PRIVACY

Informativa sulla privacy

PRIVACY NOTICE

Information Notice on the Processing of Personal Data

Pursuant to Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree No. 196 of 30 June 2003 (the “Italian Data Protection Code”).

We hereby inform you that YOGA STUDIO MILANO 2 SRL SSD, with registered office at Via Numa Pompilio 3, Milan, hereinafter referred to as the “SSD”, acting as Data Controller, will process your personal data, including your identification and personal details, pursuant to Article 13 of the GDPR and in accordance with the procedures and safeguards set out below.

1) Roles involved in the processing

Data Subject: the person who provides their personal data and to whom this Privacy Notice is addressed.

Data Controller: YOGA STUDIO MILANO 2 SRL SSD, which collects and processes, stores or transfers the data.

Person authorised to process personal data: any person who may be appointed to process the data.

Third-party recipient: any person or entity to whom YOGA STUDIO MILANO 2 SRL SSD discloses the data.

2) Legal basis

The legal basis for the processing is the performance of a contract to which the Data Subject is a party.

3) Purposes of the processing

The personal data you provide—such as your first name, surname, address, Italian tax identification number, telephone number and other identifying details—will be processed and stored without requiring your express consent, pursuant to Article 6 of the GDPR and Article 24 of the Italian Data Protection Code, for purposes connected with managing your request to participate in sporting activities at YOGA STUDIO MILANO 2 SRL SSD, as provided for in its Articles of Association, as well as for conducting its institutional activities and managing the membership relationship.

In particular, your data may be processed for:

  • correspondence with and the ability to contact practitioners and volunteers;
  • payment of registration or membership fees;
  • compliance with legal, administrative, accounting, tax and insurance obligations;
  • distribution of the SRL SSD newsletter;
  • information and awareness campaigns;
  • participation in the activities offered;
  • communications concerning non-commercial sporting events and, subject to specific consent, commercial events;
  • your registration with Sports Promotion Bodies or Sports Federations recognised by the Italian National Olympic Committee (CONI);
  • your inclusion in the CONI Register for recognition as an amateur sports organisation.

Communications relating to the management of your registration will be sent to the email address provided when applying to join. These may include communications concerning activities carried out with the ASD and for advertising purposes, as well as advertising and/or commercial communications, subject to your express prior consent.

4) Mandatory provision of data

The provision of personal data is necessary and mandatory for the purposes described above. A refusal to provide all or part of the requested data will make it impossible to join the ASD, complete the registration process or transmit the data to the CONI Register.

Where the person providing the data is under 16 years of age, the processing will be lawful only if and to the extent that consent is given or authorised by the person exercising parental responsibility. The identification details and copies of the identity documents of that person will therefore be collected.

5) Processing methods

The processing of the data provided includes the operations of collection, recording, organisation, storage, retrieval, consultation, disclosure, erasure and destruction.

These operations will be carried out exclusively by persons authorised for this purpose, with or without the use of automated processes and electronic devices, using paper records—such as membership applications—as well as electronic or telematic systems, such as management software.

6) Disclosure of data

Personal data may be disclosed to external Processors that have entered into specific agreements, arrangements, memoranda of understanding or contracts with the Data Controller.

By way of example, personal data may be disclosed to:

  • professional firms, including accountants and/or lawyers, and payroll processing offices, whose contact details are available from the Data Controller and which may access personal data in connection with invoicing and tax matters relating to the activities of YOGA STUDIO MILANO 2 SRL SSD. These parties will act in accordance with written instructions issued by the Data Controller, which will supervise their activities;
  • persons authorised to process personal data, including instructors, collaborators and staff members of YOGA STUDIO MILANO 2 SRL SSD, whose details are available at the Data Controller’s registered office. These persons are instructed and trained in the proper processing of personal data and are appointed in writing.

More generally, your personal data may be made available to any person or entity to whom disclosure is necessary for the proper fulfilment of the purposes set out in Section 2.

For the purposes indicated above, the data you provide will be processed and disclosed to a Sports Promotion Body recognised by CONI and/or to a National Sports Federation and/or Associated Sports Discipline and, through these organisations, to CONI or to any other body specified by the CONI Register, for the institutional purposes connected with registration.

These organisations will act independently in their capacity as Processors for the respective activities falling within their competence.

Upon request, personal data may also be disclosed to Public Authorities for purposes required by law.

7) Place and methods of data storage

The Data Controller stores personal data in paper form and/or on computer servers, generally located within the European Union. Upon request by the Data Subject, the addresses at which the data are stored at that time will be provided.

Should it become necessary, the Data Controller may transfer servers outside the European Union. In such cases, the Data Controller will ensure that the transfer takes place in accordance with Articles 45 and 46 of the GDPR and with all other applicable legislation.

8) Public dissemination of data

Personal data will not be publicly disseminated.

9) Data retention period

Personal data processed for the purposes described above will be retained for the period necessary to fulfil those purposes.

Afterwards, the data will be retained for as long as YOGA STUDIO MILANO 2 SRL SSD remains subject to statutory retention obligations for tax or other purposes under applicable laws or regulations, as well as for the establishment, exercise or defence of legal claims by the company or third parties.

In any event, personal data will not be retained for longer than ten years, unless legal proceedings are pending.

10) Rights of the Data Subject

As a Data Subject, you are entitled to all the rights provided for under Article 15 of the GDPR, including the right to:

  • access your personal data;
  • request their rectification or erasure;
  • request the restriction of processing;
  • object to the processing of your data;
  • withdraw your consent, where consent has been given, without affecting the lawfulness of processing carried out before its withdrawal;
  • lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

You may exercise your rights by submitting a written request:

  • by email to info@yogastudiomilano.it; or
  • by registered post to YOGA STUDIO MILANO 2 SRL SSD, Via Numa Pompilio 3, 20123 Milan, Italy.

Data Controller, Processors and Persons Authorised to Process Personal Data

The Data Controller is YOGA STUDIO MILANO 2 SRL SSD, with registered office at Via Numa Pompilio 3, Milan, Italy.

The Data Controller may be contacted: