Skip to main content

Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

REGULATION (EU) 2016/679 (GDPR)

***

MG CAR CLUB d'Italia – Registro Italiano MG, with registered office in Rubano (PD) at Via Risorgimento, 5 – CF 97143710586, as the data controller (hereinafter the "Controller"), informs you, pursuant to art. 13 of EU Regulation no. 679/2016 (hereinafter the "Regulation"), that the personal data you voluntarily provide may be processed in the manner and for the purposes indicated below and, in any case, in compliance with the principle of confidentiality that inspires the Club's activity.

1. Purpose and legal basis of the processing

Your personal data will be processed (for the definition of 'processing', see art. 4, paragraph 2 of the Regulation) for the following purposes:

  1. process requests, in any form submitted to the Club's attention, from interested parties relating to the Club's activities;
  2. accommodate the requests of interested parties regarding registration for online services, registers, events, demonstrations and/or initiatives of the Club and/or the ASI Federation, and their subsequent management;
  3. fulfill the obligations arising from the management of the relationship with the interested parties, as provided for by law, regulations, the statute and federal regulations and in general by the legislation applicable from time to time, both nationally and internationally.

The legal basis for processing is the provision of consent to the processing of personal data.

2. Personal data subject to processing

2.1 Personal data

In particular, the personal data in question conce

- name, address, telephone number, email address, or other information useful for personal identification,

- asset information relating to the vehicles you own, with particular reference to the historic vehicles you have reported to the Club

- possibly your image, with specific authorization

2.2 Special categories of personal data (“sensitive data”)

The Club may, in carrying out its activities, process special categories of data, such as health data, as well as personal data revealing health status; in this case, your written consent will be required for such processing.

3. Data retention periods

Your data will be stored according to the following criteria:

- for a period of time no longer than necessary to achieve the purposes for which they were provided and to comply with the resulting regulatory obligations.

- no later than 5 years after the termination of the membership relationship with the Club

4. How we use your data

Data processing is carried out using paper and electronic media, with suitable measures to guarantee security and confidentiality, aimed at preventing unauthorized access, loss, or destruction, in compliance with the provisions of Chapter II (Principles) and Chapter IV (Data Controller and Data Processor) of the Regulation.

The data may be processed by internal or external parties specifically authorized and committed to confidentiality.

5. Scope of data circulation

The data may also be processed by third-party companies that perform activities on behalf of the Data Controller, in their capacity as external data processors (for example, but not limited to: credit institutions, professional firms, suppliers/consultants who manage and/or participate in the management and/or maintenance of the electronic and/or IT tools we use, insurance companies for the provision of insurance services, for the time strictly necessary for the optimal performance of such service). Your personal data will be made accessible only to those who genuinely need it in relation to the performance of their duties or hierarchical position. These individuals will be appropriately trained to prevent loss, destruction, unauthorized access, or unauthorized processing of the data.

Without your express consent (pursuant to Article 6, letters b) and c) of the Regulation), the Data Controller may disclose your data to supervisory bodies, judicial authorities, and any other parties to whom disclosure is mandatory under express legal provisions.

6. Nature of the Processing

We remind you that, with reference to the purposes highlighted in paragraph 1 – Purpose and legal basis of the processing, the provision of your personal data is mandatory.

Your refusal and/or the provision of inaccurate and/or incomplete information would prevent you from joining the Club and carrying out any other activities you may request.

7. Dissemination of data

Your data will not be disclosed to unspecified parties.

Any photographic or film footage may be shared on the website, local and national television channels, or other social media.

By signing up to the Club, you were asked to provide express authorization for the dissemination of your image. If you have not signed this authorization, during events involving photographic or filming, you are required to remain in designated areas, not designated for filming. Your presence in filming areas constitutes your express consent to the dissemination of your image through the media channels indicated above.

8. Transfer of data abroad

For needs strictly related to the pursuit of the purposes specified above (for example, participation in international sports competitions and entry procedures into the relevant non-EU host countries), some of your personal data may be transferred to non-EU countries and/or organizations.

In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in compliance with Articles 44 et seq. of the Regulation and applicable laws, stipulating, where necessary, agreements that guarantee an adequate level of protection.

9. Data Controller and Data Protection Officer

The Data Controller is MG CAR CLUB d'Italia – Registro Italiano MG identified in the header.

The Club has appointed its President pro tempore as the Data Protection Officer (DPO) pursuant to Article 37 of the Regulation. This person may be contacted for questions regarding the processing of your data by writing to the email address presidente@mgcarclubitalia.org

 

10.Exercise of rights

As the data subject, we inform you that you have the right to exercise the rights provided for by the Regulation, specifically:

a) the right, pursuant to Article 15, to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and the following information: i) the purposes of the processing; ii) the categories of personal data concerned; iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular third countries or international organizations; iv) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; v) the existence of the right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning you, or to object to such processing; vi) the right to lodge a complaint with a supervisory authority, pursuant to Articles 77 et seq. of the Regulation; vii) where the personal data are not collected from the data subject, any available information as to their source; viii) the existence of automated decision-making, including profiling, referred to in Article 22, paragraphs 1 and 4 of the Regulation, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject; ix) the right to be informed of the existence of appropriate safeguards pursuant to Article 46 of the Regulation relating to the transfer, where personal data are transferred to a third country or to an international organisation;

b) the data subject will also have (where applicable) the possibility of exercising the rights referred to in Articles 16-21 of the Regulation (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object).

We inform you that our Club undertakes to respond to your requests no later than one month from the date of receipt. This deadline may be extended depending on the complexity or number of requests, and the Club will explain the reason for the extension within one month of your request. The outcome of your request may be provided in writing, either on paper or electronically.

11. How to exercise your rights

The interested party may exercise the above-mentioned rights at any time in the following ways:

- by sending an email to the address presidente@mgcarclubitalia.org