PRIVACY POLICY TO ART. 13 AND 14 OF EU REGULATION 2016/679 (GDPR)
***
PRIVACY POLICY
Who is the owner of the treatment of your data?
The Owner of the treatment of the data collected through this website is FONDAZIONE AVSI ONLUS-ONG, with registered office in Via Padre Vicinio da Sarsina 216 - 47521. Cesena - C.F. n. 81017180407 and operational headquarters in Via Donatello 5/b - 20131, Milan (Tel 02-6749881; E-mail: Fondazione.Avsi@avsi.org), in the person of its legal representative pro tempore, (hereinafter also referred to as the "Owner"). The updated list of the authorized persons to the treatment and of the external responsible persons is available at the head office of the Owner.
Why do we process your data and when do we collect it?
Navigation Data
While browsing our website we collect some personal data of the users, for example the IP address of the pc, or the domain names of the computers and terminals used by the users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
Service Data
On our site there is also an area called "leave us your contact" that you can use to ask for information or ask to be contacted: if you decide to write to us we will also process your personal data and contact details (name, surname, telephone, e-mail address and contact preferences).
In addition, through our site you can make a donation in the area "donate now" to support our projects: in this case we will treat your personal data, contact details, those relating to payment, shipping address and any other data useful for the management of the transaction.
On the site you can also subscribe to our newsletter and in this case we will necessarily treat your email address and, if you think you can tell us, also name, surname and province.
If you want to apply to work with us, in the appropriate section, you can fill out the form and / or upload your resume and so send it to our recruiters: in this case we will process only the data necessary for the evaluation of the application.
What does the law allow us to do?
The European Union Regulation 2016/679 (GDPR) allows us to process the various types of data we have highlighted above for the following purposes:
NAVIGATION DATA
We need it for statistical purposes, to improve our site, to protect the safety of users' browsing. These data do not allow your identification. We process this data on the basis of our legitimate interest and that of the user (art. 6 lett. f) GDPR).
NAVIGATION DATA (cookie)
We also collect data for the purpose of analyzing and processing information about you, your preferences, habits, consumption choices and/or browsing experiences. This activity is carried out through the use of technologies such as cookies (own or third party). The collection of data through the use of cookies is done with your express consent (art. 6 lett. a) GDPR). You will be informed of this through the banner at the bottom of the site when you log on for the first time. For more information read our cookie policy.
CONTACT
(Service data)
We process your contact data such as first name, last name, phone number, email in order to process your contact request. The GDPR allows us to process this data without your consent because it is needed to fulfill pre-contractual measures (art. 6 letter b) GDPR). You can always decide not to provide us with the data but you will not be able to send us any request for a quote.
DONATION
(Service data)
We process your contact information such as, first name, last name, email address and your payment information such as, IBAN code/credit/debit card extensions, billing and shipping address. The GDPR allows us to process this data without your consent because it is needed to fulfill pre-contractual measures. You can always decide not to provide us with the data but you will not be able to [send us any request for quote] [make any donation] (art. 6 lett. b) GDPR).
COMMUNICATION AND NEWSLETTER
(Service data)
Collection of data in order to send newsletters and information material on company activities. The treatments put in place for these purposes are carried out upon specific consent provided by the user. We process these data on the basis of your consent, expressed by registration in the section "Subscribe to the Newsletter" (art. 6 lett. a) GDPR).
APPLICATIONS
(Service data)
We process the data that you consider appropriate to send us to apply to work with us, such as, without doubt, those relating to your education and your professional background; in addition, we may also become aware of your more sensitive data (e.g. belonging to protected categories, ethnic origin). The GDPR allows us to process these data without your consent because they serve to fulfill pre-contractual measures (art. 6 letter b) GDPR) and to assess your suitability for employment (art. 9 letter b) GDPR).
How do we process your data?
