PERSONAL DATA PROCESSING POLICY

Erasmus Student Network Urbino (hereinafter, "ESN Urbino"), located at Urbino
via Saffi 2 (urbino@esn.it), as data controller, informs you
that, pursuant to art. 13 EU Regulation n. 2016/679 (hereinafter, "GDPR"), your data will
be processed in the manner and for the purposes indicated in this statement.

Object and purpose of the processing
The data object of the treatment are those that you provided us (name and surname,
postal address, mobile phone). This data are
collected by any means possible and it is required to become a member of ESN
Urbino and to be able to send you information about the activities of the association,
those of other associated companies (listed here) and those of two external subjects,
Erasmus Student Network Italy and Erasmus Student Network AISBL. You will be able to
receive further communications from commercial and institutional partners of the local
and national levels.

Data processing procedures
The processing of your personal data is carried out through the operations indicated in
article 4, paragraph 2 of the GDPR and specifically the: collection, recording, organization,
storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission,
dissemination, alignment or combination, restriction, erasure, or destruction. The
processing of data will be done with electronic and non-electronic means for the pursuit of
the purposes set out above, in compliance with the provisions of the law and the principles
of fairness, applying standard security measures to minimize the risks of disclosure.
The data will be kept until you are a member of the association or until you use the services
of our Association and then for a time in accordance with the requirements of the law.

Communication of data
Personal data may be shared with institutional and commercial partners of ESN
Urbino, with Erasmus Student Network Italy, Erasmus Student Network AISBL and
their respective institutional and commercial partners, in order to improve the experience
of exchange projects for the members of ESN Urbino and other associations belonging
to the Erasmus Student Network.
Without the need for your expressed consent (pursuant to Article 6 letter b) and c) GDPR),
ESN Urbino may communicate your data, for the purposes referred to in art. 2.A) to
Supervisory Bodies, Judicial Authorities, to insurance companies for the provision of
insurance services, as well as those subjects to whom the communication is mandatory by
law for the accomplishment of said purposes. These subjects will process the data in their
capacity as independent data controllers.
ESN Urbino declares that personal data may be shared with natural or legal persons
established in the European Union. The eventual transfer outside the European Union will
only take place through companies based in countries with privacy regulations deemed
appropriate by the decision of the European Commission. Personal data may be shared with
companies located in the United States having a certificate of compliance to the EU-US
Privacy Shield.

Rights of the Data Subject
As data subject, you have the rights set forth in articles from 15 to 22 of the GDPR and
specifically:
1. You have the right to obtain confirmation of the existence or not of your personal
data, even if not yet registered, and communication of the same in an intelligible
form;
2. You have the right to be informed of: a) the origin of the personal data; b) the
purposes and methods of its treatment; c) the logic applied in case of processing
data with the aid of electronic tools; d) the identity of the owner and managers of the
data; e) the identity of subjects or categories of persons to whom the personal data
may be communicated or who can learn about them as managers.
3. You have the right to request: a) update, rectification, and, when deemed of
interest, the integration of the data; b) the erasure, the conversion to an anonymous
the format or the block of data that has been processed in violation of the law, including
those data that do not need to be retained for the purposes for which it was
collected and processed; c) confirmation that the operations described in sections
a) and b) were made known, including their content, to the parties to whom the data
was communicated or transmitted, except in cases when it may not be possible to
do so or when it necessitates a disproportionate effort compared to the protected
right;
Where applicable, you also have the rights under articles from 16 to 21 of the GDPR
(Right to rectification, right to erasure (right to be forgotten), right to restriction of
processing, right to data portability, right to object, as well as the right to lodge a complaint
with a supervisory authority).

Methods of exercising the rights
At any time you can ask by post or email the Data Controller to change or delete your data
Saira Cieri, presidente@esnurbino.it
Your request will be satisfied within 30 days.
Any reason for dissatisfaction or protest can be reported by you to the Guarantor for the
protection of personal data.