Privacy Policy

ANANDA SANGHA FOR SELF REALIZATION

Information in pursuance of Art. 13 of the GDPR

In accordance with Articles 13 and 14 of the Regulation (EU) 2016/679 (hereafter, GDPR) ANANDA SANGHA FOR SELF REALIZATION (hereafter, the Controller) based in NOCERA UMBRA (PG), VIA MONTECCHIO 67 – 06025, as Data Controller, informs you that your personal data which have been collected to conclude a contract with the data subject and/or in the execution and/or performance of the contract, or to provide the requested associative services will be processed in compliance with the aforementioned Regulation, in order to guarantee fundamental rights and freedoms as well as the dignity of natural persons, with particular regard to confidentiality and personal identity. We inform you that where the activities provided to you require the treatment of personal data of third parties in your ownership, it will be in your responsibility to ensure that you have complied with the regulatory requirements relating to the parties concerned, in order to make their processing by us legitimate.

Purposes of the processing

The data processing is aimed at the proper performance of the contract and provision of services, at the performing of association activities, and also at fulfilling the fiscal and accounting obligations, and those of different kind which are borne by the association, as required by current legislation.

The association activities and their specific underlying purposes include: the organization of free or paid online courses and Webinars; tours of the teachers across Italy and Europe for promoting the Sangha activities and for spiritual support to its associates and users; counselling, meditation sessions and online and in-person meetings with associates and users across Europe; study paths; activities aimed at the promotion of community living as a cultural model through public talks and meetings; support to Ananda meditation groups throughout Europe, also through online meetings.

The proper performance of the association activities also includes promoting mutual acquaintance of the associates and users who are part of the Ananda meditation groups, in order to create a network of people sharing the same path; awarding scholarships to foster the spiritual growth of the individual; the promotion and organization of spiritual and informative Festivals called Yogananda Festivals; the creation of study materials of various kinds: audio, video, texts, extracts, interviews and accounts for raising awareness and spiritual growth by the following means: websites, social media, messaging services and WhatsApp, printed form, USBs, CDs, DVDs and electronic channels of various kinds. Personal data may be stored in paper or electronic format – including portable devices and software applications – using methods which are strictly necessary to meet the above mentioned purposes.

Lawfulness of processing

In compliance with Art. 6 of the GDPR, processing is carried out only if one of the following applies:
a) fulfillment of contract obligations, execution and/or performance of the contract with the association and/or management of any pre-contractual measures;
b) compliance with any regulatory obligations, fiscal and tax regulations resulting from the performance of the associative activity as well as administrative and accounting obligations;
c) sending – directly or through third party suppliers of marketing and communication services – newsletters and communications for marketing purposes and for promoting the association by paper and e-mail, sms, mms, push notifications, fax or telephone operator with regard to the products supplied by the other companies, in compliance with Art. 130, paragraphs 1 and 2 of the Legislative Decree 196/03 of the Italian government (hereafter, the Code);
d) communication of data to third party companies and associations, including ANANDA ASD, for newsletters and communications also for marketing and social promotion purposes, sent by paper and e-mail, sms, mms, push notifications, fax or telephone operator, pursuant to Art. 130, paragraphs 1 and 2 of the Code.

The legal bases of data processing for the purposes a) and b) mentioned above are Art. 6.1.b) and 6.1.c) of the Regulation.

The provision of personal data necessary for these purposes is not mandatory, but any failure or refusal to provide personal data may result in the impossibility of the Data Controller to execute and/or perform the contract and deliver the services required.

The legal basis of personal data processing for the purposes c) and d) is Art. 6.1.a) of the GDPR, as treatment is based on consent. It should be noted that the Data Controller may collect one single consent statement for the marketing purposes herein, pursuant to the General Provision for data protection: “Guidelines on Marketing and against Spam – 4 July 2013” issued by the Italian Data Protection Authority. Giving consent to data treatment for marketing purposes is not mandatory, and where the Data Subject wants to object to data processing for marketing purposes performed by the aforementioned means or withdraw his/her consent, he or she can do it at any time without any consequence – except for not receiving marketing communications – following the indications given under the section “Rights of the data subject” in this document.

