Information regarding the processing of personal data.


Pursuant to the Personal Data Protection Code (Legislative Decree No. 196/2003, as amended by Legislative Decree No. 151/2015 and Law 122/2016) in compliance with Reg. Eu. 2016/679 and in relation to the consent to the processing of personal data conferred in a separate statement certifying the conferment of such consent, and in relation to the personal data of which Tosconova Srl will come into possession, we inform you of the following:


1. Data controller
The data controller is Tosconova Srl in the person of the legal representative Lorenzo Michelacci, with registered office in Via Firenze, 169 – 51039 Quarrata (PT) – Tuscany – Italy or any other domiciles elected for this purpose.


2. Responsible for processing
The data controller is the data controller as identified above.


3. Methods of data processing
Personal data are collected on paper, or electronically or in any case automated, directly by the interested party, or in the case of a child by parental authority, with the simultaneous delivery of this information, or at the latest within one month from the signature consent to treatment. Processing can only be performed by the data controller and / or the data processor, with or without the aid of electronic or automated tools. The treatment will meet the requirements of lawfulness and fairness, and a record of the processing activities will be kept in order to guarantee the security of the personal data held.


4. Purposes of data processing
The processing of personal and identification data is aimed solely at the correct and complete execution of the association activities, the keeping of the agenda, the address book, and management of contacts; the processing of personal and identification data is aimed solely for the associative insurance position, the publication of the association activities, also through data storage for organizational purposes in the context of all activities carried out by the association, for promotional purposes, for advertising purposes on each platform in which the association believes it can reach the public, as well as the extraction of statistical information, and in any case with different purposes but compatible with the purposes indicated above.


5. Refusal to provide data
Being the provision of data strictly necessary for the purposes of the performance referred to in previous n. 4 of the present informative note, the refusal of the interested party to the communication of said data implies the impossibility to proceed to the registration to the association.


6. Withdrawal of consent
The interested party has the right at any time to revoke the consent previously given, free of charge, and by any means suitable for achieving the purpose. This revocation does not affect the lawfulness of any lawful and correct use of personal data processed in the period following the consent and prior to the revocation.


7. Communications and dissemination of data
Personal data may come to the attention of those in charge of processing, are not subject to dissemination, but may be transferred to European Union countries and to third countries for the purposes referred to in point 4). For specific prediction, the interested party is made aware that the publication of images, particularly on the Internet, involves the potential loss of availability of said image; consequently any processing carried out by parties other than the Data Controller can not be the cause of any request, patrimonial or non-patrimonial, with complete renunciation of any action against the owner.


8. Rights of the interested party

The interested party is given the exercise of specific rights, including the right to obtain from the holder confirmation of the existence or otherwise of their personal data and their availability in an intelligible and free form; the interested party has the right to know the origin of the data, the purposes and methods of the processing, the logic applied to the processing, the identification details of the data controller and the subjects to whom the data may be communicated; the interested party also has the right to obtain, without delay, the updating, rectification and integration of data, cancellation, transformation into anonymous form or blocking of data processed, in violation of the law; the data subject has the right to oppose, for legitimate reasons, the processing of data, unless the data controller demonstrates that there are binding interests prevailing over the fundamental rights and freedoms of the data subject. The interested party also has the right to know, and therefore corresponds to the owner’s obligation to communicate them, any violation of personal data if said violation involves a high risk for the rights and freedoms of the interested party. With regard to the right to be forgotten, the interested party is informed that in case of request for cancellation of any personal data during the course of the processing the holder will immediately delete the data in each area they are lawfully and correctly in the availability of the same, but by virtue of the aforementioned in point 7), the effects of the cancellation may not be effective and lasting.


9. Verification of consent
Data retention is determined in the maximum allowed period. It will be at the discretion of the owner to set a time limit on the retention of data, or verify the permanence of consent at certain deadlines.