In accordance with the Article 13 of European Regulation 679/2016, we would like to inform you about the following:
Purpose of processing:
Your personal data, freely disclosed and acquired through the activities carried out by Medicus Mundi Italy Onlus NGO will be processed in a lawful and fair way for the following purposes:
- administrative-accounting, in regard to relationship with members, and/or pertaining to donations;
- other purposes related to promotion and information, and newsletters.
The data processed (which may be of a common, identifying, sensitive or judicial nature) are updated, relevant, complete and not used for any other purpose than the ones listed above, for which they are collected and subsequently processed.
Your data will be processed, in compliance with the necessary security and confidentiality measures, through the following methods: data collection from the subject; data collected and recorded for specific, explicit and legitimate purposes and used in further processing operations in compliance with those purposes; data processing carried out with the help of electronic and automated tools (data collection via computer, directly from the data subject).
Legal base of processing:
The legal base for your Personal Data processing relies on the contract, on the proposal or offer we present to you or vice versa. On your request for information or offers on our products or services.
Legitimate Interests pursued by the Data Controller
The legitimate interests pursued by the Data Controller in the processing of data are given by having to respect and honour the signed contractual obligations between the parties or respect their requests. In compliance with art. 6, the lawfulness of the processing is based on the manifestly expressed consent of the data subject, documented in writing.
Compulsory or optional nature of data provision and consequences of a refusal to respond:
The nature of providing administrative and accounting data is mandatory to allow the Data Controller to provide the requested services. In case of refusal, it will therefore be impossible to proceed with the relationship and the Controller will not be able to fulfil the contractual obligations.
Providing data for advertising and information purposes is not mandatory and derives from the explicit consent that may be expressed.
Data sharing with third parties:
Your personal data will be processed by the Data Controller, by the Data Processors appointed by them and by authorized, designated people. Those data may be communicated to institutional bodies upon request.
Following inspections or checks (if requested), your data may be shared with all inspection bodies responsible for checking and controlling the regular implementation of legal obligations.
Your data may also be communicated to companies / professional accounting, administrative, fiscal, legal, tax and financial practices that assist, consult or collaborate with the Data Controller; to public authorities to perform their institutional functions within the limits established by law or regulations, and to third party service providers to whom the communication is necessary for implementing the services covered by the contract. Your personal data will not be disclosed in any way.
Your personal data will be stored for 10 (ten) years after the termination of the relationship or until the commercial purposes will be met.
Viability of an automated decisional process:
There is no automated decisional process.
Intention of the Data Controller:
The Data Controller will not share your personal data to any third-party country or any international organization.
Data Controller and Processor:
The Data Controller is Medicus Mundi Italy Onlus NGO, in the person of the Legal Representative.
You can contact the Data Controller at the following email address: email@example.com
Data subjects can exercise their rights guaranteed in the Article 15, of which we quote the whole text, at any time.
Art. 15 Regulation EU 679/2016 – Right of access by the data subject
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
(d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
(e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
(f) the right to lodge a complaint with a supervisory authority;
(g) where the personal data are not collected from the data subject, any available information as to their source;
(h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
2. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
3. The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.