DATA PROTECTION NOTICE

Pursuant to EU Regulation No. 679 of 27/04/2016 of the European Parliament and of the Council

The ASP Alumni Association (Associazione ex-Allievi dell’Alta Scuola Politecnica A.P.S.) informs you, in accordance with Article 13 of the General Data Protection Regulation (GDPR) No. 2016/679 and Legislative Decree 196/03 and its amendments, that the personal data provided by individuals concerning membership registration and related events will be processed directly and/or through delegated third parties in compliance with the provisions of the Privacy Code and the Regulation, for the purposes outlined in point 4 below.

  1. Source of Data 

The personal data subject to processing are collected directly from the data subject.

  1. Recipients

The data subject to processing include: personal data (identification and contact information) and images provided during registration, recordings, audio/video recordings, and photographic images depicting event participants.

  1. Types of Data Processed

I dati oggetto di Trattamento saranno: dati personali (anagrafici e di contatto) e immagini fornite nelle fasi di registrazione, riprese, registrazioni audio/video ed acquisizioni immagini fotografiche raffiguranti i partecipanti agli eventi.

  1. Purposes, Legal Basis of Processing, and Data Retention Period

The collected personal data will be processed for the following purposes:

A. Purposes Based on Contractual Obligations::

  • Registration and organization of events.
  • Sending informational material related to activities promoted by the Association via email.
  • Facilitating networking activities among Alta Scuola Politecnica Alumni.

B. Purposes Based on the Legitimate Interest of the Data Controller:

  • Statistical and institutional analyses pertinent to the Association.
  • Direct contact by the Association’s Board.
  • Communication and promotion of events through the use of photographic images and video recordings collected during the events.

The Data Controller will process personal data for the time strictly necessary to achieve the purposes for which such data were collected.

  1. Processing Methods

In relation to the aforementioned purposes, data processing will occur through electronic and telecommunication tools, paper supports, and telematic methods, employing instruments suitable to ensure security, confidentiality, integrity, and availability through the adoption of appropriate security measures, as prescribed by the Regulation.

  1. Categories of Data Recipients

Your data may be made accessible for the purposes mentioned above to individuals authorized and duly instructed by the Data Controller or Data Processors referred to in point 8, such as the Association’s collaborators responsible for relations with the data subjects mentioned in point 2.

  1. Data Disclosure

Without your specific authorization, your personal data will not be disclosed outside the association, except in cases expressly provided by law.

  1. Data Controllers and Processors

The Data Controller, determining the purposes of processing, is the Associazione ex-Allievi dell’Alta Scuola Politecnica A.P.S., located at Via Luigi Soderini 36, 20146 Milan, represented by its legal representative pro tempore.

The Data Processors, executing processing on behalf of the Data Controller, are service providers appointed in accordance with Regulation 2016/679 by the Data Controller.

The updated list of data processors and individuals in charge of processing is kept at the registered office of the Data Controller.

  1. Exercise of Rights

Pursuant to Regulation 2016/679, the data subject has the right to access their data, particularly to obtain confirmation of their existence at any time and to know their content, origin, and geographic location, as well as to request a copy.

The data subject also has the right to verify their accuracy or request their integration, updating, rectification, restriction of processing, deletion, anonymization, or blocking of data processed in violation of the law, and to oppose their processing in any case. It is specified that opposition to processing related to the purposes described in point 4, exercised through automated means, also extends to traditional ones, without prejudice to the right to exercise this right only in part. Additionally, the data subject has the right to request data portability and to lodge a complaint with the Supervisory Authority.

The data subject can exercise their rights by writing via email to dpo@aspalumni.com.