Privacy notice
INFORMATION PURSUANT TO ART. 13 GDPR FOR MEMBERS AND CONSENT TO THE TREATMENT
Pursuant to art. 13 and 14 of EU Regulation 2016/679 regarding the protection of personal data ("GDPR") we inform you of the following.
Purpose of the processing and legal basis. The Association processes your personal data exclusively for carrying out the institutional activity and in particular:
a) for the management of the associative relationship (sending of correspondence, communications to meetings of the Boards of the Association, internal administrative procedures) and for the organization and fullfilling the service
b) to fulfill legal obligations (e.g. tax, insurance, etc.) referring to the members of the Association;
c) to send (by mail, e-mail, newsletter or mobile phone number or other IT means) communications related to the activities and initiatives of the Association
d) in relation to the images/videos, for publication on the Association's website, or in newsletters or on printed material to promote the institutional activities of the Association with your explicit consent
e) for the participation of members in conferences, meetings and initiatives and for the organization and management of conferences
f) for statistical analyses, also in aggregate form.
The legal basis of the processing is represented by the membership request and the association contract (art. 6 paragraph 1 letter b GDPR), the consent to the treatment (art. 6 paragraph 1 letter a - art. 9 paragraph 2 letter a GDPR ), from regular contacts with the Association (art. 9 paragraph 2 letter d GDPR), from the legal obligations to which the Association is bound (art. 6 paragraph 1 letter c GDPR)
Methods and principles of treatment. The treatment will take place in compliance with the GDPR and Legislative Decree no. 196/03 ("Code regarding the protection of personal data"), as well as the principles of lawfulness, correctness and transparency, adequacy and pertinence, with paper and computerized methods, by persons authorized by the Association and with the adoption of adequate protection measures, in order to guarantee the security and confidentiality of the data. No automated decision making will take place.
Necessity of the contribution. The provision of personal and contact data is necessary as it is strictly linked to the management of the associative relationship. Consent to the use of images/videos and the dissemination of data on the institutional site and in the other ways described above is optional.
Data communication and data transfer abroad. The data may be communicated to other members for the purpose of organizing and executing the service. The data may be communicated to subjects appointed to carry out activities to which the Association is required by law (accountant, insurer, systems analyst, etc.) and to all those natural and/or legal, public and/or private persons when the communication is necessary or functional to the performance of the institutional activity (Local Authorities, companies that take care of IT maintenance, etc.). The data may be transferred to recipients based outside the EU who have signed agreements aimed at ensuring an adequate level of protection of personal data, or in any case after verifying that the recipient guarantees adequate protection measures. Where necessary or appropriate, the subjects to whom the data are transmitted for carrying out activities on behalf of the Association will be appointed (external) Data Processors pursuant to art. 28 GDPR.
Data retention period. The data will be used by the Association until the termination of the associative relationship. After that date, they will be kept for archival purposes, legal or accounting or tax obligations or for the protection needs of the Association, with the exclusion of communications to third parties and dissemination in any case by applying the principles of proportionality and minimization.
Rights of the interested party. As an interested party, you are guaranteed all the rights specified in the art. 15 - 20 GDPR, including the right to access, rectify and delete data, the right to limit and oppose the processing, the right to withdraw the consent to the processing (without prejudice to the lawfulness of the processing based on the consent acquired before the revocation), as well as the right to lodge a complaint with the Guarantor for the protection of personal data if you believe that the processing that concerns you violates the GDPR or Italian law. The aforementioned rights can be exercised by written communication to be sent by e-mail, e.g. or fax, or by registered mail to the headquarters of the Association.
Data controller. The data controller is the International Center Piero Caldirola Association with headquarters in 20126 Milan, Piazza della Scienza 3 – U2 c/o Milano-Bicocca University – email info@icpc.it
CONSENT TO THE PROCESSING OF PERSONAL DATA
By accepting the privacy policy, in the capacity of interested party, having read the aforementioned information provided pursuant to art. 13 GDPR, you authorize/consent
1) to the processing of my personal data, to be carried out in compliance with what is indicated in the aforementioned information and in compliance with the provisions of the GDPR and Legislative Decree no. 196/03
2) to disseminate my name and surname, my image or videos of me on the institutional website, social networks and on the Association's printed information material, for the sole purpose of describing and promoting the institutional activity, in compliance with the provisions of the GDPR and Legislative Decree no. 196/03 and the authorizations/indications of the EU Commission and of the Guarantor for the Protection of Personal Data
