Riverside Roma ASD

INFORMATION ON THE PROCESSING OF PERSONAL DATA
(Articles 13 and 14, EU Regulation 679/2016)

Dear Sir/Madam,
European Regulation no. 679/2016, to be applied in all Member States, recognizes that every individual has the protection of his or her personal data that are processed by third parties as an expression of respect for human dignity, fundamental human rights and freedoms.
On the basis of the aforementioned Regulations, we wish to inform you that the processing of your data will be carried out by us in full compliance with the principles of lawfulness, fairness, transparency and protection of the confidentiality of your data and rights, in accordance with the provisions of the said legal provisions.
We would like to clarify that, for the establishment of the relationship with our Committee and for the fulfillment of specific legal obligations we need to acquire your personal data, or we will need to acquire them later, without your further consent, implied in your application for affiliation, admission to membership or registration in an activity organized by the Body.
For all purposes additional to the performance of the relationship with our Committee, listed below in Section 1.5, there is an obligation under Art. 7 of EU Regulation 679/2016, to request and obtain in writing, your informed consent.
Said consent is to be considered freely lendable by the person concerned, without it being in any way binding on the performance of the association relationship, being grounds for the termination of said relationship or resulting in the failure to perform the obligations provided for therein or related thereto.
In accordance with the provisions of current European and internal regulations, we inform you that the data you provide will be processed by the Committee as follows.

1. Legal basis and purpose of processing

1.1 The processing is based on your consent and on the legitimate interest of the undersigned Institution: membership enrollment, communication to the Coni and the insurance company and any other use pertaining to the aforementioned association, membership and enrollment relationships in the institutional activities of the Institution.
1.2 Legal basis for processing is Art. 36 c.c., the tax regulations related to noncommercial entities, in particular Art. 148 of the T.U.I.R., Art. 4 of Presidential Decree 633/72, as well as the internal rules of the Entity and CONI.
1.3 The legitimate interests of the data controller pursued by this activity are a clear and correct application of the statutory provisions on the internal organization and administration of the Committee, the possibility of taking advantage of the tax benefits due to the Body, and the possibility of organizing institutional activities aimed at members.
1.4 The purposes of the compulsory processing of your data are related to the performance of the association relationship, the fulfillment of legal regulations and obligations to which the Data Controller is subject, and the pursuit of legitimate interests (referred to above) of the Data Controller or of third parties, where authorized in advance.
1.5 Additional purposes, subject to separate signed consent and not binding for the purposes of the membership relationship, are:
– Sending communications pertaining to news concerning the Committee or the associative world and the institutional, sports and educational activities organized by the Committee, reserved for members and in no way of a commercial nature.

2. Methods of processing

2.1 The processing and storage of data will be carried out with the help of automated and/or paper-based computer means and tools, such that you have access to your personal data in ours. possession in the most appropriate manner to ensure their integrity, updating, security and confidentiality, also protecting them from unauthorized and/or unlawful processing, as well as from the
Loss, destruction, or from accidental damage.
2.2 Pursuant to Art. 4 n. 2 of the G.D.P.R. the processing of personal data may consist of the following
Collection, recording, organization, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data.
2.3 Without prejudice to the disclosures that are made in compliance with legal obligations, the data may be disclosed to external parties that perform specific tasks on behalf of the writer, subject to their express commitment to the protection of your personal data in accordance with the provisions of this Notice and the rules on the Data Processor set out in Articles 28 et seq. of EU Regulation 679/2016, as well as the applicable legal regulations.

3. Duration of treatment.

3.1 Data processing will take place for the duration of the association relationship established between the parties.
3.2 After the conclusion of this relationship, in order to comply with legal obligations of a civil and fiscal nature, as well as any other legal fulfillment/obligation to which the Data Controller is bound, the data will be kept for 10 years.

4. Compulsoriness of treatment

4.1 The provision of data is compulsory for the achievement of the purposes of the Bylaws of the Institution and therefore essential for the acceptance of your application for membership/admission to membership, for membership and for registration in institutional activities organized by the Institution. Any refusal to provide them will result in the impossibility of accepting your application, since in such a case it will not be possible to establish the indicated association and/or membership relationship and/or registration for institutional activities.
4.2 The processing of your data for the purposes set out in 1.5 is subject to separate consent, which is not mandatory for the membership relationship and can be revoked at any time without any consequence on your relationship with the Institution.

5. Scope of data reporting

5.1 The data you provide may be communicated exclusively to the head office, CONI and the insurance company for the proper conduct of the association relationship, to the Public Administrations for legal fulfillments and verifications, and to the collaborators of the Committee, subject to assignment and their assumption of written responsibility for the processing of your data, for the proper conduct of the institutional activities of the Organization.
5.2 All data will not be disclosed to other parties, nor will it be disseminated.

6. Data controller

6.1 The data controller is: Riverside Roma ASD, based in ROME, Via Isola del Giglio, 6, tax code 96586120584.
6.2 Possible Data Processors will be appointed, upon the Holder’s conferral of external tasks for the performance of which it is necessary to share your data, from among those who present sufficient guarantees to put in place adequate technical and organizational measures so that the processing meets the requirements of the Regulations and guarantees the protection of the data subject’s rights, and subject to the Manager’s signing of a special letter of appointment containing the requirements and specifications of the processing itself.

7. Rights of the data subject

7.1 At any time you may exercise, by written request to the Data Controller identified above, all the rights recognized by the applicable European and domestic legislation and in particular by Articles 13, 14, 15 to 22 and 34 of the European Regulation and the national legislation in force, and specifically:

(a) the right to obtain free access to and/or a copy of your personal data undergoing processing in a structured, commonly used and machine-readable format;
(b) the right to obtain free of charge the updating, rectification of inaccurate data, restriction of processing or, when interested, the integration of data;
(c) the right to object, in whole or in part, to the processing of personal data concerning you, even if pertinent to the purposes of collection for legitimate reasons, or to withdraw, in whole or in part, your consent where it is necessary;
d) the right to file a complaint with a supervisory authority (Data Protection Authority) or judicial authority.

7.2 The full list of the data subject’s rights is available in hard copy at the Data Controller’s Office, by email upon written request from the same, and in digital format on the association’s website.
7.3 These rights can be exercised through specific application, to be sent to the data controller, in the manner:
by registered mail addressed to: Riverside Roma ASD, Via Isola del Giglio,6 00141 Rome;
via email to info@riversideroma.it
via PEC to the address: riversideroma@legalmail.it