INFORMATION AND CONSENT FOR PROCESSING PERSONAL DATA in accordance with
EU Reg. no. 2016/679 (“GDPR”)
for the following activity: feedback on the use of Augmented NAC for the ZeroSpike research project
1. Owner of Data Processing (or “Data Controller”)
The data processing owner is Federazione Rinascimento Italia (FRI), based in Corso Barolo, 47 Alba (CN) – ITALY
Data Protection Officer (DPO)
The data protection officer (DPO) is Mr. Federico Leone, who can be contacted at the following e-mail address privacy@rinascimentoitalia.it .
Purpose of processing and legal basis
The purpose of the processing is the activity of scientific research within the ZeroSpike civic project initiated by FRI, the owner of the data processing (or entitled to consent to it for others under the terms of point 4 below), and the physicians associated with FRI, in order to enable the research activities of the latter. Such medical-scientific research is to be considered, however, independent and autonomous with respect to the work of FRI and authorized, also in relation to data processing, by the data subject in an equally autonomous manner.
The legal basis for the processing is the national and European legislation on data processing and privacy, referred to in the heading, as applicable on the basis of the present consent given by the data subject.
Special categories of personal data
The personal data processed may be common (e.g., personal data) or special (e.g., sensitive or formerly sensitive, health data).
It is possible to authorize the data processing of minors by signing the consent by the exercising parental responsibility or legal guardianship, under the responsibility of the registrant.
Processing and storage methods
The processing of personal data will be carried out in automated and/or manual form by collaborators (volunteers, employees or consultants), properly trained and authorized in the sense of this authorization of the person concerned.
There is no storage of personal data, except for research activities of associated physicians: therefore, storage follows the criteria of bank data.
Scope of Communication and Dissemination.
Third parties who carry out part of the processing activities and/or activities related and instrumental to the same on behalf of the Data Controller. These subjects have been appointed as Data Processors pursuant to Article 4, point 8 of the Regulations (hereinafter the “Data Processor).”
-Third parties who carry out part of the processing activities and/or activities related and instrumental to the same on behalf of the Data Controller. These subjects have been appointed as Data Processors pursuant to Article 4, point 8 of the Regulations (hereinafter the “Data Processor).”
-employees or collaborators of the Data Controller, who have been entrusted with specific Processing activities. These individuals have been instructed and authorized in order to comply with appropriate standards of security and proper use of Personal Data (and are referred to as “Third Parties” under Art. 4(10));
-where required by law or to prevent or suppress the commission of crimes Personal Data may be disclosed to public bodies or the Judicial Authority without these being defined as Recipients under Article 4, point 9 of the Regulations. The Collected Data will not be subject to dissemination.
Transfer of personal data
The holder’s data will be communicated to associated physicians, and the data of such physicians, already public in nature, will be made available to the holder by the intermediary Association of the autonomous physician-patient relationship, for which this data flow is exclusively intended.
Rights of the data subject
All the rights of the data subject enshrined in current legislation under the provisions of Articles 15, 16, 17, 18, 20, 21, 22 and 77 of the GDPR, respectively, are guaranteed:
Right of access to their personal data and to all information about the processing carried out;
Right to rectification of one’s inaccurate personal data and supplementation of incomplete personal data;
Right to erasure (right to be forgotten);
Right to limitation of processing;
Right to data portability;
Right to object to the processing of one’s personal data;
Right not to be subjected to decision based solely on automation;
Right to appeal to the competent authority in the event of a deemed violation.
For these purposes, the data subject may contact the Data Controller by sending an e-mail to the following mailbox privacy@rinascimentoitalia.it.
Please note that at any time you may also contact the DPO at the above e-mail address: privacy@rinascimentoitalia.it .
In light of the information received, I authorize the processing and communication of the special categories of data necessary to carry out the purposes indicated in the above information.