In accordance with art. 13 and 14 of the EU Regulation 2016/679 on the protection of personal data ("GDPR") we inform you of the following.
Purpose of processing.
The Voluntary Association will process personal data concerning you or provided by you exclusively for the execution of your request or service requested by you and for the fulfillment of its legal obligations.
Methods and principles of treatment.
The treatment will be in compliance with the GDPR and Legislative Decree no. 196/03 ("Code for the Protection of Personal Data"), as well as the principles of lawfulness, correctness and transparency, adequacy and relevance, in paper and electronic form, by people authorized by the Association and with the adoption of appropriate measures of protection, in order to ensure the security and confidentiality of data.
Necessity of the conferment.
The provision of data is necessary as it is closely related to the organization of the service. Where the service consists in participating in events, courses or activities of the Association, they may be acquired and published on the institutional website, in social networks and on the Association's printed information material, photographic or video images.
Communication and data transfer.
The data may be communicated to the subjects appointed to carry out the services and activities requested and to the activities to which the Association is obliged by law. Where necessary or appropriate, the subjects to whom the data are transmitted for the performance of activities on behalf of the Association will be appointed (external) data processors in accordance with art. 28 GDPR.
Period of data retention.
The processing will not last longer than is necessary for the purposes for which the data were collected (performance of the service or execution of the request), without prejudice to the legal or accounting or tax obligations or the existence of legal protection needs of the Association, with the exclusion of communications to third parties and in any case applying the principles of proportionality and minimization.
Rights of the data subject.
As a data subject, you are guaranteed all the rights specified in art. 15 - 20 GDPR, including the right to access, rectify and erase data, the right to limit and oppose processing, the right to revoke consent to processing (without prejudice to the lawfulness of processing based on consent obtained prior to revocation), and the right to lodge a complaint with the Data Protection Supervisor if you believe that the processing of your data violates GDPR or Italian law. These rights may be exercised by written notice to be sent by registered mail to the headquarters of the Association.
Owner of the treatment.
The data controller is the Voluntary Association "Gruppo Ricerca Storica" with headquarters in Adrara San Martino (BG) - tel. +39 035/934387 - email info@oboeferlendis.it
