Policies

INFORMATION PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679

Pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data that the association will have access to with the subscription of the membership card, or during our social and networking activities open to guests even without obligation to join, we inform you of the following:

1) Data controller.

The controller of your personal data is PWA Rome – Professional Women’s Association, in the person of its legal representative with registered office in, Via Ennio Quirino Visconti 103 00193 Rome, Fiscal Code 97487620581

For any further request regarding the processing of personal data, simply send an email to the Data Controller, at the following email address: info@pwarome.org

2) Authorized to process data.

Subjects authorized to process data are:
The members of the Board of Directors of the association.

3) Purpose of data processing.

Your personal data are processed:
A) without your express consent (art. 24 letter a), b), c) Privacy Code and art. 6 letter b), e) GDPR), for the following Service Purposes:

– fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority (such as for example in the matter of anti-money laundering);

B) Only with your specific and distinct consent (arts. 23 and 130 Privacy Code and art. 7 GDPR), for the following Marketing Purposes:

– send you communications via email and include you in a special list that will be shared with other members only if you become a member to facilitate networking exclusively between members.

4) Data processing methods.

The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

Your personal data are subjected to both paper and electronic and/or automated processing. The Data Controller will process the personal data for the time necessary to fulfill the purposes set out above and in any case for no more than 10 years from the termination of the relationship for the Service Purposes.

5) Communication and dissemination of data.

Personal data will not be disseminated outside the association, with access only to members for the purposes already indicated. They will not be made available for consultation, in any form, to unspecified subjects, without your prior consent.

6) Rights of the interested party.

Regulation (EU) 2016/679 grants the interested party the exercise of specific rights, namely:

• ask the association for access to your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete data; the deletion of personal data concerning you (if one of the conditions indicated in art. 17, paragraph 1 of the GDPR occurs and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (if one of the hypotheses indicated in art. 18, paragraph 1 of the GDPR occurs);
• request and obtain – in the cases in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to portability of personal data);
• object at any time to the processing of your personal data in the event of particular situations that concern you;
• withdraw your consent at any time, limited to the cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example, date and place of birth or place of residence), or particular categories of data (for example, data that reveal your racial origin, your political opinions, your religious beliefs, your state of health or sexual life). The processing based on consent and carried out prior to its withdrawal, however, retains its lawfulness;
• lodge a complaint with a supervisory authority (Italian Data Protection Authority – www.garanteprivacy.it).

Requests for the activation of a right must be addressed without formalities to the owner, even through an agent. Such a request must be responded to without delay.

The data controller undertakes to make it as easy as possible for interested parties to exercise their rights.

The data for sending communications and information from the facility are retained until the interested party cancels their data, caused by the revocation of consent.

7) Data retention period.

Your personal data are subject to both paper and electronic and/or automated processing. The Data Controller will process the personal data for the time necessary to fulfill the purposes set out above and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes.

Following any request by the user who requests and/or expresses the explicit will to unsubscribe from the service, the data is deleted from the databases with the technical cancellation and backup procedures. The data is processed until any request for cancellation by the contact.

8) Cookies: learn more