Information on the processing of personal data pursuant to art. 13 and 14 of EU Regulation 679/2016

We hereby inform you that, pursuant to art. 13 and 14 of EU Regulation 679/2016 (hereinafter 'GDPR'), your data provided to us through the use of the website www.lifemuscles.eu (hereinafter, also only "Site") will be treated as follows, in compliance with the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. This information provides the user (interested in the treatment) with any further information necessary to ensure correct and transparent treatment, in relation to the specific context in which personal data are collected and subsequently processed. This information is provided only for the Site and its related subdomains and not for third-party websites accessible via any hypertext links (links) contained on the Site, for which the Data Controller is in no way responsible. For these treatments, autonomous information must be provided by the respective owners.

Data Controller

Legambiente Nazionale APS (P.IVA 02143941009), in the person of its pro tempore legal representative.

Address: Via Salaria n.403- 00199 Rome (ROME)
Phone: +39 06 862681
Email to which you can send any type of request: privacy@legambiente.it

Data Protection Officer (DPO)

National Legambiente APS has provided for the designation of a Data Protection Officer (RPD) pursuant to articles 37 and following of EU Regulation 2016/679 (RGDP), which can be contacted at the following email address: dpo@legambiente.it .

Purpose of the treatment

1. Monitor the technical functioning and performance of the site.

2. Respond to requests received through the contacts on the site and/or through the form on the "contacts" page.

Legal basis of the processing and mandatory provision of data

Legitimate interest of the data controller (Article 6, paragraph 1, letter f) of the GDPR).
Execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the interested party (Article 6, paragraph 1, letter b) of the GDPR).

The provision of data is mandatory with reference to these purposes, if it is denied this will make it impossible to respond to your communications.

Storage period

Until the end of the session / closing of the browser.
Up to the time necessary to respond to requests received on the user's initiative.

Data categories and treatment methods

The data processed can be:

to) Navigation data
The navigation data, collected automatically, exclusively for the purpose of obtaining aggregated and anonymous statistical information relating to the use of the Site (including, by way of example, IP addresses, navigation times, geographical data and other parameters relating to the system operating system and the user's IT environment); however, this information could, also through processing and/or association with other data, held by the provider or by third parties, allow the user's identity to be traced, as well as be used to ascertain any liability in the event of hypothetical computer crimes against damage to the site or, in any case, connected to navigation on any links.

b) Cookies
This site uses cookies or markers, which are technically packets of information sent by a web server (in this case, from this site) to the user's browser and stored by the latter on their device (personal computer, tablet, mobile phone, etc.) and automatically sent back to the server at each subsequent access to the site.

c) Social networking plugins
This site also incorporates plugins and/or buttons for social networks, in order to allow easy sharing of content. These plugins are programmed so as not to set any cookies when accessing the page, to safeguard user privacy. Eventually cookies are set, if so provided by social networks, only when the user makes effective and voluntary use of the plugin. Keep in mind that if the user browses being logged into the social network then he has already consented to the use of cookies conveyed through this site when registering with the social network.

The collection and use of the information obtained through the plugin are governed by the respective privacy policies of the social networks, to which please refer.

d) Data provided voluntarily by users/visitors
If you decide to send messages to the contact details on the site and/or via the form on the "contact" page, the Data Controller will process such data only to respond to your requests.

The treatment will be carried out using IT tools, also by means of persons authorized to do so, who operate under the direct authority and according to the instructions given by the Data Controller, with logic strictly related to the purposes indicated and, in any case, in such a way as to guarantee the security and confidentiality of the data processed.

The processing operations are carried out in such a way as to guarantee the security of the data and of the systems. Specific security measures are adopted in order to minimize the risk of destruction or loss, even accidental, of the data, unauthorized access, unauthorized or non-compliant processing with respect to the purposes indicated in this statement. In particular, the Site uses the HTTPS protocol for server authentication and encryption of the communication channel. The security measures adopted, however, do not completely exclude the risk of interception or compromise of personal data transmitted with telematic tools. It is therefore recommended to check that the device in use by the user is equipped with adequate software systems for the protection of both incoming and outgoing data transmission (such as, for example, updated antivirus systems, firewalls and filters antispam).

Recipients

In addition to the Data Controller, other subjects involved in the organization (appointed personnel) or external subjects (hosting providers, other third party technical service providers) may also have access to the Data, also appointed, if necessary, as Data Processors by the Data Controller. The updated list of Managers can always be requested from the Data Controller.
The possible communication of data at the request of the judicial or public security authorities remains unaffected, in the ways and in the cases provided for by law.

Spread

In no case will personal data be communicated, disseminated, assigned or in any case transferred to third parties for illicit purposes and, in any case, without providing suitable information to the interested parties and acquiring their consent, where required by law.

Data transfer abroad

The transfer of your data to countries outside the European Economic Area (EEA) takes place by third-party cloud service providers which Legambiente uses to manage its activities. In this case, personal data will not be transferred to countries or international organizations not belonging to the European Union which do not guarantee an adequate level of protection, recognized, pursuant to art. 45 GDPR, based on an adequacy decision by the EU Commission. In the event that it is necessary for the provision of the services of the Site, the transfer of personal data to countries or international organizations outside the EU, for which the Commission has not adopted any adequacy decision pursuant to art. 45 GDPR, will take place only in the presence of adequate guarantees provided by the recipient country or organisation, pursuant to art. 46 GDPR and provided that data subjects have enforceable rights and effective remedies. In the absence of an adequacy decision by the Commission, pursuant to art. 45 GDPR, or adequate guarantees, pursuant to art. 46 GDPR, including binding corporate rules, the cross-border transfer will take place only if one of the conditions indicated in art. 49 GDPR.

Rights

The GDPR recognizes various rights to the interested party, which he can exercise by contacting the Data Controller at the addresses indicated in this information, provided that the conditions provided for by the legislation are met from time to time:
access your data: you have the right to obtain information on the Data processed by the Data Controller, on certain aspects of the processing and to receive a copy of the Data processed;
check and ask for rectification: can verify the correctness of their Data and request its updating or correction;
obtain the cancellation or removal of their Personal Data: when certain conditions are met, you can request the cancellation of your Data by the Owner;
withdraw consent at any time: you can revoke the previously expressed consent to the processing of your Personal Data.
object to the processing of your data: you can oppose the processing of your Data when it takes place on a legal basis other than consent;
obtain the limitation of the treatment: when certain conditions are met, you can request the limitation of the processing of your Data;
achieve data portability: you have the right to receive your Data in a structured format, commonly used and readable by an automatic device and, where technically feasible, to obtain its transfer without obstacles to another holder. This provision is applicable when the Data are processed with automated tools and the processing is based on consent, on a contract of which you are a part or on contractual measures connected to it;
propose a complaint: you can lodge a complaint with the competent personal data protection supervisory authority or take legal action.

How to exercise your rights
To exercise your rights, you can direct a request to the contact details of the Data Controller indicated in this document. Requests are filed free of charge and processed by the Data Controller as soon as possible, in any case within a month.
The interested party may avail himself, for the exercise of his rights, of non-profit bodies, organizations or associations, whose statutory objectives are of public interest and which are active in the sector of the protection of the rights and freedoms of the interested parties with regard to the protection of personal data, conferring, for this purpose, a suitable mandate. The interested party can also be assisted by a trusted person.

To know your rights, propose a
complaint/report/appeal and always be updated on the legislation in
on the protection of individuals with regard to the processing of personal data,
the interested party can contact the Data Protection Authority
personal data, by consulting the website at http://www.garanteprivacy.it/.