PRIVACY POLICY

Associazione Kunpen Lama Gangchen

With registered office in: Milano, via Marco Polo n. 13, 20124 MI Operating centre in: Albagnano di Bee, via Campo dell’Eva n. 5, 28813 VB – C.F. 97216720157 and P.I. 12457970155

PURSUANT TO ARTICLES 13 AND 14 OF THE GENERAL DATA PROTECTION REGULATION (EU) 2016/679 AND D. LGS. 196/2003 AND SS.MM.II.

During the consultation of this website it is possible that information and personal data are collected, as indicated in this statement. The information relates exclusively to this website.

The Data controller:

Associazione Kunpen Lama Gangchen

With registered office in: Milano, via Marco Polo n. 13, – 20124 MI Operating Centre in: Albagnano di Bee, via Campo dell’Eva n. 5 – 28813 VB C.F. 97216720157 and P.I. 12457970155

in the person of the acting President.

Scope of processing

The personal data held by the Data Controller are processed in compliance with the obligations of correctness, lawfulness and transparency imposed by the aforementioned legislation, protecting the privacy and rights of data subjects.

The site collects some user data to offer its services. For details see the cookie policy presented on this website. The provision of some personal data of the interested party, provided by the same to allow direct contact with the

Owner (telephone, e-mail, etc.) is mandatory to be able to use the services requested and their failure to provide may affect access. Mandatory personal data are marked with an asterisk.

In cases where some data are indicated as not mandatory, the interested party is free to refrain from communicating such data, without this having any consequence on the availability of the service or on its operation.

Interested parties who may have doubts about which data are mandatory, are encouraged to contact the Owner.

SUBSCRIPTION TO THE NEWSLETTER

Personal data may be communicated to the Data Controller through the Newsletter Subscription Form. The data transmitted through the Form are processed only to allow the receipt of newsletters referring to the services chosen by the interested party, based on the expression of their consent.

Purpose of the treatment

The data of the interested party are collected to allow the Owner to provide its services, as well as for the following purposes: statistics and display of content from external platforms.

To obtain further detailed information on the purposes of the processing and on the personal data concretely relevant for each purpose, the interested party may refer to the relevant sections of this document.

Legal basis for processing

The legal basis for processing is as follows:

• the processing is carried out on the basis of the expression of consent of the interested party, pursuant to art. 6, paragraph 1, lit. a) of EU Regulation 2016/679;

• the processing is necessary to fulfil a legal obligation to which the Data Controller is subject, pursuant to art. 6, paragraph 1, lit. c) of EU Regulation 2016/679;

• the processing is necessary for the pursuit of the legitimate interest of the Owner or third parties, pursuant to art. 6, paragraph 1, lett. f) of EU Regulation 2016/679;

It is however possible to ask the Data Controller to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law or provided for by a contractual or pre-contractual relationship.

Methods of processing

The data are processed by the company personnel in charge and are not disclosed to unauthorized third parties. The processing is carried out by means of IT and/or telematic tools and in automated and/or manual form, in

compliance with the provisions of art. 32 of GDPR 2016/679 regarding security measures, by persons specifically appointed and in compliance with the provisions of art. 29 GDPR 2016/ 679.

The Data Controller shall take appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of personal data.

In addition to the Data Controller, in some cases, may have access to data other parties involved in the provision of services offered and in the organization of this website (hosting providers, IT companies, archiving, collection, printing and shipping and management of electronic mail, communication agencies, postal couriers), and external subjects appointed, if necessary, Data Processors by the Data Controller. The updated list of Data Processors can always be requested from the Data Controller.

Transfer of personal data

The data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.

The personal data of the data subject are not transferred outside the European Union.

Shelf-life

In compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of GDPR 2016/679, the personal data of the data subject will be kept for the period of time necessary to achieve the purposes for which they are collected and processed or to defend/exercise a right.

When processing is based on the consent of the data subject, the Data Controller may retain personal data for longer until such consent is revoked. In addition, the Data Controller may be obliged to keep personal data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period the personal data will be deleted. Therefore, upon reaching this deadline, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.

Rights of the data subject

At any time, the interested party may exercise, pursuant to Articles 15 to 22 of EU Regulation no. 2016/679, the right to:

1. request confirmation of the existence or otherwise of their personal data;

2. obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;

3. obtain the rectification and deletion of data;

4. obtain restriction of processing;

5. obtain the portability of data, that is to say, receive it from a controller, in a structured, commonly used and machine-readable format, and transmit it to another controller without hindrance;

6. to object to the processing at any time; please note that, if their data were processed for direct marketing purposes, they can object to the processing without providing any reason.

7. request the controller to have access to and rectification or erasure of personal data or to restrict the processing concerning the controller or to object to the processing of personal data, in addition to the right to data portability;

8. withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;

9. lodge a complaint with a supervisory authority. The interested party has the right to lodge a complaint with the Guarantor for the Protection of Personal Data, based in Rome via Monte Citorio 121 (tel. +39 06696771), following the procedures and indications published on the website of the Authority
   www.garanteprivacy.it

Contacts of the Data Controller

To contact the Data Controller, regarding the protection of your personal data, you can contact the following email address:
kunpen@gangchen.it
or the telephone number +39-0323/569601.