PRIVACY POLICY – CONSUMER COUNTER

Information notice pursuant to Article 13 of the Reg. UE 2016/679 (GDPR)

1.WHO IS THE DATA CONTROLLER? HOW TO CONTACT THEM?

The data controller, pursuant to Articles 4 and 24 of EU Regulation 2016/679, is the Association Data Protection Officer (ASSO DPO), headquartered at Viale Monza, 44- 20127 - Milan, VAT number 08258580961, Tax code 97656960156, represented by its President and legal representative pro-tempore, Dr. Matteo Colombo.
To contact the data controller: email info@assodpo.it or toll-free number 800561720

2. PURPOSE OF PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD, NATURE OF PROVISION

Purpose A)
Completion of the form to use the services of the "Consumer counter" (art. 2, paragraph 4, Law 4/2013): to obtain information regarding the professional activity in general and the quality standards required of members, as well as to report any complaints in case of disputes with individual professionals, with the commitment of the professional Association to the agreed resolution of the consumer's reported dispute.

LEGAL BASIS: legal obligation (Art. 6 para. 1 lett. c) GDPR), the Association must promote forms of guarantees to protect the user in case of disputes with individual professionals, as well as provide feedback in case of requests regarding the professional activity in general and the quality standards required of members (Art. 2, para. 4 Law 4/2013).
DATA RETENTION PERIOD: In the case of simple requests for information regarding the professional activity in general and the quality standards required of members, for the time necessary to provide a response to the request and in any case not exceeding 1 year. In the case of reports and for the management of disputes with individual professionals, for the period necessary for the management and resolution of the dispute.
NATURE OF PROVISION: The provision of data is necessary to use the services of the "Consumer Counter". Failure to provide data marked with an asterisk (*) or label (required), will result in the ipossibility to use the services at this point.

3.TO WHOM WILL THE PERSONAL DATA BE DISCLOSED? DATA RECIPIENTS

The personal data will be disclosed to subjects who will process the data acting as independent Data controllers or Data processors (Art. 28 GDPR) and processed by individuals (Art. 29 GDPR) acting under the authority of the Data Controller and Data Processors based on specific instructions provided regarding the purposes and methods of processing.
The data will be disclosed to recipients belonging to the following categories:

companies, based in Italy, contractually linked to the Association Data Protection Officer;
entities, based in Italy, providing services for the website and communication networks, including email, hosting, and website management;
entities, based in Italy, providing services for the management of the information system used by the Association Data Protection Officer and telecommunication networks;
freelancers, firms, or companies within the scope of assistance and consultancy relationships;
competent Authorities for compliance with legal obligations and/or provisions of public bodies.

The list of Data Processors is constantly updated and available by writing to info@assodpo.it or at the legal headquarters of the Controller.

4.DOES ASSO DPO TRANSFER THE DATA TO COUNTRIES OUTSIDE THE EEA?

The personal data provided through the completion of the form to use the services of the “Consumer counter” will not be transferred to countries located outside the European Economic Area (EEA).

If it becomes necessary to transfer the personal data of data subjects to Countries located outside the EEA, this will occur in compliance with the limits and conditions set forth in Articles 44 and following of EU Regulation 2016/679. The data subject may obtain information about the guarantees for data transfer by writing an email to info@assodpo.it or at the legal headquarters of the Controller.

5.IS THERE AN AUTOMATED PROCESS?

The personal data will be subject to traditional manual, electronic, and automated processing. It is specified that no fully automated decision-making processes are carried out.

6.WHAT ARE THE RIGHTS OF DATA SUBJECTS? HOW TO EXERCISE THEM?

Data subjects may assert their rights as expressed in Articles 15 and following of the GDPR by contacting the Data Controller at the email address: info@assodpo.it, or by writing to the above-mentioned contacts.
The Controller guarantees data subjects the possibility to request, at any time, access to their personal data (Art. 15), rectification (Art. 16), erasure of the same (Art. 17), and the restriction of processing (Art. 18). The data controller communicates (Art. 19) to each of the recipients to whom the personal data have been transmitted any rectifications, erasures, or restrictions of processing made. The data controller communicates to the data subjects who request it such recipients.

If data subjects believe that the processing of personal data carried out by the Controller violates the provisions of Regulation (EU) 2016/679, they are free to lodge a complaint with the national supervisory authority, particularly in the Member State where they habitually reside or work, or where the alleged violation of the Regulation occurred (Data Protection Authority, https://www.garanteprivacy.it/), or to resort to the appropriate judicial remedies.

7.AMENDMENTS TO THE PRIVACY POLICY

The controller may change, modify, add, or remove any part of this Privacy Policy. In order to facilitate the verification of any changes, the policy will contain the indication of the update date.

Date of review: 21/02/2024