INFORMATION ON THE PROCESSING OF PERSONAL DATA
REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL
(GENERAL DATA PROTECTION REGULATION - GDPR)
***
Adventure Riding Srl, with registered office in Via F.lli Ruffini,10 - 20123 Milan (MI), Italy, VAT n. 10527650963, as owner of the processing of personal data (hereinafter "Owner"), informs you pursuant to art. 13 EU Regulation no. 679/2016 (hereinafter "Regulation") that the personal data voluntarily provided by you may be processed in the manner and for the purposes set out below and, in any case, in compliance with the principle of confidentiality.
1. Purpose and legal basis of the treatment
Your personal data will be processed (for the definition of 'processing', see art. 4, c. 2 of the Regulation)
for the following purposes:
a) to allow your participation in the event, course or other event organised by
Adventure Riding Srl;
b) to carry out the activities related to the relationship established by signing the registration form, including the activities relating to the management of relations with insurance companies;
c) to elaborate studies and statistical market researches;
d) to send, also by e-mail, telephone channels, advertising material, information and commercial communications;
e) carry out customer satisfaction surveys on the quality of services;
f) fulfil:
- obligations provided for by law, regulations, statutes and federal regulations and, in general, by the rules applicable from time to time both nationally and internationally.
The legal basis of the treatment is identified (by way of example) in the granting of consent to the processing of your personal data.
2. Personal data subject to processing
2.1 Personal data
In particular, the personal data in question concerns (by way of example):
- name, address or other elements of personal identification (common data).
2.2 Particular categories of data
It may happen that Adventure Riding Srl, in the execution of its activities, treats particular categories of data, such as, by way of example, health data and personal data suitable to reveal the state of health.
3. Data retention times
The data will be stored according to the following criteria:
- for a period of time not exceeding that necessary to achieve the purposes for which they are processed;
- for a period of time not exceeding that necessary to fulfil legal obligations.
4. Method of use of data
Data processing is carried out using paper and electronic means, with appropriate measures to ensure security and confidentiality, aimed at preventing unauthorized access, loss or destruction, in accordance with the provisions of Chapter II (Principles) and Chapter IV (Data Controller and Data Processor) of the Regulations. The data may be processed by persons, internal or external, specifically authorized and committed to confidentiality.
5. Scope of data circulation
The data may also be processed by third party companies that carry out activities on behalf of the Owner, in their capacity as external data processors (by way of example only and not limited to: credit institutions, professional firms, suppliers/consultants who manage and/or participate in the management and/or maintenance of electronic and/or telematic instruments used by us, insurance companies for the provision of insurance services, for the time strictly necessary for the optimal performance of this service). Your personal data will be made accessible only to those who have a real need in relation to the exercise of their duties or hierarchical position. These subjects will be suitably instructed in order to avoid loss, destruction, unauthorized access or unauthorized processing of the data.
Without your express consent (ex art. 6 letter. b) and c) of the Regulation), the Owner may communicate your data to supervisory bodies, judicial authorities and all other subjects to whom communication is mandatory under an express provision of law.
6. Nature of the Treatment
We remind you that, with reference to the purposes highlighted in paragraph 1 - Purpose and legal basis of the treatment, letters a) b) and f):
- the provision of your personal data is mandatory.
We remind you that, with reference to the purposes highlighted in paragraph 1 - Purpose and legal basis of the treatment, letters c) d) and e):
- the provision of your personal data is optional.
Your refusal and/or provision of incorrect and/or incomplete information would prevent:
- letter a) to allow your participation in the event, course or other event organized by Adventure Riding Srl;
- letter b) to carry out the activities related to the relationship established by signing the attached form, including the activities related to the management of relations with insurance companies;
- letter c) to elaborate studies and statistical market research;
- letter d) to send, also by e-mail, telephone channels, advertising material, information and commercial communications;
- letter e) to carry out customer satisfaction surveys on the quality of services;
- letter f) to comply with obligations provided for by federal law, regulations, statutes and regulations and, in general, by the rules applicable from time to time, both national and international.
7. Dissemination of data
The data will not be disclosed to unspecified parties.
8. Data transfer abroad
The data will not be transferred outside the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the location of the servers in non-EU countries. In this case, the Data Controller hereby guarantees that the transfer of non-EU data will take place in accordance with articles 44 et seq. of the Regulation and the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection.
9. Data Controller and Data Protection Officer
The Data Controller is Adventure Riding Srl, with registered office in Via F.lli Ruffini, 10 - 20123 Milan (MI), Italy, VAT no. 10527650963. Any request relating to personal data processed by Adventure Riding Srl may be sent to the registered office of the Company, or by writing to the e-mail address Pec adventureridingsrl@legalmail.it
10. Exercise of rights
As an interested party in the processing of data, we inform you that you have the opportunity to exercise your rights under the Regulation, and precisely:
a) the right, pursuant to art. 15, to obtain confirmation that personal data concerning you are being processed or not and, in this case, to obtain access to personal data and the following information: i) the purposes of the processing ii) the categories of personal data in question; iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly if third countries or international organizations; iv) where possible, the period of retention of personal data provided for or, if this is not possible, the criteria used to determine that period; (v) the existence of the right of the data subject to request the Controller to rectify or erase personal data or to restrict the processing of personal data concerning him or to object to their processing; (vi) the right to lodge a complaint with a supervisory authority, in accordance with Articles 8 and 9 of Directive 95/46/EC; (v) the existence of the right of the data subject to request the Controller to rectify or erase personal data or to restrict the processing of personal data concerning him or to object to their processing; (v) the right to lodge a complaint with a supervisory authority, in accordance with Articles 8 and 9 of Directive 95/46/EC; and (v) the right of the data subject to request the processing of personal data or to object to the processing of personal data concerning him or to object to the processing of personal data. 77 ff. of the Regulation; vii) if the data are not collected from the data subject, all available information on their origin; viii) the existence of an automated decision-making process, including profiling as referred to in Article 22(1) and (4) of the Regulation, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject; ix) the right to be informed of the existence of adequate safeguards under Article 46 of the Regulation relating to the transfer, if the personal data are transferred to a third country or an international organisation;
b) the data subject will also have (where applicable) the possibility to exercise the rights referred to in Articles 16-21 of the Regulation (Right of rectification, right to be forgotten, right of processing limitation, right to data portability, right of opposition).
We inform you that Adventure Riding Srl undertakes to respond to your requests no later than one month from the date of receipt. This period may be extended depending on the complexity or number of requests and Adventure Riding Srl will explain the reason for the extension within one month of your request. The outcome of your request may be provided to you in writing, in paper or electronic format.
11. Procedures for the exercise of rights
The interested party may at any time exercise the rights mentioned above in the following ways:
- by sending an e-mail to Pec: adventureridingsrl@legalmail.it
Data controller
Adventure Riding Srl
We remind you that, with reference to the purposes highlighted in paragraph 1 - Purpose and legal basis of the treatment, letters a) b) and f): - the provision of your personal data is required.
