This information is provided, pursuant to Article 13 GDPR 679/2016 - "European Regulation on the Protection of Personal Data," to the members of A.p.s. Vajne.
Identity of the Data Controller
The data controller of members' data having purposes further indicated below is the A.p.s. Vajne with headquarters at Via Baldissero, 21 in Vidracco (TO), in the name of its pro-tempore legal representative.
Aps Vajne has not designated a Data Protection Officer.
Data Source.
The personal data processed are those provided by the data subject in connection with:
◦ application for membership;
◦ completion of online or paper forms or questionnaires that members have voluntarily filled out by joining the "My Meditation" project;
◦ events where other members of the same Aps Vajne noted said data. For example, the color of the People's armband on the occasion of the member's armband passage or the rank on the occasion of the member's rank passage.
Purposes of processing
Personal data of data subjects may be processed by A.p.s. Vajne to pursue the following purposes:
1) to communicate to those who have spontaneously expressed interest in specific association projects and activities, the initiatives planned in that area, including similar initiatives promoted by individual members, by various means of communication (telephone, cell phone, email, social network);
2) to know the preferences spontaneously expressed by members in order to organize activities and possible services for interested parties;
3) to make requests or process requests received;
4) exchange information aimed at the execution of institutional or commercial activities or contractual relationships of various kinds, including pre- and post-contractual activities;
5) Perform operations necessary for the fulfillment of other requests;
6) to store and consult personal data voluntarily provided by the interested party with respect to the "My Meditation" project, such as one's goals, limits to be overcome, books one wants to read, and current research in pursuit of one's goals
7) Attracting interested members, to let them know that they are on a journey. That is to say, members who spontaneously communicate through an app that they are traveling, can receive from other members whatever attention may be welcome by the interested party, such as watering the garden or asking for a ride if the former's route interests the latter, in a kind of solidarity exchange;
8) send commercial communications concerning products or services that the data subject has already purchased or enjoyed.
Legal basis for processing
The legal basis legitimizing the processing is:
- Execution of a (membership) contract to which the data subject is a party or to the execution of pre-contractual measures (application for membership) taken at the request of the same, for the purposes referred to in points 1), 2), 3), 4), 5) and 6);
- Pursuit of the legitimate interest of the Data Controller in the processing, for the purposes mentioned in point 8).
Data recipients.
The personal data processed by the Data Controller will not be disseminated, i.e., it will not be disclosed to unspecified parties, in any possible form, including making it available or mere consultation. They may, however, be communicated to workers (employees, collaborators or volunteers) working on behalf of Aps Vajne. They may also be communicated, to the extent strictly necessary, to subjects who, for the purpose of processing association, administrative, fiscal practices and for any compulsory fulfillment by Law, must provide goods and/or perform on their behalf performances or services. Finally, they may be communicated to the subjects entitled to access them by virtue of provisions of the law, regulations, and EU regulations.
In particular, on the basis of the roles and tasks performed, some workers (employees, collaborators or volunteers) have been legitimized to process personal data, within the limits of their competence and in accordance with the instructions given to them by the Data Controller.
Transfer of data
Where the Data Controller transfers personal data to third countries or to international organizations, within the scope of the above purposes, you will be informed whether or not an EU Commission adequacy decision exists.
The Data Controller reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided for in Article 46 GDPR 679/16.
Data Retention.
The Data Controller will retain and process personal data for the time necessary to fulfill the stated purposes. Thereafter, personal data will be retained, and not further processed, for the time stipulated by the current civil and tax regulations.
Rights of the data subject
With reference to Art. 7 of Legislative Decree 196/2003 and Art. 15 - right of access, 16 - right to rectification, 17 - right to erasure, 18 - right to restriction of processing, 20 - right to portability, 21 - right to object, 22 - right to object to automated decision making of the GDPR 679/16, the data subject may exercise his/her rights by writing to Aps Vajne at the above address, or by email to apsvajne@damanhur.org specifying the subject of his/her request, the right he/she intends to exercise and attaching a photocopy of an identity document attesting to the legitimacy of the request.
Revocation of consent
With reference to Article 6 paragraph 1 letter b of GDPR 679/16, the data subject may revoke any consent given at any time.
However, the processing that is the subject of this notice is lawful and permitted, even in the absence of consent, insofar as it is necessary for the performance of a contract to which the data subject is a party (the association relationship) or for the fulfillment of his/her requests or the pursuit of the legitimate interest of the Data Controller in the processing.
Proposition of complaint
The data subject has the right to lodge a complaint with the supervisory authority of the state of residence.
Refusal to provide data
Data subjects always voluntarily confer their personal data for association activities related to "my Meditation."
Therefore, refusal to provide such data simply may affect in whole or in part the processing of requests and the quality and efficiency of the same.
Automated decision-making processes
The Data Controller does not carry out processing that consists of automated decision-making processes on members' data.
* The information is addressed to members and interested parties who have applied for membership pending official ratification.
