INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL
(GENERAL DATA PROTECTION REGULATION - GDPR)
***
MOTO CLUB ADVENTURE RIDING ASD, with registered office in Via Borgo, 1 - 22070 Appiano Gentile (CO), Italy, VAT No. 10527650963, as data controller (hereinafter “Controller”), informs you pursuant to Article 13 of EU Regulation No. 679/2016 (hereinafter, the “Regulation”) that the personal data voluntarily provided by you may be processed in the manner and for the purposes indicated below and, in any case, in compliance with the principle of confidentiality.
1. Purpose and legal basis of processing
Your personal data will be processed (for the definition of “processing”, see art. 4, par. 2 of the Regulation)
for the following purposes:
a) to allow your participation in the event, course or other initiative organized by MOTO CLUB ADVENTURE RIDING ASD;
b) to carry out activities connected to the relationship established by signing the registration form, including activities related to managing relations with insurance companies;
c) to carry out market studies and statistical research;
d) to send advertising material, informational content and commercial communications, including by email and telephone channels;
e) to conduct customer satisfaction surveys on service quality;
f) to fulfill:
- obligations required by law, regulations, statutes and federation rules and, in general, by the legislation applicable from time to time at both national and international level.
The legal basis for processing is identified (by way of example) in the granting of consent to the processing of your personal data.
2. Personal data subject to processing
2.1 Personal data
In particular, the personal data concerned may include (by way of example):
- name, address or other elements of personal identification (ordinary data).
2.2 Special categories of data
It may happen that MOTO CLUB ADVENTURE RIDING ASD, in carrying out its activities, processes special categories of data, such as, by way of example, health data and personal data capable of revealing health status.
3. Data retention period
The data will be retained according to the following criteria:
- for a period not exceeding that necessary to achieve the purposes for which they are processed;
- for a period not exceeding that necessary to fulfill legal obligations.
4. Methods of data use
The processing of data is carried out on paper and with electronic tools, with suitable measures to guarantee their security and confidentiality, aimed at preventing unauthorized access, loss or destruction, in compliance with the provisions of Chapter II (Principles) and Chapter IV (Controller and Processor) of the Regulation. The data may be processed by internal or external parties specifically authorized and bound by confidentiality obligations.
5. Scope of data circulation
The data may also be processed by third-party companies carrying out activities on behalf of the Controller, in their capacity as external data processors (purely by way of example and not limited to: credit institutions, professional firms, suppliers/consultants who manage and/or participate in the management and/or maintenance of the electronic and/or telematic tools used by us, insurance companies for the provision of insurance services, for the time strictly necessary for the optimal execution of such service). Your personal data will be made accessible only to those who have an actual need in relation to the performance of their duties or hierarchical position. Such subjects will be properly instructed in order to avoid loss, destruction, unauthorized access or unlawful processing of the data.
Without your explicit consent (pursuant to art. 6 letters b) and c) of the Regulation), the Controller may communicate your data to supervisory bodies, judicial authorities and all other subjects to whom communication is mandatory by express provision of law.
6. Nature of processing
Please note that, with reference to the purposes set out in paragraph 1 – Purpose and legal basis of processing, letters a), b) and f):
- the provision of your personal data is mandatory.
Please note that, with reference to the purposes set out in paragraph 1 – Purpose and legal basis of processing, letters c), d) and e):
- the provision of your personal data is optional.
Any refusal and/or provision of inaccurate and/or incomplete information would make it impossible:
- letter a) to allow your participation in the event, course or other initiative organized by MOTO CLUB ADVENTURE RIDING ASD;
- letter b) to carry out activities connected to the relationship established by signing the registration form, including activities related to managing relations with insurance companies;
- letter c) to carry out market studies and statistical research;
- letter d) to send advertising material, informational content and commercial communications, including by email and telephone channels;
- letter e) to conduct customer satisfaction surveys on service quality;
- letter f) to fulfill obligations required by law, regulations, statutes and federation rules and, in general, by the legislation applicable from time to time at both national and international level.
7. Disclosure of data
The data will not be disclosed to unspecified subjects.
8. Transfer of data abroad
The data will not be transferred outside the European Union. It is understood, however, that the Controller, should it become necessary, may move the location of the servers to non-EU countries. In such a case, the Controller assures you from now on that the transfer of data outside the EU will take place in accordance with Articles 44 et seq. of the Regulation and the applicable legal provisions, stipulating, where necessary, agreements guaranteeing an adequate level of protection.
9. Controller and Data Protection Officer
The Data Controller is MOTO CLUB ADVENTURE RIDING ASD, with registered office in Via Borgo, 1 - 22070 Appiano Gentile (CO), Italy, VAT No. 10527650963. Any request relating to personal data processed by MOTO CLUB ADVENTURE RIDING ASD may be sent to the Association’s registered office or by writing to the certified email address mcadventureriding.ssd@pec.it
10. Exercise of rights
As a data subject, we inform you that you may exercise the rights provided for by the Regulation, namely:
a) the right, pursuant to art. 15, to obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, to obtain access to the personal data and the following information: i) the purposes of the processing ii) the categories of personal data concerned;
iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; v) the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing; vi) the right to lodge a complaint with a supervisory authority pursuant to Articles 77 et seq. of the Regulation; vii) where the data are not collected from the data subject, any available information as to their source; viii) the existence of automated decision-making, including profiling referred to in Article 22(1) and (4) of the Regulation and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
ix) the right to be informed of the existence of appropriate safeguards pursuant to Article 46 of the Regulation relating to transfer, where personal data are transferred to a third country or an international organization;
b) where applicable, the data subject may also exercise the rights referred to in Articles 16-21 of the Regulation (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object).
We inform you that MOTO CLUB ADVENTURE RIDING ASD undertakes to respond to your requests no later than one month from the date of receipt. This period may be extended depending on the complexity or number of requests and MOTO CLUB ADVENTURE RIDING ASD will explain the reason for the extension within one month of your request. The outcome of your request may be provided in writing, either in paper form or electronically.
11. How to exercise your rights
The data subject may at any time exercise the above-mentioned rights in the following manner:
by sending an email to the certified address: mcadventureriding.ssd@pec.it
Data Controller
MOTO CLUB ADVENTURE RIDING ASD
Please note that, with reference to the purposes set out in paragraph 1 – Purpose and legal basis of processing, letters a), b) and f): - the provision of your personal data is mandatory.
