Controller and processor of personal data protection
AO Staff Coop s.c.a r.l., with principal place of business in Rome (Italy), viale Aventino n. 11, VAT and registration n. before Chamber of Commerce 03945371007, is controller of the processing of personal data (hereinafter “Controller” o “Coop”) and undertakes to protect personal data processed during its business.

Data processing
Controller processes personal data, not including special categories of data communicated from its providers, members and clients to enjoy services provided by Controller (particularly, name, surname, tax code, address and email, phone number and, for members, picture to be put on membership card, hereinafter “personal data”). Controller could process personal data of third parties as communicated from its providers, members or users of its services (hereinafter “personal data of third parties”). In this case, providers, members or users of its services are autonomous controllers, bearing all legal obligations, and ensure Controller that this processing is lawful and authorize the processing of personal data by Controller (for instance, information or consent wherever necessary).
Controller does not normally process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or data concerning a natural person's sex life or sexual orientation. In some cases (for instance, at the application for joining the Coop or to enjoy a service offered by Controller), Controller could process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or data concerning a natural person's sex life or sexual orientation, as communicated from data subject, only in the course of its legitimate activities with appropriate safeguards related solely to the members or to former members of Coop or to persons who have regular contact with it in connection with its purposes. In this case, the personal data are not disclosed outside Coop without the consent of the data subjects.

The purposes of the processing and the legal basis for the processing
The processing of personal data has made following a communication by data subject or by a third person entitled to process personal data of third parties, upon proper information to data subject, as necessary to carry out an application by data subject to join the Coop or to render a service requested by the data subject or to perform a contract of which the data subject is party. Data subject has no legal obligation to communicate the personal data, but he is informed that, wherever he will miss to communicate the personal data or will oppose to their processing, he will not be entitled to join the Coop or remain in the Coop, and he will be not entitled to enjoy Coop services or enter in a contract with Coop.

The personal data are processed by Controller for following purposes:

• a) To allow the data subjects to join the Coop, to carry out requests from member or users; in this case, Coop will be entitled to communicate the personal data to third parties appointed as processors by Controller at the aim to carry out requested service;
• b) To perform contractual or legal and tax obligations;
• c) To inform Coop members by e-mail or newsletter of services provided by it, except an opposition of data subject to be sent in writing as indicated at section below “As the data subject can exercise his right”.

Rights of the data subject
The data subject is entitled to request at any time he wants from Coop:

• access of personal data and to any information concerning the processing;
• rectification or erasure of personal data or restriction of processing concerning the data subject or to object to processing as well as the right to data portability; and the Data subject can oppose to processing of the personal data (es. Soft Spam);
• withdraw consent at any time to processing of personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, or data concerning a natural person's sex life or sexual orientation, without affecting the lawfulness of processing based on consent before its withdrawal;
• withdraw consent at any time to communicate the personal data to third parties.

Data subject is entitled to lodge a complaint with a supervisory authority (Garante per la Protezione dei Personal data). Transfers of the personal data The Personal data can be communicated to:

• third parties appointed from the Coop to process personal data upon confidential agreement (es. employes);
• persons appointed as processors such as, as a mere example, providers of services in convention with Coop, consultants;
• bodies or public autorities to whom the communications is compulsory according to a provision of law or upon an order of a public authority.

Storage of the personal data
The personal data will be stored for duration of the membership with Coop or for the time strictly necessary to provide requested service or to perform a contract of which the data subject is party.

The personal data are managed and stored from Controller or third parties appointed as processors in servers inside European Union. As data subject can exercise his right The data subject can enjoy his rights writing to Coop by e-mail to FAO-StaffCOOP@fao.org or sending a registered letter to FAO Staff Coop S.c.a r.l., viale Aventino 11, Roma.

DOWNLOAD

• Information on personal data protection GDPR (English)
• Informativa Trattamento dei dati personali GDPR (Italian)