Information to be provided pursuant to art. 13, GDPR
Personal data will be processed, mainly electronic, by Associazione Fonte di Speranza Onlus – data controller – Via Sebenico 22, 20124 Milan (Italy) (hereinafter also: “the owner” or “Fonte di Speranza”), for the completion of all phases related to the donation and instrumental activities (e.g. communications on payments, release of donation receipts). They will be treated to comply with laws, rules and regulations and kept for the time imposed by these disciplines. The data will be processed for the purpose of promotional, informative and institutional contacts on our projects, fundraising activities and initiatives, surveys and research reserved for donors by virtue of the “legitimate interest” (art. 6, paragraph 1, letter f, GDPR, recital C47, GDPR and Opinion 6/2014 Working Party 29) of Fonte di Speranza in keeping active the relationship voluntarily established by the person who has manifested sharing of our causes by supporting us economically with the donation and informing them about their activities and, in particular, on which they are the projects that could be financed with economic contributions or on the awareness actions that it is considered useful to make known to demonstrate one’s constant commitment in the realization of one’s mission. For this purpose, the data will be kept in our archives for the period necessary to keep the relationship established with the donor constant and informing him of the above, allowing Fonte di Speranza to legitimately continue his institutional activity as long as the person is considered is interested in our mission. The retention period will be reduced if the interested party no longer has an interest in receiving proposals and information from Fonte di Speranza, communicating it in the manner explained below and we will take the appropriate technical and organizational measures to no longer contact the person. Afterwards, the data will be anonymized for statistical purposes and then destroyed. If desired, by ticking a special box, the data will be processed for contacts with the purposes indicated above and performed in a personalized manner based on the characteristics of behavior (e.g. amount donated, frequency of donation), interests and preferences with respect to our initiatives ( “profiling”). This will involve the selection of the information stored on the person, so that the person receives communications of his interest and in line with his preferences, avoiding being disturbed by unwanted contacts. The data will be kept as long as the person’s profile is in line with the personalized communications created through the intersection of the information available to us and, therefore, as long as Fonte di Speranza continues its mission with projects, initiatives, actions and activities that require economic contributions or that stimulate awareness that are of interest to the person because they reflect his / her characteristics and behavior and are therefore of specific interest to him / her. The retention will cease, even before the retention period described here, if there is opposition at any time to the processing of personal data carried out for profiling connected to direct marketing. All the aforementioned information activities (with or without profiling) may be performed through traditional and electronic communication tools. The data may also be processed by third parties for purposes instrumental to the donation (independent data controllers) and, for anything not indicated here, they must make the information to be provided pursuant to art. 13, GDPR. The persons authorized to process for the aforementioned purposes are the persons in charge of managing relations with actual and potential donors, the administration, the organization of awareness campaigns and institutional and statutory activities, the call center, Web services, systems information and data security. Pursuant to articles 15-22, GDPR, by writing to the owner at the aforementioned postal address or e-mail firstname.lastname@example.org, you can request a list of data processors and exercise your rights of access to personal data and the correction or cancellation of the same or the limitation of treatment, the right to portability or to oppose their treatment for legitimate reasons or for promotional purposes and profiling You have the right to lodge a complaint with the supervisory authority to assert your rights (for Italy it is the Guarantor for the Protection of Personal Data – Piazza di Monte Citorio 121, 00186 Rome (RM) – www.garanteprivacy.it, by sending email to email@example.com, using the model found on the Authority’s website (https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524&zx=e0yn0riezmmw). The Data Protection Officer can be contacted by email firstname.lastname@example.org for information on data processing.