Dear Members, Supporters, Visitors,

Object: Information on the handling of personal data in reference to section 13 of D. Lgs. 196/03, on the individual's protection in relation to the handling of personal data.

We inform you that due to the organization of our interaction with you, our association is holding data qualifying as personal, in reference to the D. Lgs.196/03 (Privacy Code).
This law primarily ensures that whosoever handles personal data is required to inform the person whose data are handled, and inform them on some essentials that define such handling. This must take place with correctness, accuracy and transparency, in protection of your privacy and your rights.
In adherence to such regulation we share the following information with you:

1. Area of effectiveness of the law
The present regulation is effective for all handlings carried out from the Holder and concerning the management of the Institute and the information that is gathered during these activities.

2. Type of data handling
We handle your vital statistics and the data concerning the registration amount and/or of support amounts paid from you, that are fundamental for the correct management of associative activities, as book keeping and tax fulfillments.
Furthermore we hold data that can be qualified as "sensitive" (art. 4 comma d) D.Lgs 196/03, handled on the guidelines of the General Consent n.3, while we do not handle any of Your data of legal or judicial nature (art. 4 comma e) D.Lgs 196/03.
We handle the following data in detail:
DATA CATEGORY DATA CATEGORY DESCRIPTION
Racial or ethnic origins
Health condition Information on accidents, diseases, pregnancy, etc. The information can include the relatives of the person only on his/her request to have access to benefits, fulfill contracts
Personal data concerning the members of non profit associations, boards or companies, also not legally recognized non political, religious, philosophical, or of labor union. Name, surname, age, sex, place and date of birth, private address, job address telephone number, fax or email
Personal data of visitors, members, supporters or sponsors of non profit organizations, boards or companies, also not legally recognized, non political, religious philosophical, or of Labor Union. Company name and/or name, surname, age, sex, place and date of birth, private address, job's address, tel. number, fax or email.
Photos and videos of the Association's activities

3. Way of gathering data
Data are gathering in these ways:

• Description of the procedures of the gathering of data
• Processing data gathered from third parties
• Handling's organization in mostly non electronic mode
• Gathering data through email
• Electronic data processing
• Gathering of data from the person him/herself
• Gathering of data for third parties' handling

4. Aim of handling
With aim of handling is meant the purpose, the reason for the gathering of data. Depending on the intention, in some instances is compulsory to have your agreement to proceed to the gathering and handling of data. In the event of its requirement, it will be indicated in detail in an approval's application form, where you can freely authorize all, or people of your choice only. The following sums up the motivations to make use of your data:

DESCRIPTION OF FINALITIES

• Fulfillment of tax duties, book keeping and/or contractual
• Fulfillment of duties issued from received assignments and/or stipulated contracts
• Distribution of services requested from the person concerned
• Management of personal financial activity
• Transmission of information through e-mail (address specified at the registration to our association) to the person concerned, to inform him/her on activities happened or to be happening in future schedule.
• Management of lists, activities and contributions of members, supporters or associates (people, associations, foundations, committees, etc.)
• Promotion of the association's activities

5. Ways of handling
The handling of data, takes place mainly in a non- automated form, using instruments and procedures suited to guarantee security and privacy, even when using more technologically advanced means, such as the Web. The handling takes place with the aid of the following methods:

Data Type

• Paper
• Electronic

The handling can comprehend all operations or group of operations of gathering, recording, organizing, conserving, consulting, processing, modifying, selecting, extracting, comparing, utilizing, interconnecting, blocking, deleting and destroying data as in the art. 4, comma 1, lett.(a), and all that is essential for the handling, including the communication and the diffusion of what relates the individuals concerned, as specified in the relative section of the present law.
Such data will be:
a) handled in a lawful and correct way;
b) gathered and recorded in a lawful and legitimate manner and for specific purposes, and utilized in other handling operations, in terms compatible with such purposes;
c) Exact, and updated when needed;
d) Appropriate, complete and not exceeding the purpose of their gathering, or subsequently handled;
e) Stored in a form that allows the identification of the individual concerned, and for a length of time not exceeding that required for the purposes they have been gathered for, and subsequently handled; as for the Art. 11 D. Lgs 196/03
Specific security measures are observed to prevent the loss of data, illicit or incorrect management and unauthorized access.

6. Some handling operations will be trusted to third parties
For some handling operations we make use of external people. Such operations and the categories of data trusted are detectable from the following list:

Data Company's name Location Duty External manager Description of finalities
C.E.D.
Esadati Santa Croce sull'Arno (FI) External manager BERTINI Cinzia Fulfillment of tax duties, book keeping and/or contractual
Dati contabili Studio Ruglioni Santa Croce sull'Arno (FI) External manager RUGLIONI Gianluca Fulfillment of tax duties, book keeping and/or contractual
Dati soci CO.N.A.C.R.E.I.S. Torino Autonomous holder Structure's Manager Management of lists, activities, members, supporters and associates contributions (Physical persons, legal persons, associations, foundations, committees, etc).
Such external managers have given us the maximum guarantees in reference to the execution of the above operations in total respect of the privacy's regulation. We nevertheless apply constant controls on such managers, so that the guarantees are never lost, even in the event of them being considered autonomous holders.

