Art. 13 of Reg. EU 2016/679 – GDPR
Dear Data Subject,
Pursuant to Article 13 of the General Data Protection Regulation – EU Regulation No. 2016/679 (GDPR), we provide you with the following information regarding the processing of personal data relating to participation in the “Chapter of Mats with the Youth.”
Data Controller
The data controller is the SERAPHIC PROVINCE OF ST. FRANCIS OF THE ORDER OF FRIARS MINOR (hereinafter referred to as the “Seraphic Province of St. Francis OFM” or the “Controller”), with registered office in ASSISI (PG) – 06081, Fraz. S. MARIA DEGLI ANGELI, Piazza Porziuncola 1, Fiscal Code/VAT No. 00160170544, email privacy@assisiofm.org.
Data Protection Officer
The Data Protection Officer (DPO) appointed by the Seraphic Province of St. Francis O.F.M. can be contacted at dpo@assisiofm.org or by registered mail to the headquarters of the Seraphic Province of St. Francis O.F.M.
Purpose of processing
We process your personal data for registration and participation in the “Chapter of Mats with the Youth” event, including hospitality during the event and the management of financial transactions, as well as for related legal obligations (accounting and tax obligations and, in the case of stays at the Seraphic Province of St. Francis OFM facilities, communication of identification data to the Police Headquarters for public safety purposes pursuant to the Consolidated Law on Public Safety (T.U.L.P.S.)).
Legal basis for processing
The processing of your personal data is based on the following lawful conditions:
- For registration and participation in the “Chapter of Mats with Young People” event, processing is based on your consent;
- With regard to compliance with legal obligations, processing is based on the need to fulfill a legal obligation to which the Data Controller is subject. In this case, your consent is not required.
Optional or Mandatory Provision of Personal Data
Personal data marked as mandatory is required for participation in the “Chapter of Mats with Young People” event and to fulfill the related legal obligations. Failure to provide this data will prevent you from participating in the event. Any information you wish to provide regarding allergies, food intolerances, or special health-related needs is optional. Without this information, we will not be able to take your specific needs into account, but you will be able to participate in the event.
Duration of processing
Personal data will be processed:
- until the purpose for which the personal data is processed is achieved and also subsequently for the performance of administrative and accounting activities related to your participation in the “Chapter of Mats with the Youth”;
- to the extent necessary to fulfill the legal obligations to which the Seraphic Province of St. Francis OFM is subject (e.g., accounting and tax obligations).
Recipients of personal data
For the purposes indicated above, personal data may be disclosed to:
- friars, employees and individuals in any capacity included in the organization of the Seraphic Province of St. Francis O.F.M., limited to what is necessary for the performance of their duties;
- third parties, to the extent necessary to provide ancillary services for participation in the event or to carry out their duties on behalf of the Seraphic Province of St. Francis O.F.M., appointed where necessary as Data Processors pursuant to art. 28 of the GDPR (e.g., Seraphic Province of the Immaculate Conception of the Capuchin Friars Minor);
- entities that can access the data pursuant to provisions of law, regulation or EU legislation, within the limits set by such provisions (e.g. Prefecture for stays in accommodation facilities);
- any other subjects to whom the current legal and/or contractual regulations require disclosure.
The data used for payments via PayPal is collected directly by the payment service provider. We invite you to read the information provided by PayPal at the time of payment.
Transfer of data to countries outside the European Union
The processing of personal data may involve the transfer of data to countries outside the European Union through the use of communication and data storage services provided by entities based and/or operating outside the European Union. The transfer is carried out in compliance with the GDPR, through an adequacy decision by the European Commission or, failing that, the standard contractual clauses and other provisions set forth in Articles 46 et seq. of the GDPR. To request a copy of your data, you can contact the Data Controller at the addresses indicated in the last paragraph.
Rights of the Data Subject
Pursuant to Articles 7 and 15 et seq. of EU Regulation No. 2016/679 – GDPR, you have the right to:
- Revoke your consent at any time. Revoking consent does not affect the lawfulness of the processing carried out before its withdrawal;
- access your personal data to obtain information on the data processed;
- verify the accuracy of your data and request its correction or updating;
- obtain the erasure of your personal data, when the conditions set out in Article 17 of the GDPR apply;
- obtain restriction of processing in the cases provided for by art. 18 of the GDPR;
- Receive your personal data or have it transferred, where technically feasible, to another controller. This right may be exercised when the data is processed using automated tools and the processing is based on the data subject’s consent, on a contract to which the data subject is a party, or on contractual provisions related to it;
- Object to the processing of your data for reasons related to your particular situation, when the personal data is processed in the public interest, in the exercise of official authority vested in the Data Controller, or to pursue a legitimate interest of the Data Controller. If the personal data is processed for direct marketing purposes, you can object to the processing without providing any justification.
You may also lodge a complaint with the Supervisory Authority (in Italy, the Italian Data Protection Authority) pursuant to Article 77 of the GDPR or appeal to the judicial authority pursuant to Article 79 of the GDPR.
Exercising your rights
You may exercise the above rights at any time by sending an email to privacy@assisiofm.org or a registered letter to PROVINCIA SERAFICA DI S. FRANCESCO O.F.M. – UFFICIO COMUNICAZIONI, Piazza Porziuncola 1, Fraz. S. MARIA DEGLI ANGELI, 06081 – ASSISI (PG).
