PRIVACY POLICY

INFORMATION EX ART 13 GDPR CONSENT TO DATA PROCESSING

Dear member or aspiring member,
pursuant to art. 13 and 14 of EU Regulation 2016/679 on the protection of personal data ("GDPR") we inform you of
as follows.
Purpose of the treatment and legal basis

The Association processes your personal data exclusively for the purpose
institutional activity and in particular:
a) for the management of the associative relationship (sending correspondence, summoning the meetings of the organs, procedures
internal administration) and for the organization and execution of the service
b) to fulfill legal obligations (e.g. tax, insurance, etc.) referring to the members of the Association;
c) for sending (by mail, e-mail, newsletter or mobile number or other IT means) communications
related to the activities and initiatives of the Association
d) in relation to the images / videos, for publication on the Association website, on the Association's social networks or on
newsletter or on printed material promoting the institutional activities of the Association after your explicit
consent
e) in relation to the personal photo, for inclusion in the identification card
f) for the participation of members in courses, meetings and initiatives and for the organization and management of courses
g) for statistical analysis, also in aggregate form.
The legal basis of the treatment is represented by the application for membership and the association contract (art.6 paragraph 1 letter b
GDPR), from consent to treatment (art.6 paragraph 1 letter a - art.9 paragraph 2 letter a GDPR), from regular contacts with
the Association (Article 9 paragraph 2 letter d GDPR), from the legal obligations to which the Association is bound (Article 6 paragraph 1 letter c GDPR)
Methods and principles of treatment

The treatment will take place in compliance with the GDPR and Legislative Decree no. 196/03 ("Code on the matter
of protection of personal data "), as well as the principles of lawfulness, correctness and transparency, adequacy and relevance, with
paper and computerized methods, by persons authorized by the Association and with the adoption of adequate measures of
protection, so as to guarantee data security and confidentiality. No decision-making process will be carried out
automated.
Need for the provision. The provision of personal and contact data is necessary as it is strictly linked to
management of the association relationship. Consent to the use of images / videos and to the diffusion of data on the institutional site e
in the other methods described above it is optional.
Communication of data and transfer of data abroad. The data may be disclosed to other members for the purposes for the purposes
organization and execution of the service. The data may be communicated to the subjects appointed to carry out
activities to which the Association is bound by law (accountant, insurer, systems engineer, etc.) and to all
those natural and / or legal persons, public and / or private when communication is necessary or functional to the
institutional activities (trainers, Local Authorities, companies that manage IT maintenance, companies
course organizers, etc.). The data may be transferred to recipients with non-EU headquarters who have signed agreements
aimed at ensuring an adequate level of protection of personal data, or in any case after verification that the recipient
ensure adequate protection measures. Where necessary or appropriate, the subjects to whom the data are transmitted for
performance of activities on behalf of the Association will be appointed as (external) Data Processors pursuant to art. 28
GDPR.
Data retention period

The data will be used by the Association until the termination of the association relationship.
After this date, they will be kept for archival purposes, legal or accounting or tax obligations or for protection needs
of the Association, with the exclusion of communications to third parties and dissemination in any case by applying the principles of proportionality and
minimization.

Rights of the interested party

As an interested party, you are guaranteed all the rights specified in art. 15 - 20 GDPR, including the
right of access, rectification and cancellation of data, the right of limitation and opposition to the treatment, the right to revoke the
consent to treatment (without prejudice to the lawfulness of the treatment based on the consent acquired before the revocation),
as well as to propose a complaint to the Guarantor for the protection of personal data if you believe that the treatment that you
regards violates the GDPR or the Italian legislation. The aforementioned rights can be exercised by written communication from
send by e-mail, pec or fax, or by registered letter at the headquarters of the Association.