Privacy Policy
GDPR, art. 13 Reg. UE 2016/679
For the purposes envisaged by the aforementioned EU Regulation GDPR 2016/679, containing the new provisions for the protection of “privacy” and relating to the protection and processing of personal data, you are hereby informed that the processing of personal data already provided and acquired by you and that will be provided by you in the future as a “data subject”, will be subject to processing in compliance with the regulations envisaged by the aforementioned Regulation and the obligations of confidentiality, correctness, lawfulness and transparency.
1. Data Controller and Data Processor
The Data Controller is “ReGeneration Hub Friuli” located at Via Slataper 2/A 33100 Udine – C.F. 94155180303; the Data Processor is Annalisa Chirico, CHRNLS60D43H612M.
2. Data subject to processing
The Data Controller processes personal identification data (e.g., first name, last name, company name, address, telephone, e-mail, bank and payment references), communicated by the data subject when registering as an ordinary and/or voluntary member and/or when joining an association activity organized by the Data Controller (e.g., events related to the NanoValbruna Forum, Local Experience, NanoPiçule, Workshop Contest, popular events, etc.).
3. Purpose and lawfulness of processing
The data of a personal nature provided in their own name or on behalf of the child, will be processed in accordance with the conditions of lawfulness ex art. 6 lett. b of EU Reg. 2016/679, i.e. for membership and participation in the association and the performance of the proposed activities in favor of the members, and in particular:
- registration in the register of members;
- registration and participation in the activities of NanoPiçule;
- registration and participation in the activities organized on the occasion of the NanoValbruna Forum;
- participation in the life of the association;
- information on proposed activities and initiatives;
- possible completion of data collection forms to send an information request to the data controller or to register for activities proposed by the data controller;
- fulfillment of contractual obligations and administrative-accounting purposes;
- fulfillment of obligations required by law, regulation, EU legislation or an order of the Authority (such as anti-money laundering);
- exercise of the Controller’s rights, such as the right to defense in court.
4. Data transfer to a third country and/or international organization
Data of a personal nature provided by the data subject will not be transferred abroad, within or outside the European Union.
5. Method of treatment
The processing of the personal data of the data subject is carried out by means of the operations as indicated in Art. 4 No. 2) GDPR of EU Reg. 2016/679, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Personal data are subject to both paper and electronic and/or automated processing.
6. Period of data retention
The processing will be carried out in automated and/or manual form, with methods and tools designed to ensure maximum security and confidentiality, by persons specifically appointed for this purpose. In compliance with the provisions of Article 5 paragraph 1 letter e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
7. Nature of conferment and refusal
The provision of personal data for the purposes set out in Section 3 of this information document is necessary to follow up membership in the association and participation in association activities. Failure to provide personal data may result in the inability to obtain such membership.
8. Rights of the data subject
In relation to the data subject to the processing referred to in this notice the data subject is granted at any time the right to:
- Access (art. 15 EU Regulation No. 2016/679);
- Rectification (art. 16 EU Regulation n. 2016/679);
- Cancellation (art. 17 EU Regulation No. 2016/679);
- Limitation (Art. 18 EU Regulation No. 2016/679);
- Portability, understood as the right to obtain from the data controller the data in a commonly used, machine-readable structured format for transmission to another data controller without hindrance (Art. 20 EU Regulation No. 2016/679);
- Objection to the processing (Art. 21EU Regulation No. 2016/679);
- Withdrawal of consent to processing, without prejudice to the lawfulness of the processing based on the consent acquired before the withdrawal (Art. 7(3)EU Regulation No. 2016/679);
- Complaint to the Data Protection Authority (Art. 51 EU Regulation No. 2016/679).
9. Exercise of rights
The exercise of rights may be exercised by:
- Registered mail with return receipt to be sent to “ReGenerationHub Friuli” based in Via Slataper 2/A 33100 Udine;
- Pec to be sent to regeneration.hub.friuli@pec.it.