The processing of your data is done through the use of tools and procedures that guarantee security and confidentiality, and can be done both through our website and through other electronic tools (such as internal management) and sometimes even with the help of paper supports. In addition to the Owner, in some cases, other subjects involved in the organization of this Website (administrative and commercial staff, system administrators, etc.) or external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) appointed, in the cases provided for by the regulations, as Data Processors by us, may have access to the data. You can obtain a complete list of those responsible for processing by writing to us at the e-mail address Fondazione.Avsi@avsi.org.
How long do we keep your data?
Navigation data: the data collected by the site during its operation is kept for the time strictly necessary to carry out the specified activities. Upon expiration, the data will be deleted or anonymized, unless there is no other purpose for their retention. The Owner has no control over the cookies that are entirely managed by third parties and has no access to the information collected through these cookies. For more details on the retention of data collected through cookies, please refer to the cookie policy.
Service related data:
- Data relating to contacts: the data will be kept for the time strictly necessary to process the request made.
- Data relating to donations: the data will be kept for 10 years from the time of collection (see art. 2220 civil code).
- Data related to the newsletter: the data will be kept for 48 months from the last action that proves an interest of the subject towards the Owner (donation or viewing of information communications and newsletters) or until revocation of consent (opt-out) and / or request for cancellation by you.
- Data relating to applications: data will be kept for 6 months from the submission of the application.
Where is your data?
The processing that we carry out with your personal data collected through the website takes place mainly in Europe.
If necessary, the data collected may be transferred to countries outside the EU. In this case, the Owner assures as of now that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by entering, if necessary, into agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided for by the European Commission and/or binding company regulations.
Who has access to your data?
Your data may be made accessible to employees and collaborators of the Owner in their capacity as data processors and/or system administrators and/or other subjects (by way of example: professional firms, consultants, software houses that provide management software, etc.) that carry out activities in outsourcing on behalf of the Owner, in their capacity as external data processors.
The Owner may communicate your data to the Public Administration, Supervisory Bodies and/or Judicial Authorities as well as to all other subjects to whom communication is obligatory or necessary by law. Your data will not be disclosed.
Links to Third Party Sites
Please note that sometimes our site contains links to other sites that are not covered by this privacy policy. As a visitor user, you may be directed to third party sites to obtain more information, such as, for example, those relating to events, content promotions, supplier services; the Owner makes no warranty as to how your data is stored or used by third party servers. We recommend, therefore, to examine the privacy policy of each third party site reached through our site, to learn more about the processing of your personal data operated by them.
What are your rights?
As a data subject you have the right to obtain, in the cases provided for, access to your personal data and the rectification or erasure of the same or the limitation of the processing that concerns them or to object to the processing (to know what are all your rights you can consult the Regulation at art. 15 and following). To exercise your rights you can write to us at the e-mail address Fondazione.Avsi@avsi.org.
Right to complain
If you believe that the treatments carried out through this site are in violation of the provisions of the Regulation you can complain to the Guarantor, as provided by art. 77 of the Regulation itself, or to take appropriate legal action (art. 79 of the Regulation).
Data Protection Officer
Pursuant to Articles 3 and 27 of EU Reg. n. 679/2016, we inform you that the Owner has appointed as DATA PROTECTION OFFICER (DPO) the company CONSULENTI PRIVACY SRL, with registered office in Via Valentini n. 11, Rimini, C.F. and P.IVA 04391970409, Tel. 0541-1798723, E-mail info@iconsulentiprivacy.it, PEC consulentiprivacy@postaleg.it - DPO address for FONDAZIONE AVSI ONLUS - ONG: dpo@avsi.org
Protecting the privacy of minors
This website is intended for a general audience, but its services are intended for people 18 years of age or older. We do not solicit, collect, use or disclose personal information from anyone under the age of 18 online. If we discover that we have personally collected data from a minor, we will delete it immediately.
Changes to this Policy
AVSI reserves the right to modify this policy as necessary. We encourage you to check this page periodically in case you want to keep track of changes.
This privacy policy is updated as of 17/12/2020