PRIVACY POLICY
ANANDA ASSOCIATION ASD
Information pursuant to art. 13 of the GDPR
The Ananda Association ASD, c.f. 92002350541, p.iva 02754750541, based in Nocera Umbra (06025 – PG), via Montecchio n.61, represented by the president of the association, pursuant to art. 13 of the European regulation (EU) no.2016/679 of April 27, 2016 (hereinafter GDPR) and in relation to the personal data that the association will become available for the fulfillment of the requested services, communicates the following information to users..
Data Controller and Data Processors
The data controller è the same Ananda Association ASD, in the person of the president of the association, tax code 92002350541, VAT number 02754750541, hereinafter referred to as the owner, who can be contacted through the website www.ananda.it, by email to the address info@ananda.it, by fax to the number (+39) 075 9033103, or by phone at the number (+39) 0742 813620.
The complete list of Data Processors is available at the association's headquarters and can be requested through the addresses and/or contacts indicated above.
The Data Processors, in the performance of their duties, may make use of sub-processors if expressly approved by the Data Controller.
Purpose and legal basis of data processing
The processing of data is aimed at the correct execution of the contract and the provision of services requested by the user, as well as the exercise of associative activities, in addition to fulfilling the obligations provided for in the tax and accounting fields and those of a different nature incumbent on the association, as provided for by current legislation.
Among the associative activities, participation in yoga and meditation courses and other similar activities organized live and/or online are included, as well as the free dissemination, also through written publication on the various communication channels of the association, of personal experiences and evaluations related to the services and/or courses used or referring to the social purposes of the association.
Among the associative activities, there is also included the promotion and dissemination, including online methods, making use of the images of the participants – unless they deny consent – of the activities described above.
The processing of personal data is carried out using manual, computer, and telematic tools with logic strictly related to the purposes themselves and, in any case, in a way that ensures their security and confidentiality.
Personal data may also be processed by means of both paper and computer archives (including portable devices) and in ways strictly necessary to meet the purposes indicated above.
Pursuant to Article 6 of the GDPR, processing takes place only in the following cases:
- The interested party has consented to the processing of their personal data in order to use the requested services;
- – The processing is necessary for the execution of a contract and/or for the performance of services and/or activities requested by the data subject or for the implementation of measures adopted at the request of the data subject prior to entering into a contract and to benefit from the requested services
- The processing is necessary to comply with a legal obligation to which the data controller is subject.
- The processing is necessary for the pursuit of the associative purpose and for the carrying out of associative activities;
In compliance with current regulations on personal data protection, the data will be stored, collected, and processed by Ananda Association for the following additional purposes:
- communication and/or transfer of data to third parties for sending newsletters and communications for marketing purposes via email, sms, mms, push notifications, fax, postal mail, telephone with operator;
The provision of data for the aforementioned purposes is optional, but any failure to provide such data and refusal to supply them would make it impossible for the association to execute and/or enter into the contract and provide the services requested therein.
Consequences of failing to communicate personal data
With regard to personal data relating to the performance of requested services or related to compliance with a regulatory obligation (for example, obligations related to maintaining accounting and tax records), the failure to provide personal data prevents the completion of the contractual relationship itself.
Data preservation
Personal data, subject to processing for the purposes indicated above, will be retained for the duration of the relationship and, subsequently, for the time during which the Association is subject to retention obligations for tax purposes or for other purposes provided by laws or regulations.
Nature of the data processed
Telephone contact, residential address, e-mail address, name, address or other elements of personal identification, special data pursuant to art. 9 following consent, images, bank or postal data necessary to make payments.
Data transfer abroad
The transfer of personal data abroad may take place if it is necessary for the management of the received assignment. For the processing of information and data, equivalent levels of protection adopted for the processing of personal data in Italy will be required.
In any case, only the data necessary for achieving the intended purposes will be communicated, and the regulatory tools provided by Chapter V of the GDPR will be applied.
Data communication
Personal data may be disclosed to:
1. professionals who provide services functional to the above-mentioned purposes;
2. banking and insurance institutions that provide services functional to the purposes indicated above;
3. subjects who process data in execution of specific legal obligations;
4. Judicial or administrative authorities, for the fulfillment of legal obligations.
5. The data may also be communicated to third parties appointed as data processors pursuant to Article 28 of the GDPR and in particular to service providers strictly necessary for carrying out the association's activities, or to consultants of the association, where this is necessary for tax, administrative, contractual reasons or for needs protected by current regulations.
6. Always respecting the social purposes, personal data may also be communicated or transferred to commercial partners or third parties, including companies, associations or external foundations operating in the fields of marketing, advertising, trade and distribution of food products, fundraising, hotel activities, publishing books and magazines, connected to the mission of Ananda Associazione a.s.d. and identified from time to time by the association, as well as to private individuals/users of the association who wish to deepen their knowledge and activities proposed by Ananda a.s.d.
7. Associazione Ananda Sangha for Self Realization with registered office C.F. 92013280547 located in Nocera Umbra (PG) Via Montecchio 67; Fondazione Ananda Europa C.F. 92000960549 located at Via Montecchio 61 06025 Nocera Umbra (PG).
Rights of the data subject
Among the rights recognized to data subjects by the GDPR are those to request from the data controller:
– access to personal data and information related to them;
– the correction of inaccurate data or the integration of incomplete data;
– the deletion of personal data (upon the occurrence of one of the conditions indicated in art. 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article);
– the restriction of the processing of personal data (in the event of one of the cases indicated in Art. 18, paragraph 1 of the GDPR);
– in cases where the legal basis for processing is the contract or consent, and it is carried out by automated means, the delivery of personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller.
The interested party may also:
– oppose the processing of personal data at any time in the event of particular situations;
– withdraw consent at any time, limited to cases where the processing is based on consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or special categories of data provided for by art. 9 of the GDPR.
The treatment based on consent and carried out prior to its revocation remains, in any case, lawful;
– file a complaint before the Authority for the protection of personal data.
° ° ° ° °
Having taken note of the information above, the data subject, aware that failure to give consent could make it impossible to carry out the services provided and the normal conduct of association activities, also considering the legal obligations incumbent on the association and in relation to the processing of their personal data, acknowledges the information provided pursuant to Articles 13 and 14 of Regulation 2016/679/EU in every respect, and freely, voluntarily, and specifically grants, where requested, consent for the purposes indicated so that their personal data, including special categories of data, may be processed for the tasks connected with the assigned role. The data subject also gives specific consent for their data to be communicated to entities for tasks connected with the assigned role and transferred to the entities indicated in the preceding information.
