This information notice is provided pursuant to Article 13 of the GDPR to persons who fill out the contact form available on the Data Controller’s website.

Identity of the Data Controller
The Data Controller is Aps Vajne, with registered office at Via Baldissero 21, Vidracco (TO), represented by its legal representative pro tempore.

No Data Protection Officer (DPO) has been appointed.

Source of the Data
The personal data processed are those voluntarily provided by the data subject through completion of the form available on the Data Controller’s website.

Purpose of the Processing
Personal data are processed in order to respond to the requests made through completion of the online form.

Legal Basis of the Processing
The legal basis for processing is the consent expressed through an unequivocal positive action consisting of the free, unconditional, and informed submission of the completed form.

Recipients of the Data
The personal data processed by the Controller are not disseminated, nor made known to unspecified parties in any form, including by making them available or merely consultable.
They may, however, be communicated to employees working under the Controller’s authority, to external entities collaborating with the Controller and designated as Data Processors, or authorized to process data as they operate under the Controller’s supervision.
They may also be communicated, to the strictly necessary extent, to subjects who, for the purpose of fulfilling your requests, must supply goods or perform services on behalf of the Controller.
Finally, they may be communicated to parties entitled to access them under laws, regulations, or EU provisions.
In particular, based on their roles and duties, employees have been authorized to process your personal data within the limits of their competence and in accordance with the instructions provided by the Controller.
External subjects operating under the Controller’s authority have also been duly authorized according to the type of service provided, the processing performed, and the nature of the data processed.
External parties to whom the Controller has entrusted the processing of personal data have been formally appointed as Data Processors.

Data Transfer
Should the Data Controller transfer personal data to third countries or international organizations for the purposes described above, you will be informed whether or not an adequacy decision by the European Commission exists.
The Controller reserves the right to use cloud-based services; in such case, the service providers will be selected among those offering adequate safeguards as required by Article 46 GDPR 679/16.

Data Retention
The Data Controller retains and processes personal data for as long as necessary to achieve the stated purposes.
Specifically, the data entered in online forms are stored for a maximum period of two years.

Refusal to Provide Data
The data subject may refuse to provide their data to the Controller.
However, failure to provide such data may hinder or make it impossible to respond to or process the requests submitted.

Data Subject Rights
With reference to Articles 15 (right of access), 16 (rectification), 17 (erasure), 18 (restriction), 20 (portability), 21 (objection), and 22 (objection to automated decision-making) of the GDPR, the data subject may exercise their rights by writing to the Data Controller at the address indicated above, or by email at apsvajne@damanhur.org, specifying the subject of the request, the right they intend to exercise, and attaching a copy of an identity document proving the legitimacy of the request.
The Controller particularly reminds that every data subject may exercise the right to object under the conditions and in the manner provided for by Article 21 GDPR.

Withdrawal of Consent
Pursuant to Article 7 of the GDPR, the data subject may withdraw their consent at any time.
Withdrawal of consent will result in the termination of the processing of the data entered in the form.

Right to Lodge a Complaint
The data subject has the right to lodge a complaint with the supervisory authority of their country of residence.

Automated Decision-Making
In no case, with regard to the processing in question, does the Controller carry out processing that consists of automated decision-making on personal data.