INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679
Days Off Adventures ASD, with registered office in Via San Marco 3, 23017 Morbegno (SO), in its quality as Data Controller, in fulfilment of the obligation to inform the interested parties of the fundamental elements of the processing of personal data, specifies below the methods and purposes of the processing of personal data. Processing means any operation or set of operations concerning the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of personal data.
PURPOSE OF PROCESSING
The organising association of the cycling event Gravellina only processes personal data collected directly from the person concerned. The processing of personal data is done by means of paper and computer tools, in a manner designed to prevent violations of the rights, fundamental freedoms and dignity of the person concerned, kept archived only for the time strictly necessary for the provision of services or in compliance with legal provisions. Tax documents, on the other hand, will be kept safely archived within the tax assessment period.
LEGAL BASES OF PROCESSING
Registration for the event will require only personal data strictly necessary for the stated purposes and processed in accordance with EU Reg. 2016/679. The processing is legitimised by the following legal bases:
– Art. 6 par.1 letter b) processing necessary for the performance of a contract or pre-contractual measures to which you are a party (e.g. for insurance or membership);
– Art. 6 par.1 letter c) in order to comply with a legal obligation (e.g. for the issue of tax receipts);
– Art.6 par.1 letter f) for legitimate interest of the Data Controller, e.g. for organisational or urgent needs, to carry out surveys in order to collect feedback on the event, observing Recital 47, the Data Controller may process data of its customers for communications regarding previously purchased or similar products/services, e.g. to inform about new events; all electronic communications will be carried out in compliance with the Directive 2002/58/EC on “electronic communications”.
In compliance with Law 633/1941 on “copyright” ex-article 97, which states “the consent of the person portrayed is not required when the reproduction of the image is justified by reputation or public office covered, by the need for justice or the police, by scientific, educational or cultural purposes, or when the reproduction is connected with facts, events, ceremonies of public interest or held in public”, the processing and publication of images of spectators or persons portrayed in photographs is legitimised by art. 6 par. 1 letter f.
Any processing not included in the above will be done pursuant to Art. 6(1)(a) with the consent of the person concerned. Art. 4(11) of EU Reg. 2016/679 defines consent as “any freely given, specific, informed and unambiguous expression of will” manifested through an “unambiguous positive statement or action”.
PROCESSING OF PERSONAL DATA WITH YOUR CONSENT
Only with your free, specific and informed consent we will process your personal data for:
– Marketing purposes: The data controller may periodically send you offers, promotions, coupons even if not related to the service or product you have already purchased or of a similar category
Maximum frequency: monthly
– Transfer to third parties:
Your personal data may be transferred to: partners and sponsors of Gravellina.
Maximum frequency: weekly
You can revoke or refuse your consent at any time without prejudice by clicking on ‘unsubscribe’ or by communicating your will to the Data Controller.
OBLIGATORY OR OPTIONAL NATURE OF PROVIDING DATA
The provision of data is mandatory. Refusal, even partial, may result in exclusion from participation; personal data processed with the explicit consent of the person concerned is optional.
AREA OF COMMUNICATION AND DISSEMINATION
All persons formally designated and authorised to process data may be aware of your data in accordance with their respective authorisation profiles.
The data may also be communicated to the following categories of subjects:
- Tax consultant for the management of accounting activities
- U.I.S.P. (Association for sports and social promotion recognised by CONI)
- C.O.N.I.
- Insurances
The personal data provided will not be disseminated or processed outside the European Union.
RIGHTS GRANTED TO THE DATA SUBJECT
The data subject has the right at any time to exercise the rights set out in Articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Regulation 679/2016. In particular, he/she has the right to obtain confirmation of the existence or non-existence of the data provided (content and origin), to verify the purposes of the processing, the recipients or categories of recipients to whom the personal data are or will be communicated, the storage period, he/she has the right to request rectification, erasure or restriction of processing, the right to complain to a supervisory authority, the existence of an automated decision-making process and the logic used, the right to be forgotten, the right to portability and to know if the data are transmitted to a third country.
To exercise their rights, the data subject may contact the Data Controller by writing to doa-asd@pec.it.