PRIVACY NOTICE ON PERSONAL DATA PROCESSING – REGULATION (EU) 2016/679 (GENERAL DATA PROTECTION REGULATION – GDPR)
MOTO CLUB ADVENTURE RIDING ASD, with registered office in Via Borgo, 1 - 22070 Appiano Gentile (CO), Italy, VAT No. 10527650963, as Data Controller (“Controller”), informs you – pursuant to art. 13 of EU Regulation No. 679/2016 (“Regulation”) – that the personal data you voluntarily provide may be processed in the manner and for the purposes described below, in compliance with the principle of confidentiality.
1. Purposes and legal basis of processing
Your personal data will be processed (for the definition of “processing”, see art. 4(2) of the Regulation) for the following purposes:
a) to allow your participation in the event, course or other activity organized by MOTO CLUB ADVENTURE RIDING ASD;
b) to perform all activities related to the relationship established by the signing of the registration form, including insurance-related activities;
c) to carry out market and statistical studies and research;
d) to send, also by e-mail or telephone channels, advertising material, information and commercial communications;
e) to carry out surveys on customer satisfaction regarding the quality of services provided;
f) to comply with legal, regulatory, statutory and sport-federation obligations and, in general, any applicable national and international regulations.
The legal basis for the processing is (by way of example) your consent to the processing of your personal data.
2. Personal data subject to processing
2.1 Personal data
The personal data processed include, by way of example: full name, address and other identification and contact details (common personal data).
2.2 Special categories of personal data
In performing its activities, MOTO CLUB ADVENTURE RIDING ASD may also process special categories of data, such as health data and data revealing your health status.
3. Data retention period
Your data will be kept according to the following criteria:
- for no longer than is necessary to achieve the purposes for which they are processed;
- for no longer than is required to comply with legal obligations.
4. Methods of processing
Data will be processed on paper and by electronic tools, with suitable technical and organisational measures to ensure their security and confidentiality, in order to prevent unauthorised access, loss or destruction, in line with Chapters II (Principles) and IV (Controller and Processor) of the Regulation. Data may be processed by internal or external persons specifically authorised and bound by confidentiality obligations.
5. Scope of data communication
Data may also be processed by third-party companies acting as external processors on behalf of the Controller (for example: banks, professional firms, IT and technical service providers, insurance companies for insurance services), for the time strictly necessary to perform their services. Your data will only be made accessible to those who actually need them in relation to their job duties and hierarchical position.
Without your express consent (pursuant to art. 6(b) and (c) of the Regulation), the Controller may communicate your data to supervisory bodies, judicial authorities and to all other parties to whom communication is mandatory by law.
6. Nature of data provision
With reference to the purposes under paragraph 1, letters a), b) and f):
- provision of your personal data is mandatory.
With reference to the purposes under paragraph 1, letters c), d) and e):
- provision of your personal data is optional.
Failure to provide data and/or provision of inaccurate and/or incomplete information may prevent:
- a) your participation in the event, course or other activity organized by MOTO CLUB ADVENTURE RIDING ASD;
- b) the proper performance of activities related to the registration, including insurance management;
- c) the execution of statistical and market studies;
- d) the sending of advertising, information and commercial communications;
- e) the performance of customer satisfaction surveys;
- f) full compliance with legal, regulatory, statutory and sport-federation obligations.
7. Data disclosure
Your data will not be disseminated to unspecified parties.
8. Data transfer abroad
Your data will not be transferred outside the European Union. Should it become necessary to transfer data or servers outside the EU, the Controller will ensure that any transfer is carried out in compliance with arts. 44 et seq. of the Regulation, adopting appropriate safeguards.
9. Data Controller
The Data Controller is MOTO CLUB ADVENTURE RIDING ASD, Via Borgo, 1 - 22070 Appiano Gentile (CO), Italy, VAT No. 10527650963. Any request concerning your personal data may be sent to the registered office or to the certified e-mail address: mcadventureriding.ssd@pec.it
10. Data subject’s rights
As data subject, you may exercise the rights provided for by the Regulation, and in particular:
a) the right of access under art. 15, including information on:
i) purposes of the processing;
ii) categories of personal data;
iii) recipients or categories of recipients;
iv) retention period or criteria;
v) existence of the right to rectification, erasure, restriction or objection;
vi) the right to lodge a complaint with a supervisory authority;
vii) data origin if not collected from you;
viii) existence of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and consequences of such processing;
ix) existence of adequate safeguards pursuant to art. 46 in case of transfers to third countries.
b) where applicable, you may also exercise the rights under arts. 16–21 of the Regulation (rectification, erasure, restriction, portability, objection).
MOTO CLUB ADVENTURE RIDING ASD undertakes to respond to your requests within one month of receipt, extendable in case of complexity or number of requests, informing you of the reasons for any extension.
11. How to exercise your rights
You may exercise your rights at any time by sending a certified e-mail to: mcadventureriding.ssd@pec.it
Data Controller
MOTO CLUB ADVENTURE RIDING ASD
Please note that, with reference to the purposes under paragraph 1, letters a), b) and f), provision of your personal data is mandatory.
