We wish to inform you that EU Reg. 679/2016 and current Italian legislation on the protection of personal data provide for the protection of natural persons with regard to the processing of personal data. According to this legislation, the processing of your data will be based on the principles of correctness, lawfulness, and transparency, protecting the confidentiality and security of the data and guaranteeing the exercise of your rights. Pursuant to the aforementioned Article 13 of EU Reg. 679/2016, we therefore provide you with the following information:
- The identity and contact details of the data controller and, where applicable, of their representative
The data controller is:
ASSOCIAZIONE MOVIMENTO SPAZIO + SPADONI E.T.S., Piazzale Badalocchio 9/B 43126 Parma (PR), C.F.: 92217110342, Tel: +39 3274532134, Privacy E-mail: privacy@spaziospadoni.org
The data controller is established within the European Union and, therefore, is not required to appoint a representative. - The contact details of the data protection officer, where applicable
The data controller does not carry out processing of data falling under the obligation to appoint a “Data Protection Officer”, as detailed by Articles 37-38-39 and Recital 97 of EU Regulation 2016/679. The data controller will assess the opportunity to appoint a data protection officer optionally or if the conditions arise subsequently. - The purposes of the processing for which the personal data are intended as well as the legal basis for the processing
The purposes of the processing are as follows:- Evaluation of your profile for the purpose of establishing a working relationship with the data controller.
For the aforementioned purpose, the following may be processed: your personal data (personal details and contact information—email address or phone number), multimedia content, and, if voluntarily provided by you, any special categories of personal data (any information regarding religious or philosophical beliefs, voluntarily provided by you, in light of the fact that the Association is of Catholic inspiration).
The legal basis for the aforementioned processing relates to the provisions of Art. 6 paragraph 1, letter a) of EU Reg. 679/2016 as the data subject has expressed consent to the processing of their personal data for one or more specific purposes and to the provisions of Art. 9 paragraph 2, letter a) of EU Reg. 679/2016 as the data subject has given explicit consent to the processing of such personal data for one or more specific purposes, except where Union or Member State law provides that the prohibition referred to in paragraph 1 cannot be lifted by the data subject.
- Where processing is based on Article 6(1)(f), the legitimate interests pursued by the data controller or by a third party
We inform you that no data processing described in this information notice is based on Article 6, paragraph 1, letter f), as the processing operations are not necessary for the pursuit of the legitimate interest of the data controller or third parties. - Any recipients or categories of recipients of the personal data
Your personal data will be processed by persons specifically appointed by the data controller as data processors (only if appointed) and/or by anyone acting under their authority and/or under that of the data controller and who has access to personal data; these subjects will process your data only when necessary in relation to the purposes of the provision and only within the scope of the tasks assigned to them by the data controller, undertaking to process exclusively the data necessary for the performance of such tasks and to carry out only the operations necessary for the performance of the same.
Only where strictly necessary, personal data may be communicated to the following categories of recipient subjects:- Third parties providing the data controller with specific services (by way of non-exhaustive example, of an organizational, administrative, promotional nature, etc…);
- IT service providers connected with the personal data processing operations.
Personal data will not be subject to dissemination.
- Where applicable, the data controller’s intention to transfer personal data to a third country or an international organization and the existence or absence of an adequacy decision by the Commission or, in the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), reference to the appropriate or suitable safeguards and the means to obtain a copy of them or where they have been made available The data controller could transfer personal data to a third country or an international organization, and this could happen in the following cases:
- IT service providers connected with personal data processing operations – Countries: U.S.A. or any other jurisdiction in which the providers or their affiliates, subsidiaries or sub-processors operate facilities.
The transfer abroad will take place, as the case may be, pursuant to the Adequacy Decision issued by the European Commission on July 10, 2023, in relation to companies participating in the so-called “EU-U.S. Data Privacy Framework” and/or by virtue of the provision of Standard Data Protection Clauses pursuant to Art. 46, par. 2, lett. c) of EU Reg. 679/2016.
In the case of transfers referred to in Article 46 or 47, or the second subparagraph of Article 49(1), you are informed that a copy of such safeguards may be requested from the data controller by sending a specific request to the contact details previously indicated in point a) of this notice and a copy of such safeguards will be made available at the registered office of the data controller.
In addition to the information previously provided, the data controller provides you with the following additional information necessary to ensure fair and transparent processing:
- The retention period for personal data or, if this is not possible, the criteria used to determine that period
Your personal data will be retained for the time strictly necessary to achieve the purposes indicated above. Specifically, the data controller will retain your personal data for the purpose of evaluating your profile and for the duration of your collaboration with the data controller. - The existence of the right to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability
You may, at any time, exercise the following rights provided for by EU Reg. 679/2016 against the data controller, by contacting the data controller at the contact details indicated in point a) of this notice or through the methods you deem most appropriate:- Right of access by the data subject (Article 15 of EU Reg. 679/2016).
- Right to rectification (Article 16 of EU Reg. 679/2016).
- Right to erasure – «right to be forgotten» (Article 17 of EU Reg. 679/2016).
- Right to restriction of processing (Article 18 of EU Reg. 679/2016).
- Right to object (Article 21 of EU Reg. 679/2016).
- Right to data portability (Article 20 of EU Reg. 679/2016).
The full text of the articles of EU REG. 679/2016 relating to your rights (articles 15 to 22 inclusive) can be consulted at the following link on the website of the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali): https://www.garanteprivacy.it/regolamentoue or, alternatively, they will be provided to you by the Data Controller upon simple request.
- Where the processing is based on Article 6(1)(a) or Article 9(2)(a), the existence of the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
You may exercise against the data controller the right to withdraw your consent at any time, without affecting the lawfulness of the processing itself based on the consent given before its withdrawal, by contacting the data controller at the contact details indicated in point a) of this notice or through the methods you deem most appropriate. - The right to lodge a complaint with a supervisory authority
If you believe that the processing of personal data relating to you, carried out by the data controller, violates the provisions of EU Reg. 679/2016, you have the right to lodge a complaint with the competent Supervisory Authority, as provided for by Article 77 of EU Reg. 679/2016 itself, or to take judicial remedies (Article 79 of EU Reg. 679/2016). - Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data
In relation to the processing of personal data and any special categories of personal data (any information relating to religious or philosophical beliefs, spontaneously provided by you, in relation to the circumstance that the Association is characterized by Catholic inspiration), the communication is optional and will have no impact in relation to the management of requests for information by the data controller, except for filling in the mandatory fields as they are strictly necessary for the management of your requests by the data controller. - The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject
The data controller informs you that your data will not be subject to automated decision-making, including profiling as referred to in Article 22, paragraphs 1 and 4 of EU Reg. 679/2016.
Finally, the data controller informs you that, if it intends to further process the personal data for a purpose other than that for which they were collected, prior to that further processing it undertakes to provide you with all information regarding this different purpose and any further relevant information referred to in Article 13 of EU Reg. 679/2016, paragraph 2.
Last update – May 2026