Pursuant to
Regulation (EU) 2016/679 (“GDPR”), OpenIndustria — Via del Carmine 11, 20121
Milan (Italy), email: segreteria@openindustria.com — as the data controller,
provides the following information regarding the processing of personal data
collected through this form.
1. Types
of data processed
The data
necessary for managing the membership application are processed, including:
Identification and personal
data: name,
surname, date and place of birth
Contact details: residence/domicile address,
email, telephone number
Professional
data: profession, role/company, sector
Administrative data: type of membership, payment
method and confirmation
Additional optional data: reasons for joining or notes
added by the interested party
The
provision of such data is necessary to evaluate and complete the
membership in the association.
2. Purposes of processing and legal bases
Failure to
provide mandatory data makes it impossible to proceed with the
membership.
3.
Processing methods
The
processing is carried out using computer and/or paper tools in compliance with
adequate security measures to:
Protect data from unauthorized
access
Prevent loss, disclosure, or
alteration of data
Ensure confidentiality and
continuity of the service
Processing
is carried out exclusively by authorized personnel.
4.
Recipients of the data
The data
may be communicated to:
Internal collaborators
authorized for member management
Service providers (e.g., email
management, database software, membership fee payment)
Public authorities, where
required by legal obligations
Dissemination
of data to third parties is not planned.
5.
Transfers to extra-EU countries
Any
transfers to countries outside the European Economic Area may only occur if:
An adequacy decision exists, or
Appropriate safeguards (such as
Standard Contractual Clauses) are adopted
6.
Retention period
Data will
be stored:
For the entire duration of the
membership in the association
Subsequently, for the period
provided by law for accounting/administrative obligations or for the
protection of rights in court
At the end
of this period, the data will be deleted or anonymized.
7.
Rights of the interested party
The
interested party may exercise the rights provided for in Artt. 15–22 GDPR at
any time (for a more comprehensive description of the rights, please refer to
the privacy policy of the official OpenIndustria website at https://openindustria.com):
Access to their own data
Rectification
or updating
Deletion (in the provided
cases)
Restriction
of processing
Data
portability
Objection to processing based
on legitimate interest
Withdrawal of consent provided
(always possible, without retroactive effects)
Right not to be subjected to
decisions based on automated processing
It is also
possible to lodge a complaint with the Data Protection Authority (Garante
Privacy). To exercise these rights: segreteria@openindustria.com OpenIndustria
will respond within 30 days, unless a justified extension is required under the
GDPR.
