INFORMATION MADE PURSUANT TO ART. 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679

According to the indicated legislation, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

Pursuant to article 13 of the GDPR 2016/679, therefore, we provide you with the following information:

A - PERSONAL DATA

Personal data (name, surname, identification document details and copy of the same, telephone, email address, etc.) will be provided at the time of accession according to the type of signing of the requested contract.

Dinasty of Freedom DOF - Non-profit Cultural Association with registered office in Via Mazzini 39, Desenzano del Garda, 25015 Brescia, as the data controller of your personal data, informs you about their use and your rights, so that you can consciously express your consent, where required, and exercise the rights provided for by the General Regulation for the protection of personal data (European Regulation 679/2016, hereinafter: The regulation). Your personal data (provided by you, from third parties or coming, within the limits of the law, from public lists) may be processed for the following expressly stated purposes: The personal data provided by the Customer / interested party are mainly processed for the execution of the Contract and credit management and, more generally, the relationship arising from the Contract itself.

In particular, below we specify the meaning of the types of purposes:

  1. of law: i.e. to fulfill obligations established by law, by a regulation, by European Union legislation as well as by provisions issued by Authorities legitimated by the law or by competent supervisory or control bodies (in this case your consent does not it is necessary as the processing of data is related to compliance with these obligations / provisions). The data processed by law include those relating to tax regulations or anti-money laundering registers.
  2. contractual and, more generally, administrative-accounting, i.e. to perform obligations deriving from the contracts of which you are a party or to fulfill, before the conclusion of the contract, your specific requests, also by means of remote communication techniques, including a call dedicated telephone center (in this case your consent is not required, since the processing of the data is functional to the management of the relationship or to the execution of requests); these treatments also include the purpose deriving from the protection of mutual interests in court and for tax purposes or for other legal obligations such as, for example, the keeping of an anti-money laundering register if applicable.
  3. direct commercial and profiling: that is to provide you with information and send you informative, commercial and advertising material (also by means of remote communication techniques such as, by way of example, postal correspondence, telephone calls also through automated call systems, fax, e-mail, SMS messages or MMS or other types) on products, services or initiatives of the company, to promote them, to carry out direct sales actions, to carry out market research, to verify the quality of the products or services offered to you (also through telephone calls or sending questionnaires), to optimize the offer itself (including through focused and selected analyzes), to make commercial communications, to perform statistical research, to apply one or more profiles (in order to make appropriate commercial decisions or to analyze or provide, again for commercial purposes, your personal preferences, your co behaviors and your attitudes). (In this case, your consent is optional and does not affect the maintenance of relations with the company).
  4. indirect commercial: i.e. by communicating your data to third parties to third parties so that they carry out their own independent commercial activities as indicated in the previous number 3. (In this case, your consent is optional and does not affect the maintenance of relations with the company)
  5. commercial post: that is, in order to investigate, after the termination or revocation of relations with the Company, the reasons for the interruption of relations. (In this case, your consent is optional and does not affect the maintenance of relations with the company)
  6. It is possible that the Data Controller changes the purposes for which your data were collected. In this case, the Data Controller collects your explicit consent for the new purposes if it is necessary according to the regulations in force
  7. 'Particular' data also known as 'sensitive', i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person (Article 9 of the Regulation) or relating to criminal convictions and offenses or related security measures (Article 10 of the Regulation). These data may be processed only with your explicit written consent if one of the reasons indicated in article 9 paragraph 2 and art. 10 of the regulation. The consent is free and optional but the refusal to consent could jeopardize the performance of one or more activities requested by the company that specifically concern facts for which it is essential to process this type of data.
  8. Your data may be subject to transfer to third parties for the purposes declared by the Data Controller

B - DATA PROCESSING METHOD.

The processing of your data takes place by means of manual tools and by means of manual / paper archiving and by means of electronic and automated tools, with methods strictly related to the purposes indicated above. Where you have given your consent, the processing can also take place by profiling or comparing data. The Company has adopted technical and organizational measures aimed at preventing and limiting the risk of loss, deterioration, theft of your data, and ensuring its recovery within a reasonable time in the event of a 'data breach'.

The processing takes place in such a way as to guarantee the security, protection and confidentiality of your data.

Within the company, they may become aware of your personal data, as managers or processors:

  • employees, managers and directors or partners of the company who have or hold administrative, collaborator or commercial roles by law or company statute subject to self-employment contracts that operate within the company structure. Such personnel have been provided by the Company with adequate training and instructions suitable to protect the conservation, maintenance, updating and security and confidentiality of your data. The consent to the processing by such personnel is not required as it is inherent in the necessary procedures provided for by law.

Outside the company, your data may be processed by:

  • collaborators subject to a non-employee employment contract operating outside the company structures
  • commercial persons subject to a non-employee employment contract operating outside the company structures
  • consultants of any kind (lawyers, doctors or accountants, engineers, architects, labor consultants or other professionals registered or not registered in professional registers), who carry out technical and support tasks on behalf of the company (in particular: legal services, IT, shipping) and company control.

For the pursuit of the aforementioned purposes, the company may communicate or otherwise transmit your data to certain subjects, including foreign ones, who will use the data received as independent joint controllers, except in the case in which they have been designated by the company as "managers" of the treatments of their specific competence. It is your right to request and obtain the list of third parties to whom such data are transmitted. Your consent is required for the transmission of data to such third parties but, in the event of refusal, the Company may not be able to provide the requested services or fulfill the obligations for which it is committed to you.

