1 LEGAL BASIS AND PURPOSE OF THE TREATMENT
The legal basis of the processing lies in the d.gs. 242/1999 and ss. mm., in the current regulations on fitness to practice sports (D.M. 18/02/1982 and D.M. 24/04/2013) and in the CONI Statute.
The processing is aimed solely at the achievement of the institutional purposes promoted by the ASD within the limits of its statutory provisions, including the communication to CONI for the purposes of managing the Register of Amateur Sports Associations and Societies and for its own institutional activities and dissemination, also by means of web, press and television, of photographic images / video footage aimed at revealing the identity of the data subject (1a).
The processing, with the consent of the interested party, may also be aimed at sending information of a commercial and promotional nature from companies in the sports sector and companies with which FIRaft or CONI have contractual relationships (1b), in compliance with as established by the GDPR.
2. METHOD OF TREATMENT
The treatment will be carried out in the following ways: on manual cards, also made with the aid of electronic means, stored in closed places with selected access, or in a computerized manner through media against IT risks (firewall, antivirus, periodic data backup ). Pursuant to art. 4 n. 2 of the GDPR, the processing of personal data may consist of the collection, registration, organization, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
3. PROVISION OF DATA AND REFUSAL
The provision of common personal data is strictly necessary for the purposes of carrying out the activities referred to in point 1a. The consent for the use of data for the purposes referred to in point 1b is, on the other hand, optional. Any refusal by the interested party to provide personal data in the case referred to in point 3 would make it impossible to carry out the activities referred to in point 1a. Any refusal to process data for the purposes referred to in point 1b, on the other hand, will have no consequence on the registration request.
4. COMMUNICATION OF DATA
Personal data may come to the knowledge of the persons in charge of processing and may be communicated for the purposes referred to in point 1a to CONI, FIRAFT to insurance companies, external collaborators and, in general, to all those subjects to whom communication is necessary for the correct fulfillment of the purposes indicated in point 1a. The companies to which the data may also be communicated for the purposes referred to in point 1b will operate as independent Data Controllers.
5. DISCLOSURE OF DATA
Personal data are not subject to disclosure, without the explicit consent of the interested party.
6. TRANSFER OF DATA ABROAD
Personal data may be transferred to countries of the European Union and to third countries with respect to the European Union within the scope of the purposes referred to in point 1a.
7. DATA RETENTION
The data is kept for the period strictly necessary for carrying out the activity referred to in point 1a in accordance with the provisions of the civil code, tax legislation and CONI rules and regulations and for a period not exceeding ten years. The verification of the obsolescence of the data being processed with respect to the purposes for which they were collected and processed is carried out periodically. There is no automated decision-making process or any profiling activity referred to in Article 22, paragraphs 1 and 4 of the GDPR.
8. RIGHTS OF THE INTERESTED PARTY
The interested party has the right: to access, rectify, cancel, limit and oppose the processing of data; to obtain, without hindrance, from the Data Controller the data in a structured format of common use and readable by an automatic device to transmit them to another data controller; to revoke the consent to the processing, without prejudice to the lawfulness of the processing based on the consent acquired before the revocation; propose a complaint to the Guarantor Authority for the Protection of Personal Data or to the different supervisory authority that should be established by the Decree provided for in the Community Law no. 163/2017.
9. HOLDER OF THE TREATMENT
The data controller is LUCCARAFTING SSD A RL Registered office via Custer de Nobili 236, 55100 Lucca (LU)