The CEV collects and maintains the personal data of its members according to the criteria already stated at the beginning of this document (see). In particular, the following are the purposes and general specifications that extend and complete the information already reported regarding the Privacy Policy relatively to the web site.
Purposes for which we need the data of the interested party (Article 13, paragraph 1 of the GDPR)
The data are used by the Data Controller to process the registration request in the “members book” and to provide the training activity and / or the selected business activity and / or manage and execute the contact requests sent by the interested party, provide assistance, comply with the legal and regulatory obligations to which the Controller is held according to the activity carried out.
In no case will the CEV resell or forfeit the personal data of the interested party to any third parties or use them for undeclared purposes. In particular the data of the interested party will be processed for:
a) registration and contact requests and / or information material
The processing of personal data of the interested party takes place to carry out the preliminary and consequent activities and to fulfill the registration request, the management of requests for information and to contact and / or send information material, as well as for the fulfillment of any other obligation arising. The legal basis of these uses is the fulfillment of the services inherent to the request for registration, information and contact and / or sending of informative material and compliance with legal obligations.
b) management of the associative relationship;
- E-mail
- WhatsApp
- Telephone
- The processing of personal data of the interested party takes place to start the preliminary activities and consequent activities to fulfil the registration request, for the management to one or more activities (training and / or social), the management of the aforementioned registration, the frequency of the activity and / or the shipment ( in the case of distance courses) of the material relating to the activity, the management of any contributions and the issue of receipts, the handling of complaints and / or reports to the assistance service and the provision of the assistance itself, the prevention fraud and the fulfilment of any other obligation arising from the associative relationship. The legal basis of these uses is the fulfilment of the services inherent in the associative relationship in compliance with the legal obligations.
c) promotional activities on courses / activities similar to those already attended by the interested party (Recital 47 GDPR)
The data treatment owner may also, without explicit consent, use the contact data given by of the interested party itself with the aim of informing him/her about the Association classes and learning activities similar to the ones already taken, unless the user opposes explicitly this treatment (or unsubscribes from our mailing lists).
d) Promotional activities on other courses /Activities
The personal data of the interested party may also be processed for promotional purposes regarding courses / activities offered by the Data Controller. This treatment can take place in the following ways:
- email
- telephone contact
and can be done:
- if the interested party has not revoked his consent for the use of the data;
- if the interested party is not registered in the register of oppositions referred to in the D.P.R. n. 178/2010, in the event that the processing takes place through contact with the telephone operator;
The legal basis of such processing is the consent given by the interested party prior to the processing itself, which can be revoked by the interested party freely and at any time (see Section IV).
e) computer security
The CEV, in line with the provisions of art. 49 of the GDPR, processes personal data of the interested party to a strictly necessary and proportionate extent to ensure network and information security, that is to say the ability of a network or an information system to resist, at a given level security, unforeseen events or illicit or malicious acts that compromise the availability, authenticity, integrity and confidentiality of personal data stored or transmitted.
The Data Controller will promptly inform the Interested parties if there is a particular risk of violation of their data, without prejudice to the obligations arising from the provisions of article 33 of the GDPR regarding notifications of violation of personal data.
The legal basis for such processing is compliance with the legal obligations and the legitimate interest of the Data Controller to carry out processing related to the protection of the company assets and security of the CEV offices and systems.
f) profiling
The personal data of the interested party may also be processed for profiling purposes (such as analysis of transmitted data and the courses / activities attended, proposing promotional messages and / or activity proposals in line with the choices made by the same shareholders) exclusively in the case which the interested party has provided an explicit and informed consent.
The legal basis of such processing is the consent given by the interested party prior to the processing itself, which can be revoked by the interested party freely and at any time (see Section IV).
g) the protection of minors
The courses / activities offered by the CEV are reserved for subjects legally capable, on the basis of the national reference legislation, to associate themselves. In order to prevent unlawful access to its activities, the Data Controller implements prevention measures to protect its legitimate interest, such as the control of the tax code and / or other checks, when necessary for specific courses / activities, the correctness of the data identification of identity documents issued by the competent authorities.
Communication to third parties and categories of recipients (Article 13, 1st paragraph GDPR)
The personal data will be communicated only to third parties whose activity is similar and closely linked to the activities of the CEV: these are associations born as natural development of some sectors of the CEV, progressively matured as autonomous entities, collaborating with the purposes of the aforesaid statute *. They are:
- Banner of Peace Association;
- Naturovaloris Association;
- Italian Society of Agni Yoga;
- New Era Association.
The Personal Data transferred to these associations are “name”, “surname”, “e-mail” and are transferred for the sole purpose of creating mailing lists for the dissemination of information on the social activities of the same. The contacted user / Member can unsubscribe from the individual mailing lists using the appropriate link in the body of the e-mails.
* The Data Controller imposes on the aforementioned related and related Associations and their Data Processors compliance with security measures equal to those adopted towards the Data Subject, limiting the Managers actions to the only uses related to the advertising of their own activities.
The communication of personal data can in addition be made
- to Supervisory and control authority for the fulfillment of legal obligations, defense of rights; lists and registers held by public authorities or similar bodies on the basis of specific regulations, in relation to the statutory provisions and the specific nature of the activity provided;
- to Subjects formally delegated, or with recognized legal title, Legal representatives, curators, tutors, etc.
The CEV does not transfer the personal data to countries where the GDPR (non-EU countries) is not applied, unless there are specific contrary indications for which you will be informed in advance and your consent, if necessary, will be required.
The legal basis of these uses is the fulfilment of the services inherent to the relationship established, compliance with legal obligations and the legitimate interest of the CEV to carry out its necessary uses for these purposes.
