Fondazione Cassa Rurale Alta Valsugana processes your data in accordance with the EU Data Protection Regulation 2016/679 ("GDPR") and other applicable regulations. Please read the following information carefully. In the following text, the word "data subject" refers to you. The data controller is at your disposal for any clarification.
Data source - data subject
Data subjects - people who purchase services directly provided by the Foundation
Types of data processed - master and contact data, tax identification data, bank reference data, data on services provided and prices, payment and collection data, after-sales service data
Purpose - to provide services to the data subject, collect payments, manage accounting, organize and improve services, provide assistance, fulfill any legal obligations (especially accounting and tax)
Data controller - Fondazione Cassa Rurale Alta Valsugana piazza Gavazzi 5 - Pergine Valsugana (TN) info@fondazionecrav.it
Joint data controller - not present
Data protection officer (DPO) - not appointed
Representative in the EU - not appointed
Legitimacy of processing - Art. 6 § 1 lett b) GDPR (need to perform a contract or pre-contractual measures) Art. 6 § 1 lett c) GDPR (need to comply with a legal obligation)
Legitimate interest - not applied
Retention of data - 10 years (equal to the legal obligation to retain accounting records)
Possible recipients of data - technology service providers, accountant, banking institutions (possible recipients may process data only in the interest of the owner and for the purposes stated above)
Extra-EU transfer of data - data remains within the European Union
Your rights - your rights (available at the link below) can be exercised by contacting the data controller, representative or DPO by mail or email
Complaints - for any violation of your rights you can complain to the Data Protection Authority in Rome or, alternatively, to the supervisory authority of the place where you have establishment within the EU
Communication of data - necessary: without the communication of the required personal data it is not possible to conclude the contract between the owner and the data subject
Consent - not required