INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
Pursuant to Regulation (EU) No. 2016/679 (“GDPR”) and Legislative Decree No. 196 of 30 June 2003 (“Privacy Code”).

We hereby inform you that YOGA STUDIO MILANO SRL SSD, with registered office in Milan, Via Numa Pompilio 3 (hereinafter the “SSD”), acting as Data Controller, will process your personal, identification and personal details data, etc., pursuant to Article 13 of the GDPR, in accordance with the methods and safeguards set out below.

1) Parties Involved in the Processing

Data Subject:
The individual who provides their personal data and to whom this information notice is addressed.

Data Controller:
YOGA STUDIO MILANO SRL SSD, which collects, processes, stores, and transmits the data.

Data Processor:
Any person appointed to process the data.

Third Party Receiving the Data:
Any person or entity to whom the data is disclosed by YOGA STUDIO MILANO SRL SSD.

2) Legal Basis

The legal basis for this processing is the performance of a contract to which the Data Subject is a party.

3) Purpose of the Processing

The personal data you provide (e.g., first name, surname, address, tax code, telephone number, etc.) shall be processed and stored, without the need for your express consent (Articles 6 GDPR and 24 Privacy Code), for purposes connected with the management of your request to engage in sports activities at YOGA STUDIO MILANO SRL SSD, as provided for by its Articles of Association, as well as for the performance of institutional activities and the management of the membership relationship.

In particular, the data shall be processed for:

• correspondence and contact with practitioners and volunteers;
• payment of membership fees;
• compliance with legal, administrative, accounting, tax, and insurance obligations;
• sending the SSD newsletter;
• information and awareness campaigns;
• participation in the activities offered;
• communications relating to sporting events of a non-commercial nature and, where applicable, commercial nature;
• your registration with Sports Promotion Bodies or CONI Federations, subject to specific consent where required;
• inclusion in the CONI Register for recognition for amateur sports purposes.

Communications relating to membership management, including communications concerning activities carried out by the SSD and promotional purposes, shall be sent to the email address provided during registration. In addition, subject to your explicit consent, advertising and/or commercial communications may also be sent.

4) Mandatory Nature of the Provision of Data

The provision of data is necessary and mandatory for the purposes indicated above. Refusal to provide such data, in whole or in part, will make it impossible to join the SSD, complete membership registration, and transmit the data to the CONI Register.

Where the individual providing the data is under 16 years of age, processing shall be lawful only if and to the extent that consent is given or authorized by the holder of parental responsibility, whose identification details and copy of identity documents shall be collected.

5) Methods of Processing

The processing of the data provided includes the collection, recording, organization, storage, retrieval, consultation, communication, deletion, and destruction of data, carried out exclusively by authorized persons, with or without the aid of automated processes and electronic devices, on paper media (e.g., membership application forms) as well as electronic or telematic media (e.g., entry into management software systems).

6) Disclosure of Data

The data may be disclosed to external Data Processors who have entered into specific agreements, conventions, memoranda of understanding, or contracts with the Data Controller.

By way of example only, the data may be disclosed to:

• professional firms (accountants and/or lawyers);
• payroll processing offices;

whose contact details are available from the Data Controller and who may become aware of personal data in connection with invoicing activities and tax procedures relating to the activities of YOGA STUDIO MILANO SRL SSD.

Such parties shall operate in accordance with written instructions provided by the Data Controller, who shall supervise their activities.

The data may also be disclosed to persons authorized to process personal data (such as instructors, collaborators, and staff members of YOGA STUDIO MILANO SRL SSD), whose details are available at the registered office of the Data Controller, who have received appropriate training and written appointment regarding the proper processing of data.

Your personal data may generally be disclosed to all parties for whom such disclosure is necessary for the proper fulfilment of the purposes indicated in Section 3 above.

The data you provide shall also be processed and communicated, for the purposes indicated above, to the Sports Promotion Body recognized by CONI and/or Sports Federation and/or Associated Sports Discipline and, through such entities, to CONI or any other body provided for by the CONI Register, for institutional purposes connected with membership registration.

These entities shall act independently as Data Processors for their respective obligations.

Furthermore, upon request, the data may be disclosed to Public Authorities for legal purposes.

7) Location and Methods of Data Storage

Personal data shall be stored by the Data Controller on paper media and/or computer servers, generally located within the European Union.

Upon request by the Data Subject, the storage locations existing at that time shall be communicated.

It is understood that the Data Controller, should it become necessary, reserves the right to transfer servers outside the EU, while ensuring that such transfer will be carried out in compliance with the GDPR (Articles 45 and 46) and all applicable legislation.

8) Dissemination of Data

Personal data shall not be subject to dissemination.

9) Data Retention Period

Your personal data processed for the purposes described above shall be retained for the period necessary to fulfil those purposes and subsequently for the period during which YOGA STUDIO MILANO SRL SSD is subject to retention obligations for tax, legal, regulatory, or other purposes, as well as for defensive purposes of its own or of third parties until the expiry of the applicable retention period.

In any event, the retention period shall not exceed ten (10) years, except in the event of litigation.

10) Rights of the Data Subject

As a Data Subject, you are guaranteed all rights provided for under Article 15 GDPR, including:

• the right of access;
• rectification;
• erasure;
• restriction of processing;
• objection to processing;
• withdrawal of consent (where consent has been provided), without affecting the lawfulness of processing carried out before such withdrawal;
• the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).

You may exercise your rights by sending a written request:

by email: info@yogastudiomilano.it

or by registered mail to:
YOGA STUDIO MILANO SRL SSD
Via Numa Pompilio 3
20123 Milan, Italy.

Data Controller, Data Processors and Authorized Persons

The Data Controller is:

YOGA STUDIO MILANO SRL SSD
Via Numa Pompilio 3
Milan, Italy

The Data Controller may be contacted:

by certified email (PEC): yogastudiomilano@certapec.it

or by email: info@yogastudiomilano.it.