7. CO.N.A.C.R.E.I.S. (National Coordination for Associations and Communities of Inner and Spiritual Search)
CO.N.A.C.R.E.I.S., registered to the APS at the number 18, is our reference Association. Because of statute's motives, we are compelled to share our members' data with such organization that will handle your data only for the above motivations.

8. Personal data security
Personal data are protected from unauthorized access, use or publication. Only our staff in charge, holding qualifications of authenticity can access such data, and all the security procedures needed to protect them from violations from unauthorized personnel, locally or on the Web, will be applied. All given personal data are kept in a controlled and safe environment. To such end, physical, electronic and organizational processes have been arranged to secure and protect the gathered information.

9. Duty or power of conferring data
Ordination of data is completely optional. Their missed attainment, or the impossibility to be able to communicate them to CO.N.A.C.R.E.I.S., will result in a single consequence, the impossibility to rank you as a member of the association.

10. Sharing of information
Personal data will not be sold, commercialized, or leased to third parties. In the event of such requirement, permission of the person concerned will be requested. Personal data cannot be published or released as specified at the point "Sharing and circulation"

11. Sharing and Circulation
11.1 Circulation
Photos and videos of you can be published on the association's website, to promote the association's activities.
11.2 Sharing
Your data can be communicated, this means to share them with one or more individuals, in the following terms:

Description of Sharing
Associations, foundations, boards, or non-profit companies of the associative kind.
They can be furthermore shared with:
• People that are allowed to access the database through a law disposition, regulation, or communitarian law, within the limits of such regulations.
• Opening of the database, where your data too, is recorded, for the people who maintain our information system and/or the software we use, in the event of malfunction or security problems of the handling, and only for the time strictly required for the resolution of the problem.
• To our consultants, in the limits indispensable to carry out their duties on behalf of our institute, after having received a letter from us to remind them of the principles of privacy laws.
• To third party companies, to whom we entrust some handling operations as specified at point 6
• To our organizers of the handling, even for security reasons, whose names are reported in the section "Holder and managers" of the present informative document.
• The following category of people that can come to know Your data, in quality of managers or individuals in charge of the handling, chosen from the holder of the handling: Members/Managers of the handling

12. Your Rights
Individuals to whom personal data are referring to, have the right in any given moment to obtain confirmation on the existence or non existence of such data, and to know their content and source, to verify their correctness, or to ask for their integration, their update, or rectification, as in Art. 7 of D.Lgs. 196/03.
According to the same paragraph, you have the right to ask for cancellation, for the transformation in an anonymous form, or the blocking of the handled data in the event of violation, and furthermore, for lawful grounds, to oppose to:
• The handling of personal data concerning him/herself, even if relevant to the purpose of the gathering.
• In the event of the handling of personal data concerning him/her, for the purpose of distribution of advertising material or of direct sale or for market researches or commercial message.
To exert such rights you can turn to the appointed manager as in paragraph 13, (f ) D. Lgs 196/03, namely Sig.ra CALCAGNO ILARIA, who can be found as follows:
• Telephone: 0039-0577-960124
• E-mail: This e-mail address is being protected from spambots. You need JavaScript enabled to view it
• Postal address at the head office of our association: Istituto Osho Miasto - Podere San Giorgio 16 - I- 53012 Chiusdino (SI) - Italy
Follows a report of the paragraph 7 D.Lgs. 196/03, to remind you that you can exercise towards us the following rights:
Paragraph 7 (Right of access to personal data and other rights)
1. The person concerned has the right to obtain confirmation of the existence or non-existence of personal data concerning him-/herself, even if not yet registered, and their communication in an intelligible form.
2. The person concerned has the right to obtain the indication:
a) of the source of such data
b) of the finalities and ways of the handling
c) of the applied logic in the event of handling with the aid of electronic instruments
d) of the information of the identity of the holder, managers, and of the appointed representatives as for the paragraph 5, comma 2;
e) of the individuals or the categories of individuals with whom personal data can be shared, or can come to know them in quality of appointed representative in the state territory, in quality of managers or individuals in charge.
3. The individual concerned has the right to obtain:
a) the update, the rectification or when so desiring, the integration of data;
b) the removal, the transformation into an anonymous guise, or the blocking of data, if handled in violation of the law, even of those whose conservation is not essential for the aim of their gathering and subsequent handling;
c) the certification that the actions of letters: a) and b) were known, even for their content to the individuals to whom the data have been communicated or shared with, except in the event this fulfillment happens to be impossible or needs the use of means clearly disproportioned in comparison to the protected right.
4. The person concerned has the right to oppose totally or partially and for lawful reasons:
a) to the handling of personal data concerning him/her, even if pertaining the purpose of the gathering;
b) to the handling of personal data concerning him/her to the end of the conveyance of advertising material or of direct sale, marketing research or commercial communication.

13. Holder and managers of the handling
Holder of the handling
Legal Representative
ISTITUTO OSHO MIASTO
Podere San Giorgio, 16 53031
Casole d'Elsa
PRATI Ivano Angelo
Personal Data Access Manager ref. Paragraph 13

DATA Access Manager
ISTITUTO OSHO MIASTO
Podere San Giorgio, 16 53031
Casole d'Elsa
CALCAGNO Ilaria

The complete list of all the managers for the handling of personal data, appointed from us, is easily available by contacting the person in charge of the data access.