INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA – REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GENERAL DATA PROTECTION REGULATION - GDPR)
***
MOTO CLUB ADVENTURE RIDING ASD, with registered office in Via Borgo, 1 - 22070 Appiano Gentile (CO), Italy, VAT no. 10527650963, as data controller (hereinafter “Data Controller”), informs you, pursuant to art. 13 of EU Regulation no. 679/2016 (hereinafter, the “Regulation”), that the personal data you have voluntarily provided may be processed in the manner and for the purposes indicated below and, in any case, in compliance with the principle of confidentiality.
1. Purpose and legal basis of the processing
Your personal data will be processed (for the definition of ‘processing’, see art. 4, par. 2 of the Regulation)
for the following purposes:
a) to allow your participation in the event, course or any other initiative organised by MOTO CLUB ADVENTURE RIDING ASD;
b) to carry out the activities related to the relationship established by signing the registration form, including activities connected to the management of relations with insurance companies;
c) to process market studies and statistical research;
d) to send advertising and information material and commercial communications, also by e-mail and telephone;
e) to carry out surveys on the level of customer satisfaction regarding the quality of the services provided;
f) to comply with:
- obligations laid down by laws, regulations, the association’s by-laws and sports federation regulations and, in general, by any applicable national and international legislation in force from time to time.
The legal basis for the processing is identified (by way of example) in the provision of your consent to the processing of your personal data.
2. Personal data subject to processing
2.1 Personal data
In particular, the personal data in question concern (by way of example):
- name, address or other elements of personal identification (common data).
2.2 Special categories of data
In carrying out its activities, it may happen that MOTO CLUB ADVENTURE RIDING ASD processes special categories of data, such as, by way of example, health data and personal data revealing health status.
3. Data retention period
The data will be stored according to the following criteria:
- for no longer than is necessary to achieve the purposes for which they are processed;
- for no longer than is necessary to comply with legal obligations.
4. Methods of use of the data
Data processing is carried out using paper supports and electronic tools, with suitable measures to ensure security and confidentiality, aimed at preventing unauthorised access, loss or destruction, in accordance with the provisions of Chapter II (Principles) and Chapter IV (Controller and Processor) of the Regulation. Data may be processed by persons, internal or external, specifically authorised and bound by confidentiality obligations.
5. Scope of data circulation
Data may also be processed by third-party companies that carry out activities on behalf of the Data Controller, as external data processors (by way of example and not exhaustively: credit institutions, professional firms, suppliers/consultants that manage and/or participate in the management and/or maintenance of the electronic and/or telematic tools used by us, insurance companies for the provision of insurance services, for the time strictly necessary to perform such service). Your personal data will be made accessible only to those who actually need them in relation to their duties or hierarchical position. Such subjects will be duly instructed in order to avoid loss, destruction, unauthorised access or unlawful processing of the data.
Without your express consent (pursuant to art. 6, letters b) and c) of the Regulation), the Data Controller may disclose your data to supervisory bodies, judicial authorities and all other subjects to whom disclosure is mandatory by virtue of an express legal provision.
6. Nature of the processing
We remind you that, with reference to the purposes indicated in paragraph 1 – Purpose and legal basis of the processing, letters a), b) and f):
- providing your personal data is mandatory.
We remind you that, with reference to the purposes indicated in paragraph 1 – Purpose and legal basis of the processing, letters c), d) and e):
- providing your personal data is optional.
Any refusal and/or the provision of inaccurate and/or incomplete information would prevent:
- letter a) from allowing your participation in the event, course or other initiative organised by MOTO CLUB ADVENTURE RIDING ASD;
- letter b) from performing the activities connected to the relationship established by signing the registration form, including activities related to the management of relations with insurance companies;
- letter c) from processing market studies and statistical research;
- letter d) from sending advertising and information material and commercial communications, also by e-mail and telephone;
- letter e) from carrying out surveys on the level of customer satisfaction regarding the quality of the services;
- letter f) from complying with obligations laid down by laws, regulations, the by-laws and sports federation regulations and, in general, by any applicable national and international legislation in force from time to time.
7. Data disclosure
Data will not be disclosed to unspecified third parties.
8. Transfer of data abroad
Data will not be transferred outside the European Union. It is understood, however, that the Data Controller, where necessary, may move the location of the servers to non-EU countries. In such case, the Data Controller hereby guarantees that any transfer of data outside the EU will take place in accordance with arts. 44 et seq. of the Regulation and the applicable legal provisions, entering into, where necessary, agreements that ensure an adequate level of protection.
9. Data Controller and Data Protection Officer
The Data Controller is MOTO CLUB ADVENTURE RIDING ASD, with registered office in Via Borgo, 1 - 22070 Appiano Gentile (CO), Italy, VAT no. 10527650963. Any request relating to personal data processed by MOTO CLUB ADVENTURE RIDING ASD may be sent to the association’s registered office or by writing to the certified e-mail address mcadventureriding.ssd@pec.it
10. Exercise of rights
As data subject, you may exercise the rights provided for by the Regulation, namely:
a) the right, pursuant to art. 15, to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: i) the purposes of the processing; ii) the categories of personal data concerned; iii) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; v) the existence of the data subject’s right to request from the Controller rectification or erasure of personal data or restriction of processing concerning the data subject or to object to such processing; vi) the right to lodge a complaint with a supervisory authority, pursuant to arts. 77 et seq. of the Regulation; vii) where the personal data are not collected from the data subject, any available information as to their source; viii) the existence of automated decision-making, including profiling, referred to in art. 22, paras. 1 and 4 of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject; ix) the right to be informed of the existence of appropriate safeguards pursuant to art. 46 of the Regulation relating to the transfer, where personal data are transferred to a third country or to an international organisation;
b) the data subject will also (where applicable) have the possibility to exercise the rights referred to in arts. 16–21 of the Regulation (right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object).
We inform you that MOTO CLUB ADVENTURE RIDING ASD undertakes to respond to your requests no later than one month from the date of receipt. This period may be extended depending on the complexity or number of requests, and MOTO CLUB ADVENTURE RIDING ASD will inform you of the reason for the extension within one month of your request. The outcome of your request may be provided in writing, either on paper or in electronic format.
11. How to exercise your rights
The data subject may exercise the above-mentioned rights at any time in the following ways:
by sending an e-mail to the certified address: mcadventureriding.ssd@pec.it
Data Controller
MOTO CLUB ADVENTURE RIDING ASD
Please note that, with reference to the purposes indicated in paragraph 1 – Purpose and legal basis of the processing, letters a), b) and f): providing your personal data is mandatory.
