PERSONAL DATA PROCESSING INFORMATION AND CONSENT

(ART. 13 and 14 REG. 679/2016/EU – GDPR)

For the purposes provided for by Regulation 679/2016/EU (GDPR) regarding the protection of individuals with regard to the processing of personal data, and the free circulation of such data and which repeals Directive 95/46/CE, with this document, we inform you that the processing of personal data provided by you and acquired by the Sovereign Military Order of Malta will be subject to processing in accordance with the aforementioned regulation and in accordance with the rights and obligations that follow and we specify the following:

a) DATA CONTROLLER: The Data Controller is the Sovereign Military Order of Malta, located at Via dei Condotti n. 68 – 00187 Rome, Tel: 06/675811. The Data Controller has appointed a Data Protection Officer – Sovereign Order of Malta dpo@orderofmalta.int

b) PURPOSE OF THE PROCESSING: The processing of personal data is carried out without resorting to automated processes including profiling and is solely aimed at improving the quality of customer information services and for the purpose of archiving the activities of the Sovereign Military Order of Malta’s Poste Magistrali

c) PLACE OF PROCESSING: The place of processing is the headquarters of the Sovereign Military Order of Malta

d) LEGAL BASIS FOR DATA PROCESSING: The legal basis for the processing is the explicit consent under Article 6, paragraph 1, letter a)

e) METHOD OF PROCESSING AND CONSERVATION OF PERSONAL DATA: The processing of personal data takes place through manual, computer and telematic means, in order to ensure its security and confidentiality in accordance with the applicable legislation. The Sovereign Military Order of Malta is committed to safeguarding and controlling the data in such a way as to minimize the risks of destruction or loss, unauthorized access or processing that is not authorized or does not comply with the purposes for which they were collected. The collected data is stored for the period necessary related to the purposes of the processing and, in any case, until the customer exercises the right to delete them

f) CATEGORIES OF PROCESSED PERSONAL DATA: The Sovereign Military Order of Malta processes only the customer’s identifying and contact data

g) RIGHTS OF THE INTERESTED PARTY: The interested party has the right to have their data processed in a lawful, correct and transparent manner. Furthermore, they have the right, where possible and at any time:

1. to revoke the consent given at any time (art. 7) without prejudice to the lawfulness of the processing based on the consent given before the revocation

2. to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them (art. 21)

3. finally, if the interested party believes that the processing concerning them violates the legislation in force in the matter, they have the right to file a Complaint (art. 77) with a supervisory authority, in particular in the Member State in which they habitually reside, work or in the place where the alleged violation occurred. For Italy, this authority is the ‘Garante per la protezione dei dati personali’, established by Law No 675 of 31 December 1996 (http://www.garanteprivacy.it/).

The data subject may obtain further information on his rights, including the circumstances in which they apply, by contacting the supervisory authority of the Member State in which he normally resides.

The exercise of all the aforementioned rights may be exercised at any time by writing to the Data Controller (Sovereign Military Order of Malta) at the references indicated above.