PRIVACY POLICY INFORMATION AND CONSENT FOR PROCESSING OF PERSONAL DATA

Owner of Data Processing (Data Controller)
The Data Controller is Federazione Rinascimento Italia (FRI), with headquarter in Corso Barolo, 47, Alba (CN) - ITALY. Registered at the Italian Chamber of Commerce under VAT no. 92076050050. For any inquiries, you may contact us via email at info@rinascimentoitalia.it.  

Data Protection Officer (DPO)
The Data Protection Officer (DPO) is Mr. Federico Leone, who can be contacted at the following email address: privacy@rinascimentoitalia.it.  

Purpose of Processing and Legal Basis
The purpose of the processing is to support the ZeroSpike civic research project initiated by FRI. This includes enabling associated physicians to conduct independent and autonomous medical-scientific research. The legal basis for processing is the data subject’s consent, provided in accordance with national and European data protection laws, as outlined in this document. 

Special Categories of Personal Data
FRI will process special categories of personal data (e.g., health-related information) only with the explicit consent of the data subject. For minors, consent must be provided by a parent or legal guardian, who assumes full responsibility. 

Processing and Storage Methods
Personal data will only be stored as necessary for research activities conducted by associated physicians. Processing will be carried out using secure systems and methods that comply with GDPR requirements, ensuring confidentiality, integrity, and availability of data. Once the research purposes are achieved, the data will be securely deleted or anonymised. 

Scope of Communication and Dissemination
Personal Data may be disclosed to the following categories of recipients:

1. Third-party Data Processors:
   Entities that perform part of the processing activities and/or activities related and instrumental to the purposes of the Data Controller. These parties have been formally appointed as Data Processors in accordance with Article 4 (point 8) of the GDPR (hereinafter referred to as "Data Processors"). 
2. Employees or Collaborators of the Data Controller:
   Individuals entrusted with specific processing activities, who act under the authority of the Data Controller. These individuals have been properly instructed and authorised to process Personal Data, ensuring compliance with security standards and proper data handling practices. For the purposes of Article 4 (point 10) of the GDPR, these individuals are considered “Third Parties.”
3. Public Authorities or Judicial Bodies:
   Where required by law, or to prevent or suppress criminal activity, Personal Data may be disclosed to competent public authorities or the Judicial Authority. Such disclosures are not classified as communications to "Recipients" under Article 4 (point 9) of the GDPR. 

The Collected Data will not be subject to dissemination or made publicly available unless explicitly authorised by the data subject or required by law. 

Transfer of Personal Data
Personal data will not be transferred to entities outside the European Union unless such transfers are compliant with Chapter V of the GDPR, including the use of Standard Contractual Clauses (SCCs) or other adequate safeguards. 

Rights of the Data Subject
Data subjects have the following rights under Articles 15–22 and 77 of the GDPR: 

• Right to access their personal data;
• Right to rectify inaccurate or incomplete data;
• Right to erasure ("right to be forgotten");
• Right to restrict processing; 
• Right to data portability; 
• Right to object to processing;
• Right not to be subject to automated decision-making; 
• Right to lodge a complaint with the relevant supervisory authority.

To exercise these rights, you may contact the Data Controller at the contact details provided above. 

Data Retention
Personal data will be retained only for the duration necessary to fulfil the purposes stated, or as required by applicable laws and regulations. Once the retention period expires, data will be securely deleted or anonymised. 

Consent Declaration
By signing this document, I acknowledge that I have received all the necessary information regarding the processing of my personal data. I hereby give my consent to the processing and communication of special categories of data strictly for the purposes outlined in this document. 

Date: ____________________ 

Signature: ____________________ 

https://zerospike.org/en/privacy-policy-consent/