with the GDPR and Lgs.D. No. 196/03 (“Personal Data Protection Code”), as well as the principles of lawfulness, fairness and transparency, adequacy and pertinence, through printed and electronic means, by people authorised by the Association and implementing adequate protection measures, so as to guarantee the security and confidentiality of the data. No automated decision-making process shall be carried out.
Need for the provision of data.
Providing data is necessary as in strictly linked to the organisation of the service and management of the contract or relationship. When the service consists in participating in events, courses or activities of the Association, the data can be acquired and published on the institutional website, social media and on the Association’s printed material. Your photo or video images are only posted through explicit and separate consent expressed by you.
Communicating data and transferring data abroad.
The data can be shared with subjects appointed to perform services and requested activities (e.g. external instructors) and activities that the Association is required to complete by law (accountant, insurance agent, IT tech, etc.). The data can be transferred to receivers located outside of the EU who have signed direct agreements to ensure a suitable protection level of the personal data, or nevertheless upon ensuring that the receiver guarantees adequate protection measures. Where necessary or due, the subjects being sent the data to perform activities on behalf of the Association will be called Data Processors (external) pursuant to art. 28 of the GDPR.
Data retention period.
Processing will not last longer than required for the purposes the data was collected for (to perform the service or the request), without prejudice to legal or accounting or tax purposes or for reasons safeguarding the Association, with the exclusion of communication to third parties and disclosure in any case applying the principles of proportionality and minimisation.
Data subject’s rights.
As the data subject, all of the rights specified in art. 15 - 20 GDPR are guaranteed, including the right to access, rectification and erasure of your data, the right to limitation and objection to processing, the right to withdraw consent to processing (without prejudice to the lawfulness of processing based on consent acquired prior to withdrawal), as well as lodge a complaint with the Personal Data Protection Authority if you believe that the processing of your data violates the GDPR or Italian regulation. The aforementioned rights can be exercised in writing through e-mail, certified e-mail or fax, or by Registered Mail to the address of the Association.
The data controller is the “le Olivastre” association, with address in Passignano sul Trasimeno, tel. 075 8296432, mail: firstname.lastname@example.org – email@example.com