INTRODUCTION 

​

In accordance with Regulation (EU) 2016/679 (General Data Protection Regulation -- GDPR) on the protection of natural persons with regard to the processing of personal data and the free movement of such data, we inform you that the processing of personal data provided through the forms available on our website (www.spazio3r.org) will be carried out in compliance with the principles set out in Article 5 of the GDPR: lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability.

​

DATA CONTROLLER 

​

The data controller responsible for processing personal data under this policy is: ASSOCIAZIONE SPAZIO 3R RICICLO RICUCIO RIUSO IMPRESA SOCIALE, CF 97882400159, with registered offices in Viale Bianca Maria 28, 20129 Milano, with operational offices in Viale Lazio 20 2135 Milano and Via Ascanio Sforza 75 20141 Milano. 

Email: info@spazio3r.org

Phone: +39 3393789691

​

PURPOSE AND LEGAL BASIS FOR PROCESSING 

​

Your personal data, collected through the forms available on www.spazio3r.com, are processed exclusively for the purpose of responding to your requests.

The legal basis for processing is Article 6(1)(b) of the GDPR, as the processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract. 

By voluntarily submitting your data through the website forms after reading this policy, you implicitly authorize their processing for the purposes described above.

​

RECIPIENTS OF PERSONAL DATA

​

Personal data collected through the website forms will be communicated only to authorized internal personnel who are responsible for handling your request and providing a response.

​

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

​

Your data is processed at our offices and will not be transferred outside of Italy.

​

DATA RETENTION PERIOD 

​

Personal data are processed and stored for the time necessary to fulfill the purposes for which they were collected. Where processing is based on your consent, the Data Controller may retain the personal data for a longer period to comply with legal obligations, including those related to co-funded projects. At the end of the retention period, personal data will be deleted. After this period, the rights of access, rectification, erasure, and data portability can no longer be exercised. 

​

DATA SUBJECT RIGHTS​

​

In accordance with GDPR, you may exercise the following rights: right of access (art. 15), right to rectification (art. 16), right to erasure ("right to be forgotten") (art. 17), right to restriction of processing (art. 18), right to data portability (art. 20), right to object (art. 21). You may exercise these rights by contacting the Data Controller at the contact details listed above. You also have the right to lodge a complaint with the supervisory authority (art. 77) if you believe that your personal data are being processed in violation of the GDPR.

​

MANDATORY NATURE OF DATA PROVISION 

​

Providing all required data in the website forms is mandatory in order for the association to process and respond to your request. 

​

AUTOMATED DECISION MAKING 

​

Your data are processed by authorized personnel using both paper-based and electronic systems. No automated decision making processes are applied.

​

UPDATES​

​

This Privacy Policy may be updated at any time.

Last updated: July 11, 2005