Consequences of failure to provide personal data

Regarding personal data relating to the performance of the contract or to the compliance with a regulatory obligation – for example, fulfillment related to keeping fiscal and accounting records – failure to provide personal data prevents completion of the contractual relationship.

Data retention

Personal data processed for the abovementioned purposes will be kept for the duration period of the contract and, subsequently, for the period in which the association is subject to store the information for fiscal purposes or for other purposes required by laws or regulations.

Categories of recipients to whom the personal data are disclosed

Your personal data, or personal data of third parties in your ownership, may be communicated to external companies or associations identified from time to time – including Ananda Associazione ASD, F.C. (Fiscal Code) 92002350541, VAT number 02754750541 – to which ANANDA SANGHA FOR SELF REALIZATION entrusts the performance of obligations and/or services resulting from the assignment, and which will process only data necessary to the activities required of them, or which cooperate with ANANDA SANGHA FOR SELF REALIZATION with the aim of promoting the social purposes of the association.

All the employees, advisers, temporary workers and/or any other natural person engaged in their activity on the basis of the instructions received by ANANDA SANGHA FOR SELF REALIZATION pursuant to Art. 29 of the GDPR, are identified as “Persons in charge of the processing”. ANANDA SANGHA FOR SELF REALIZATION gives appropriate operating instructions to the persons in charge of the processing or to the Processors – who may be designated – with particular reference to the adoption of and compliance with security measures, in order to guarantee data confidentiality and security. Specifically in this regard, the Data Subject is invited, in compliance with Art. 33 of the GDPR, to notify to ANANDA SANGHA FOR SELF REALIZATION any particular circumstances or events which are likely to result in a potential “data breach”, in order to enable an immediate assessment and the adoption of any measures against such an event, by sending a communication to ANANDA SANGHA FOR SELF REALIZATION, to the contacts provided below.

Furthermore, personal data may be disclosed to:
1. Professionals that provide instrumental services to the abovementioned purposes;
2. Bank or insurance companies that provide functional services for the abovementioned purposes;
3. Subjects that are processing data in compliance with specific legal obligations;
4. Public administrations or judicial authorities for the fulfillment of legal obligations.

Rights of the Data Subject

Among the rights guaranteed by the GDPR, the Data Subject has the right to request from the Data Controller: – access to personal data and to the related information;
– rectification of inaccurate personal data or completion of incomplete data;
– erasure of personal data (upon the occurrence of one of the conditions indicated in the GDPR art. 17, paragraph 1 and in compliance with the exceptions laid down in paragraph 3 of the same article);
– restriction of processing (upon the occurrence of one of the conditions indicated in the GDPR art. 18, paragraph 1);
– Where the processing is based on a contract or on consent, and is carried out by automated means, the Data Subject has the right to receive the personal data in a structured and machine-readable format, also for communicating those data to another Data Controller. Furthermore, the Data Subject has the right to:
– object at any time to the processing of personal data on grounds relating to his or her particular situation;
– withdraw his or her consent at any time, only where the processing is based on consent for one or more specific purposes and concerns common personal data such as birth date and place, or place of residency, or for special categories of data referred to the GDPR art. 9. The processing based on consent and carried out before the withdrawal of consent still remains lawful;
– send a complaint to the competent Supervisory Authority for personal data protection.

Having read the information referred to in this document, the Undersigned, aware that the non-provided consent could prevent the implementation of the planned services and the regular performance of the association activities, also considering the legal obligations of the association and with regard to the treatment of personal data:

DECLARES

that he or she has read this Information document provided by ANANDA SANGHA FOR SELF REALIZATION pursuant to Articles 13 and 14 of the GDPR, and gives explicit, free and informed consent to the processing of his or her personal data – including special categories of personal data (as specified by the GDPR) – exclusively for the fulfilment of the related processing operations as described in the aforementioned Information;

that he or she has read this Information document provided by ANANDA SANGHA FOR SELF REALIZATION pursuant to Articles 13 and 14 of the GDPR, and gives explicit, free and informed consent to the processing of his or her personal data – including special categories of personal data (as specified by the GDPR) – also for the aforementioned marketing purposes.