Privacy

INFORMATION PROVIDED PURSUANT TO ART. 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679

According to the legislation indicated, this processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

Pursuant to article 13 of the GDPR 2016/679, we therefore provide you with the following information:

A – PERSONAL DATA

Personal data (name, surname, identification document details and copy of the same, telephone number, email address, etc.) will be provided at the time of joining depending on the type of contract signing requested.

Dynasty of Freedom DOF – Non-profit cultural association with registered office in Via Mazzini 39, Desenzano del Garda, 25015 Brescia, as owner of the processing of your personal data, informs you about their use and your rights, so that you can consciously express your consent, where required, and exercise the rights provided for by the General Regulation for the protection of personal data (European Regulation 679/2016, hereinafter: The regulation). Your personal data (provided to us by you, by third parties or coming, within the limits of the law, from public lists) may be processed for the following expressly declared purposes: The personal data provided by the Customer/interested party are mainly processed for the execution of the Contract and the management of credit and, more generally, of the relationship arising from the Contract itself.

Below in particular we specify the meaning of the types of purposes:

1. by law: that is, to fulfill obligations established by law, by a regulation, by European Union legislation as well as by provisions issued by authorities legitimized to do so by law or by competent supervisory or control bodies (in this case your consent does not it is necessary as the processing of data is related to compliance with these obligations/provisions). Among the data processed by law we mention those relating to tax regulations or anti-money laundering registers.
2. contractual and, more generally, administrative-accounting, i.e. to carry out obligations deriving from the contracts of which you are a party or to fulfill, before the conclusion of the contract, your specific requests, also through remote communication techniques, including a call dedicated telephone center (in this case your consent is not necessary, since the processing of data is functional to the management of the relationship or the execution of requests); These treatments also include the purpose deriving from the protection of mutual interests in court and for tax purposes or for other legal obligations such as, for example, the keeping of anti-money laundering registers if applicable.
3. direct commercial and profiling: i.e. to provide you with information and send you informative, commercial and advertising material (also through remote communication techniques such as, but not limited to, postal correspondence, telephone calls including through automated calling systems, fax, e-mail, SMS messages or MMS or other type) on products, services or initiatives of the company, to promote them, to carry out direct sales actions, to carry out market research, to verify the quality of the products or services offered to you (also through telephone calls or sending questionnaires), to optimize the offer itself (also through focused and selected analyses), to carry out commercial communications, to carry out statistical research, to apply one or more profiles to you (for the purpose of making appropriate commercial decisions or to analyze or predict, again for commercial purposes, your personal preferences, your behaviors and your attitudes). (In this case your consent is optional and does not prejudice the maintenance of relations with the company).
4. indirect commercial: i.e. by communicating your data to third parties so that they can carry out their own independent commercial activities as indicated in the previous number 3. (In this case your consent is optional and does not prejudice the maintenance of relations with the company)
5. post-commercial posts: i.e. in order to further investigate, following the termination or revocation of relations with the Company, the reasons for the interruption of relations. (In this case your consent is optional and does not prejudice the maintenance of relations with the company)
6. It is possible that the Data Controller changes the purposes for which your data were collected. In this case, the Data Controller will collect your explicit consent to the new purposes if necessary based on current regulations
7. 'Special' data, also known as 'sensitive' data, i.e. personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data intended to uniquely identify a natural person, data relating to the person's health or sexual life or sexual orientation (art. 9 of the regulation) or relating to criminal convictions and crimes or related security measures (art. 10 of the regulation). Such data can only be processed with your explicit written consent if one of the reasons indicated in article 9 paragraph 2 and art. 10 of the regulation. Consent is free and optional but refusal to consent could jeopardize the performance of one or more activities requested by you from the company which specifically concerns facts for which it is essential to process this type of data.
8. Your data may be subject to transfer to third parties for the purposes declared by the Data Controller

B – DATA PROCESSING METHODS.

The processing of your data takes place using manual tools and by means of manual/paper archiving and by means of electronic and automated tools, with methods strictly related to the purposes indicated above. Where you have given consent, the processing can also take place through profiling or comparison of the data. The Company has adopted technical and organizational measures to prevent and limit the risk of loss, deterioration or theft of your data, and to ensure its restoration within a reasonable time in the event of a 'data breach'.

The processing takes place in such a way as to guarantee the safety, protection and confidentiality of your data.

Within the company, they may become aware of your personal data, as managers or processors:

• employees, managers and administrators or partners of the company who have or hold by law or company statute administrative, collaborator or commercial roles subject to self-employment contracts who operate within the company structure. The Company has provided these personnel with adequate training and instructions to protect the conservation, maintenance, updating and security and confidentiality of your data. Consent to processing by such personnel is not required as it is inherent in the necessary procedures established by law.

Outside the company, your data may be processed by:

• collaborators subject to non-employee employment contracts operating outside the company's structures
• commercial workers subject to a non-employee employment contract operating outside the company's structures
• consultants of any kind (lawyers, doctors or accountants, engineers, architects, labor consultants or other professionals registered or not registered in professional registers), who carry out technical and support tasks on behalf of the company (in particular: legal services, IT, shipping) and company control.

To pursue the aforementioned purposes, the company may communicate or otherwise transmit your data to certain subjects, including foreign ones, who will use the data received as independent joint controllers, except in the case in which they have been designated by the company as "responsible" of the treatments within their specific competence. It is your right to request and obtain the list of third parties to whom such data are transmitted. Your consent to the transmission of data to such third parties is required but, in case of refusal, the Company may not be able to provide the requested services or fulfill the obligations for which it has undertaken towards you.