The data controller uses computer systems in joint ownership with third parties, who therefore become joint controllers and the relations with them are governed by a specific contractual agreement.

It is possible that the data controller delegates the processing of your data to other sub-managers, in turn instructed on how to correctly process the data.

Your data may be subject to profiling, i.e. the collection and aggregation of data concerning you in order to make appropriate commercial decisions or to analyze or predict, again for commercial purposes, your personal preferences, your behavior and your attitudes. Profiling can only take place with your consent. Failure to provide consent for profiling purposes does not normally compromise the regular development of the relationship on the basis of which your data are processed.

Your data may be transferred to a foreign country. In this case, if this occurs within the European Union, your data will be treated in the same way as in Italy. In case of transfer to countries outside the European Union, they will be treated respecting the rights provided in your favor by the European Regulation. If your data are transferred to a country outside the EU, it is possible to be processed by subjects who guarantee compliance with the rights provided for by the European Regulation through voluntary adhesion by the same with general provisions.

The transfer of data will take place in any way through tools that guarantee the protection of the data from intrusions by third parties.

Your data has been collected directly from you and therefore we provide you with the following information in this form where applicable:

  • data of the owner and representative

  • data of the data protection officer

  • purpose and legal basis of the processing

  • recipients of the data

  • intention to transfer data abroad

  • duration of the retention period or criteria for determining the duration

  • right to access, rectification, cancellation, opposition to processing, portability

  • right to revoke the processing if possible, subject to legal obligations

  • possibility to submit complaints to the authority (Guarantor)

  • if the data are mandatory for the execution of a contract, or by law and the consequences if consent is not given
  • if the data are or will be profiled and, if so, the logic of the profiling
  • the existence of automatic decision-making processes and the right of the interested party to have decisions made after human intervention.

Your data will be kept by the Data Controller, in relation to the intended purposes, for the time necessary to carry out the relationship in place with you and to be able to guarantee the mutual protection of rights in the judicial seat as well as to comply with legal obligations including those of a nature tax. The data not necessary for the latter purposes will be removed within the maximum term provided for by the right to be forgotten, as indicated further on in this statement, or, at your request, even in a shorter time if not in contrast with the rights of the Data Controller.

C - RIGHTS OF THE INTERESTED PARTY

You may, at any time, exercise the following rights expressly recognized as useful by the Regulation:

  • You have the right to lodge a complaint with the national authority (Guarantor for the protection of personal data) at any time if you believe that your right has been violated.
  • You have the right to have your data always accurate and updated and therefore you can at any time report or request that they be updated.
  • You have the right to withdraw consent to the processing of data where this is not prevented by law or by the need to protect the rights of the owner even in court. In any case, the request for revocation gives rise to the right to limit the processing.
  • You have the right to access your data processed by the Data Controller by means of a written request, including an IT type. It is essential that you can provide us with proof of your identity, possibly also by accessing our databases through credentials uniquely referable to your person. You have the right to free access for one time only, while you may be required to pay a fee for requests subsequent to the first. You have the right to obtain an answer within thirty days of the request. You have the right to have your data in printable formats.
  • You have the right to rectify and update your data and may at any time request its updating and correction if you verify that the data in our possession is out of date or incorrect. In order to guarantee the updating of the data, we invite you to report any useful changes.
  • You have the right to delete the data concerning you, provided that it is not data that the Data Controller must keep due to a specific legal obligation such as, for example, obligations deriving from tax laws, anti-money laundering or for the protection of the rights of the owner in litigation. .

  • If you contest the accuracy of your data, or the lawfulness of the processing, or the right of the owner to delete your data, or you oppose the processing of data and the owner disputes your opposition, you have the right to have your data are stored but not processed except within the limits of what is necessary for the resolution of the dispute over the data.
  • If the Data Controller modifies or cancels your data in whole or in part, you have the right to be informed and oppose the modification and cancellation.
  • You have the right to be able to transfer your data - stored and processed electronically - to another operator, within the limits indicated by the Regulations, in such a way as to allow easy reading and acquisition by third parties. The data that you have the right to transfer (portability) also include data deriving from the automatic observation of your activity carried out through the IT services of the Data Controller, such as searches and chronology of the activities performed.
  • You have the right to object to the processing of your data, profiling, use of data for direct marketing, profiling for public interest or for scientific or historical or statistical research purposes.
  • The company may, in certain circumstances, adopt automated procedures in order to take decisions concerning it and in particular in order to decide whether and under what conditions to conclude contracts directly or through third parties with you. In this case, you have the right to request that , before taking a binding decision, your position is in any case examined by a human operator who carries out a merit assessment.
  • The company may, in certain circumstances, process your data in order to communicate with you regarding commercial or information or educational initiatives (so-called newsletter). In this case, your consent must be explicit and separate from other forms of consent and you can revoke the consent given for this purpose at any time.
  • You have the right to be consulted when assessing the security procedures for the processing and protection of your data

D - INDICATION OF THE SUBJECTS INVOLVED IN THE TREATMENT

Your data may be processed by the following subjects:

  1. [owner] association Dinasty of Freedom DOF
  2. [co-owners] None
  3. [representative] Not applicable
  4. [managers] Legal Representative
  5. [RDP / DPO] No appointment is required

E - METHOD OF EXERCISING YOUR RIGHTS

Your requests can be exercised through written communications to the Company's address via Giuseppe Mazzini 39, Desenzano del Garda (BS) or to the email address privacy@dinastyoffreedom.com, or, if required, autonomously within the personal area made available to you electronically by means of a unique identification.