PRIVACY POLICY – CONTACTS

Information notice pursuant to Article 13 of the Reg. UE 2016/679 (GDPR)

Asso DPO - Privacy Policy adesione

1.WHO IS THE DATA CONTROLLER? HOW TO CONTACT THEM?

The data controller, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is the Association Data Protection Officer (ASSO DPO), headquartered at Viale Monza, 44- 20127 - Milan, VAT number 08258580961, Tax code 97656960156, represented by its President and legal representative pro-tempore, Dr. Matteo Colombo.

To contact the Data controller: email info@assodpo.it or toll-free number 800561720.

Asso DPO - Privacy Adesione 07

2. PURPOSE OF PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD, NATURE OF PROVISION

Purpose A) - Possible completion of a data collection form for sending contact requests, information.

  • LEGAL BASIS: The processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject's request (C44).
  • Art. 6 para. 1 lett. b) of the GDPR.
  • DATA RETENTION PERIOD: for the time necessary to respond to the request and in any case not exceeding 1 year.
  • NATURE OF PROVISION: The provision of data is necessary to allow the data controller to respond to requests received via the form. Failure to provide data marked with the symbol* or the term (required) will result in the impossibility to be contacted again and obtain the requested information.
Asso DPO - Privacy Adesione 02

3.TO WHOM WILL THE PERSONAL DATA BE DISCLOSED? DATA RECIPIENTS

The personal data will be disclosed to entities who will process the data as independent data controllers, or data processors (art. 28 GDPR), and processed by individuals (art. 29 GDPR) acting under the authority of the Data Controller and Data Processors based on specific instructions provided regarding the purposes and methods of processing.
The data will be disclosed to recipients belonging to the following categories:

  • companies, based in Italy, contractually bound to the Association Data Protection Officer;
  • entities, based in Italy, providing services for the website and communication networks, including email, hosting, and management of the website.
  • entities, based in Italy, providing services for the management of the information system used by the Association Data Protection Officer and telecommunication networks;
  • freelancers, firms, or companies within the scope of assistance and consultancy relationships;
  • competent Authorities for compliance with legal obligations and/or provisions of public bodies;
  • to other Members, upon request.
The list of Data processors is constantly updated and available by writing to info@assodpo.it or at the Data Controller's registered office.

Asso DPO - Privacy adesione 03

4.DOES ASSO DPO TRANSFER THE DATA TO COUNTRIES OUTSIDE THE EEA?

The personal data provided through the completion of the contact form will not be transferred to countries located outside the European Economic Area (EEA).
If it becomes necessary to transfer the personal data of data subjects to countries located outside the EEA, this will be done in compliance with the limits and conditions set forth in Articles 44 and following of EU Regulation 2016/679.
The data subject may obtain information about the guarantees for data transfers by writing an email to info@assodpo.it or at the legal headquarters of the Data Controller.

Asso DPO - Privacy adesione 04

5.IS THERE AN AUTOMATED PROCESS?

The personal data will be subject to traditional manual, electronic, and automated processing. It is specified that no completely automated decision-making processes are carried out.

Asso DPO - Privacy adesione 05

6. WHAT ARE THE RIGHTS OF DATA SUBJECTS? HOW TO EXERCISE THEM?

Data subjects may exercise their rights as expressed in Articles 15 and following of the GDPR by contacting the Data Controller at the email address: info@assodpo.it or by writing to the contacts indicated above.
The Data Controller ensures that data subjects have the right to request, at any time, access to their personal data (Art. 15), rectification (Art. 16), erasure (Art. 17), and restriction of processing (Art. 18). The Data Controller communicates (Art. 19) to each recipient to whom the personal data have been disclosed any rectifications, erasures or restrictions of processing made. The Data Controller informs the data subjects who request it about such recipients.

The Data Controller guarantees the right to data portability (Art. 20) and, in the event of requests under Art. 20, will provide data subjects with the data in a structured, commonly used format, readable with an automatic device.

If data subjects believe that the processing of personal data carried out by the Data Controller violates the provisions of Regulation (EU) 2016/679, they are free to lodge a complaint with the national supervisory authority, particularly in the Member State where they habitually reside or work, or where the alleged violation of the Regulation occurred (Italian Data Protection Authority https://www.garanteprivacy.it/), or to seek judicial remedies.

Asso DPO - Privacy adesione 05

7.AMENDMENTS TO THE PRIVACY POLICY

The Data Controller may change, modify, add, or remove any part of this Privacy Policy. To facilitate the verification of any changes, the policy will contain the indication of the update date.

Date of review: 21/02/2024