The data controller uses IT systems in joint ownership with third parties, who therefore become joint data controllers and the relationships with the same are regulated by a specific contractual agreement

It is possible that the data controller delegates the processing of your data to other sub-managers, who in turn have been instructed on how to correctly process the data themselves.

Your data may be subject to profiling, i.e. the collection and aggregation of data concerning you for the purpose of making appropriate commercial decisions or to analyze or predict, again for commercial purposes, your personal preferences, your behaviors and your attitudes. Profiling can only take place with your consent. Failure to provide consent for profiling purposes does not normally compromise the regular development of the relationship on the basis of which your data is processed.

Your data may be transferred to a foreign country. In this case, if this occurs within the European Union, your data will be processed in the same way as it is processed in Italy. In case of transfer to countries outside the European Union, they will be treated respecting the rights provided in your favor by the European Regulation. If your data is transferred to a country outside the EU, it is possible that it will be processed by subjects who guarantee compliance with the rights provided for by the European Regulation through voluntary compliance by the same with provisions of a general nature.

The transfer of data will take place in any way through tools that guarantee the protection of the data from intrusions by third parties.

Your data was collected directly from you and therefore we provide you in this form with the following information where applicable:

• data of the owner and representative
• data of the data protection officer
• purpose and legal basis of the processing
• recipients of the data
• intention to transfer data abroad
• duration of the retention period or criteria for determining the duration
• right to access, rectification, cancellation, opposition to processing, portability
• right to withdraw from processing if possible unless required by law
• possibility of submitting complaints to the authority (Guarantor)

• whether the data is mandatory for the execution of a contract, or by law and the consequences if consent is not given
• whether the data is or will be subject to profiling and, if so, the logic of the profiling
• the existence of automatic decision-making processes and the right of the interested party to have decisions made following human intervention.

Your data will be kept by the Data Controller, in compliance with the intended purposes, for the time necessary to carry out the existing relationship with you and to be able to guarantee mutual protection of rights in court as well as to comply with legal obligations including those of a nature tax. Data not necessary for these latter purposes will be removed within the maximum period established by the right to be forgotten, as indicated further in this information, or, upon your request, even in a shorter time if not in conflict with the rights of the Data Controller.

C – RIGHTS OF THE INTERESTED PARTY

You may, at any time, exercise the following rights expressly recognized as useful by the Regulation:

• You have the right to lodge a complaint at any time with the national authority (Guarantor for the protection of personal data) if you believe your rights have been violated
• You have the right to have your data always accurate and updated and therefore can report or request its updating at any time.
• You have the right to revoke consent to the processing of data where this is not prevented by law or by the need to protect the rights of the owner, including in court. In any case, the request for revocation gives rise to the right to limit the processing.
• You have the right to access your data processed by the Data Controller by means of a written request, including electronic ones. It is essential that you can provide us with proof of your identity, possibly also by accessing our databases through credentials uniquely referable to your person. You are entitled to free access only once, while you may be asked for a cost contribution for requests subsequent to the first. You have the right to obtain a response within thirty days of the request. You have the right to have your data in printable formats.
• You have the right to rectification and updating of your data and can at any time request its updating and correction if you verify that the data in our possession is out of date or incorrect. In order to guarantee the updating of the data, we invite you to report any useful changes.
• You have the right to have the data concerning you deleted, as long as it is not data that the Data Controller must keep for specific legal obligations such as, for example, obligations deriving from tax regulations, anti-money laundering or for the protection of the data controller's rights in litigation. .
• If you contest the accuracy of your data, or the lawfulness of the processing, or the right of the Data Controller to delete your data, or you oppose the processing of the data and the data controller contests your opposition, you have the right to have your data are stored but not processed except within the limits of what is necessary to resolve the dispute over the data.
• If the Data Controller modifies or deletes all or part of your data, you have the right to be informed and to oppose the modification and deletion.
• You have the right to be able to transfer your data - stored and processed electronically - to another operator, within the limits indicated by the Regulation, in a manner that allows it to be easily read and acquired by third parties. The data of which you have the right to transfer (portability) also include data deriving from the automatic observation of your activity carried out through the Data Controller's IT services, such as searches and history of the activities performed
• You have the right to object to the processing of your data, profiling, use of data for direct marketing, profiling for public interest or for scientific, historical or statistical research purposes.
• The company may, in certain circumstances, adopt automated procedures in order to take decisions that concern you and in particular in order to decide whether and under what conditions to conclude contracts directly or through third parties with you. In this case, you have the right to request that , before making a binding decision, your position must be examined by a human operator who carries out an assessment of merit.
• The company may, in certain circumstances, process your data in order to communicate with you regarding commercial or informative or educational initiatives (so-called newsletter). In this case your consent must be explicit and separate from other forms of consent and you can revoke the consent given for this purpose at any time.
• You have the right to be consulted when evaluating the security procedures for the processing and protection of your data

D – INDICATION OF THE SUBJECTS INVOLVED IN THE TREATMENT

Your data may be processed by the following subjects:

1. [owner] Dynasty of Freedom DOF association
2. [co-owners] None
3. [representative] Not applicable
4. [responsible] Legal Representative
5. [RDP/DPO] No appointment necessary

E – HOW TO EXERCISE YOUR RIGHTS

Your requests can be exercised through written communications to the Company's address via Giuseppe Mazzini 39, Desenzano del Garda (BS) or to the email address support@dinastycoin.club, or, if applicable, independently within the personal area made available to you electronically using a unique identifier.