INFORMATION ON THE PROCESSING OF PERSONAL DATA


pursuant to articles 13 et seq. of Regulation (EU) 2016/679

 

AICARM APS, with head office in VIA DELL'STUDO 5, 50122 FLORENCE CF 94288930483, as Data Controller, intends to provide clear and complete information on the methods and rights that users can exercise in relation to the processing of their Personal Data.
These treatments are carried out by adopting adequate technical and organizational security measures, with the highest priority of the correct protection of personal data and in compliance with the principles of the GDPR European Regulation (EU) 2016/679 ) and pursuant to Legislative Decree n.196/2003 (Privacy Code) and subsequent amendments.

  1. CATEGORY OF DATA PROCESSED

    2. The processing activities carried out are aimed at acquiring the following personal data:

    Category Type
    Common data Personal data
    Common data Navigation log
    Common data Tax data

     

  1. PURPOSES AND LEGAL BASES

    2. Personal Data will be processed for the fulfillment of the following purposes:

    1. completion of all phases related to registration and/or participation in the projects and specific appeals promoted by the Data Controller, including the related instrumental activities;
    2. compliance with internal administrative procedures and fulfillment of legal obligations or regulations in force in Italy (e.g. communication to the Revenue Agency - for the preparation of pre-compiled tax returns - of personal data and data relating to donations made);
    3. the sending of communications of an informative nature, of fundraising and for promotional purposes of the activities and initiatives of Aicarm APS, with appropriate customization according to the interests and preferences expressed by participating in the association's initiatives.
  1. TREATMENT METHODS

    2. Due to the finality mentioned, your personal data may be processed, including by external managers, duly authorized and trained in processing, in compliance with privacy legislation and procedures, for compliance with internal administrative procedures and fulfillment of legal obligations or regulations in force.

    The operations that we foresee as necessary in relation to the purposes described are (ex Art. 4, GDPR): collection, recording, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and data destruction. The Personal Data will be subjected to both paper and electronic processing, including automated processing, in such a way as to ensure high levels of security and confidentiality of the processing, including conservation (if applicable).

  2. RECIPIENTS

    3. The Personal Data processed may be known only by personnel specifically responsible for the processing operations and may be disclosed:

    • to the banking institutions that will process the data for the purposes relating to the management of the means of payment and, where required, to the Revenue Agency;
    • to third parties (possibly appointed Data Processors, pursuant to Article 28 of the GDPR) who can be entrusted with specific processing activities, such as communications and connected operations (e.g. personal data communicated to suppliers for sending paper material, e-mails or for the management of telephone calls, etc.), or to whom the communication of data is necessary to comply with the law or regulations or codes of conduct or to organize and coordinate particular initiatives promoted to make the association's activities known.

    Personal Data will not be disclosed for other purposes nor, much less disseminated.

  3. RIGHTS AND METHOD OF EXERCISE

    4. The Association AICARM APS as Data Controller, pursuant to articles 5 and 13 of the GDPR, will process the personal data of the interested party in a lawful, correct and transparent manner, in the realization of the purposes indicated above, in compliance with the confidentiality obligations and current regulations.

    These data will be processed both electronically and on paper or on any other type of suitable support, in compliance with the security measures provided for by the GDPR. Failure to consent will not allow the use of personal data in the manner and for the purposes indicated above.

    At any time, the interested party has the right to ask the data controller for access to personal data and the rectification or cancellation of the same or the limitation of the processing of personal data concerning him or to oppose their treatment in addition to the right to data portability (data transfer), and, pursuant to articles from 15 to 22 and of the art. 34 of the GDPR, has the right to revoke consent to data processing with written communication to be sent by certified e-mail to: aicarmetsonlus@messaggipec.it, this revocation will not affect the lawfulness of the processing based on the previously given consent.

    The interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data at any time.

  4. STORAGE TERMS

    5. The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed ("conservation limitation principle", Article 5, GDPR) and / or for the time necessary to fulfill the obligations established. ex lege, and in any case for a period not exceeding 10 years.

    The verification of the obsolescence of the data stored in relation to the purposes for which they were collected will be carried out periodically.

Last update date: February 2024