PRIVACY POLICY – JOIN THE WORKING GROUPS / SCIENTIFIC COMMITTEE

Information notice pursuant to Art. 13 of the Reg. UE 2016/679 (General Data Protection Regulation | GDPR)

1. Who is the data controller? How to contact him?

Pursuant to art. 4 ad 24 Reg UE the Data Controller is Associazione Data Protection Officer (ASSO DPO), with registered office in 20121 Milano - P.le Principessa Clotilde n. 6, P.IVA 08258580961, C.F. 97656960156, in person of its Legal Representative Dott. Matteo Colombo.

Data Controller’s contact details: email info@assodpo.it; telephone number: 800561720.

2. Purpose of processing, legal basis, data retention and nature of conferral

Purpose A)

Filling in forms to send your application to join the working groups / scientific committee of the Association Data Protection Officer ASSO DPO.

LEGAL BASIS: legitimate interest | request of the data subject (art. 6 par. 1 lett. f) and recital 47: for the constitution of the working groups / scientific committee necessary for the pursuit of the aims of the association itself, minding also the relationship existing between the data subject (associate) and the Data Controller.
DATA RETENTION: in case of non-selection of the data subject - 12 months; in case of selection of the data subject - duration of the mandate of the working group / scientific committee and after the termination 10 years.
NATURE OF CONFERRAL: the provision of data marked with the symbol* or indication (required) is mandatory to apply. Failure to provide the data will make it impossible to send your application to join the working groups / scientific committee.

Purpose B)

Disclosure of personal data, including image (photograph), in the section of the site for members of the Scientific Committee.

LEGAL BASIS: consent (art. 6, lett. a GDPR): the data subject has provided consent to the processing of his personal data.
DATA RETENTION: data will be retained until opposition (opt out/consent withdrawal).
NATURE OF CONFERRAL: data conferral for this purpose is optional and, where lacking, personal data won’t be processed for such purpose; the denial of conferral will not undermine benefits from other purposes.

3. Who the collected data will be communicated to?

Provided data will be shared with recipients who will treat them as data Processors (art. 28 Reg. UE 2016/679) and/or as natural person acting under the controller’s or processor’s authority (art. 29 Reg. UE 2016/679) for former purposes.

Namely, data will be shared with:

companies contractually associated to the Data Protection Officer Association;
subjects who provide services for the management of the information system used by the Data Protection Officer Association and telecommunications networks;
professionals, studies or companies in the assistance and consultancy field;
subjects that provide services for the management of the activities indicated above (subjects for communication, website management), only with prior consent;
competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;
other associated, upon request.

The list of the data Processors is constantly updated and available writing to info@assodpo.it or sending a traditional mail to the Data Controller registered office.

4. Does Asso DPO transfer data to a third country and/or to international organisations?

Personal data processed for the above purposes will not be transferred to countries outside the European Economic Area (EEA). In the event that the interested party consents to the disclosure of personal data on the website of the Association, the servers connected to the site are located in Europe (to be precise, in Belgium).

5. Are personal data processed by an automated mean?
We do not process data by automated mean, profiling included.

6. Which rights am I entitled to? How can I exercise them?

You can exercise your rights, as required by art. 15 and subsequent of the General Data Protection Regulation UE 2016/679 (GDPR) contacting the data Controller at the email address: info@assodpo.it. You have the right, at any time, to obtain from the data Controller the access to your personal data, request their rectification, erasure or processing restriction and, if applicable, data portability. In case of request for data portability, the Data Controller will provide your personal data in a structured format, commonly used and readable by automatic device. Furthermore, you have the right to object anytime to your personal data processing based upon legitimate interest. Where applicable, you have the right to withdraw consent without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.

Without prejudice to any other administrative or judicial remedy, in case you consider the processing conflicting with Reg. UE 2016/679, pursuant to article 15 lett. f) you have the right to lodge a complaint with a supervisory authority (www.garanteprivacy.it).

7. More information
Data controller retains the right to modify, update, add or remove parts of this statement at his own discretion, in any moment. In order to facilitate such verification, the information notice will include the date of update.

Date of review: 29/04/2021