This information is provided, in accordance with Article 13 GDPR 679/2016 - "European Regulation on the Protection of Personal Data," to those who apply for membership and/or volunteer status with A.p.s. Vajne.
Identity of the Data Controller
The Data Controller of any processing carried out by Aps Vajne with:
- registered office at Via Baldissero, 21 in Vidracco (TO);
- operational headquarters at Via Pramarzo, 3 in Baldissero canavese (TO) where secretarial activities and the organization and management of institutional and commercial activities are carried out;
- locations where the institutional and commercial activities of Aps Vajne are carried out, i.e., the places where events such as Rites, festivals, markets, shows, conventions, thematic meetings and other activities covered by the association's bylaws are organized;
is the President pro-tempore of Aps Vajne, as the legal representative.
The Data Controller guarantees the security, confidentiality and protection of the personal data in its possession, at any stage of the data processing process.
A Data Protection Officer has not been appointed.
Data Source
The personal data processed are provided by data subjects in connection with:
- registration with the association as a member and/or volunteer;
- subsequent application of laws, internal regulations and procedures governing the volunteer relationship related to the specific tasks of the association's institutional activities;
- communication of the change of one's data, for example of one's domicile for mail and parcel delivery;
- use of services provided by the association, where it is necessary for the provision of the same, additional data from the data subject, which are not already in the possession of the association for the reasons mentioned in the previous points.
Purposes of processing
The above personal data are processed for the performance of the institutional activities of Aps Vajne and for the management of the association relationship, in particular for the following purposes:
1. registration with Aps Vajne as a member and/or volunteer;
2. the payment of membership fees;
3. the fulfillment of legal and insurance obligations (mandatory and supplementary);
4. post-registration assistance to members;
5. the management of associates;
6. the correspondence and tracking of members and volunteers for association activities;
7. the calling of meetings;
8. verification of fitness to perform specific duties, such as, but not limited to, driving association vehicles or vehicles used by the association for its institutional purposes;
9. prevention and protection measures pursuant to Legislative Decree 81/08. By way of example and not limited to, the evidence of their personal data in the DVR of the Aps, emergency teams, procedures and for related training;
10. the sending of newsletters, bulletins, newsletters of the association;
11. organizational activities functional to the membership of the association;
12. any arrangement and management activities in which the member participates to provide the services that the association offers to members and non-members;
13. enjoyment of services provided by the association to members;
14. information and awareness campaigns;
15. publication activities;
16. management of any litigation;
17. statistical and historical membership surveys.
Legal basis for processing
The legal basis legitimizing the processing is:
- execution of a contract (association relationship) to which the data subject is a party or execution of pre-contractual measures taken at the request of the same, for the purposes referred to in points 1), 2), 4), 6), 7) and 12);
- fulfillment of legal obligations for the purposes set forth in points 3), 8) and 9);
- Pursuit of the legitimate interest of the Data Controller in processing, for the purposes set out in 5), 10), 13), 14), 15), 16) and 17).
Recipients of the data
The personal data processed by the Data Controller will not be disseminated, that is, it will not be given to unspecified subjects, in any possible form, including making them available or simple consultation. They may, however, be communicated to workers (employees, collaborators or volunteers) who collaborate with Aps Vajne, entrusted with the processing by the Owner. They may also be communicated, to the extent strictly necessary, to subjects who, for the purpose of processing requests or services related to institutional or commercial activities, must provide goods and/or perform services or services on assignment. Finally, they may be communicated to subjects entitled to access them by virtue of provisions of the law, regulations, and EU regulations.
In particular, on the basis of the roles and work duties performed, some workers (employees, collaborators or volunteers) have been legitimized to process personal data, within the limits of their skills and in accordance with the instructions given to them by the Data Controller.
Examples include but are not limited to:
- professionals, or service companies, for the administration and management of the association to which they have been entrusted or mandated to operate;
- Rspp in fulfillment of occupational health and safety obligations;
- insurance companies and credit institutions;
- customers or suppliers to whom members go to perform their duties in a voluntary capacity.
Transfer of data
Where the Data Controller transfers personal data to third countries or international organizations as part of the above purposes, you will be informed whether or not there is an EU Commission adequacy decision.
The Data Controller reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided by Article 46 GDPR 679/16.
Data Retention.
The Data Controller will retain and process personal data for the time necessary to fulfill the stated purposes. Thereafter, personal data will be retained, and not further processed, for the time stipulated by the current civil and tax regulations.
Rights of the data subject
With reference to Art. 7 of Legislative Decree 196/2003 and Art. 15 - right of access, 16 - right to rectification, 17 - right to erasure, 18 - right to restriction of processing, 20 - right to portability, 21 - right to object, 22 - right to object to automated decision making of the GDPR 679/16, the data subject may exercise his/her rights by writing to Aps Vajne at the above address, or by email to apsvajne@damanhur.org specifying the subject of his/her request, the right he/she intends to exercise and attaching a photocopy of an identity document attesting to the legitimacy of the request.
Revocation of consent
With reference to Article 6 paragraph 1 letter b of GDPR 679/16, the data subject may revoke any consent given at any time.
However, the processing that is the subject of this notice is lawful and permitted, even in the absence of consent, insofar as it is necessary for the performance of a contract to which the data subject is a party (the association relationship) or for the fulfillment of his/her requests or the pursuit of the legitimate interest of the Data Controller in the processing.
Proposition of complaint
The data subject has the right to lodge a complaint with the supervisory authority of the state of residence.
Refusal to provide data
The provision of personal data is obligatory for everything arising from the legal and contractual obligations governing the association contract. Therefore, any refusal to provide them in whole or in part may result in the impossibility for the Holder to execute the association relationship or to properly carry out all the obligations, such as those of an insurance and tax nature, related to the contract/relationship itself.
The provision of further data is to be considered optional. However, any refusal to provide them, although legitimate, may give rise to difficulties of an administrative, organizational and management nature of the members themselves, with possible impairment even of the physical, environmental, computer security measures and provisions prepared by the Owner, as well as compromise in whole or in part the processing of other requests and the quality and efficiency of the services rendered.
Processing of special data
In relation to the execution and management of the association relationship, the Holder may need to process data that Legislative Decree 196/2003, nov. Lgs. 101/18 and GDPR 679/16 define as "particular" (sensitive) insofar as suitable for detecting, for example, the suitability or otherwise to carry out certain tasks (as an outcome expressed by medical personnel following preventive, periodic or otherwise medical examinations) and the state of health, again certified by medical personnel, following any process of application for insurance reimbursement for an accident occurring within the scope of the insured association activities. The processing of special data is allowed even in the absence of consent, as it is necessary to fulfill obligations and exercise rights of the Holders and data subjects in the field of safety and social protection, occupational medicine, and evaluation of working capacity (Art. 9, para. 2 lett. b and h GDPR 679/16). It is understood here that "capacity to work," within the meaning of Legislative Decree 81/08, is the extension of the concept of "worker" to the voluntary member without any remuneration.
Automated decision-making processes
The Data Controller does not carry out processing that consists of automated decision-making processes on member and/or volunteer data.
* The information is addressed to interested members and/or volunteers who have applied for membership and/or volunteer status pending official ratification and registration in the relevant registers.
