Privacy Policy pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)
Dear User,
Below are the methods of processing personal data collected automatically or provided through navigation or use of the website [*] https://www.bellaesperanza.org/it/privacy-policy/ (“Website”).
DATA CONTROLLER
The data controller is the unrecognized association named “Bella Esperanza,” with registered office in Laives, at via N. Sauro 14A, CAP 39055 (“Controller” or “Association”).
TYPES OF DATA PROCESSED
To allow navigation on the Website, the Controller will process some personal data.
Data Voluntarily Provided by the User
To allow the use of the Website, including the possibility to receive communications about the Association’s upcoming initiatives and contact the Controller, the following personal data will be collected:
First and last name
Email address
Tax code and/or VAT number
Information as described in the specific section to make donations to the Association
Any further information contained in the messages that the data subject may send to the Association.
Navigation Data
The IT systems and software procedures used for the operation of this Website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of the computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses, request times, methods used in submitting requests to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (success, error, etc.), and other parameters related to the user’s operating system and computing environment.
These data, necessary for the provision of services through the Website, are also processed for the purpose of:
Obtaining statistical information on the use of services (most visited pages, number of visitors by time slot or daily, geographic areas of origin, etc.);
Verifying the proper functioning of the services provided.
The navigation data are not stored for more than 7 days and are necessary to ensure the functioning of the site, being deleted immediately after their aggregation (unless necessary for crime detection by judicial authorities).
Data Provided by the User
The voluntary, explicit, and optional submission of messages to contact addresses, as well as the completion and submission of forms available on the Website, particularly for donations and/or newsletter subscriptions, involves the acquisition of the sender’s contact data, necessary for responding, as well as any personal data included in the communications.
Specific privacy notices will be, where necessary, published on the relevant pages for the provision of specific services.
Cookies and Other Tracking Systems
Technical Cookies
Technical and session cookies are used, which are small text files containing a certain amount of information exchanged between your terminal or browser and the Website, allowing its proper functioning and use.
Analytical Cookies
This Website uses first-party and third-party analytical cookies. Analytical cookies are used to collect information on the use of the Website in aggregate form, particularly on the number of users and how they visit the site, providing anonymous statistical analyses to improve the Website’s usability and make the content more interesting and relevant to users’ desires.
For links to the privacy policies of third parties and to disable all or some of the mentioned cookies, please refer to the following link: https://www.bellaesperanza.org/it/cookie-policy.
Profiling Cookies
Profiling cookies are used to track the behavior of users, either first-party or third-party cookies.
Options Regarding Cookie Use on the Website through Browser Settings
The provision of all cookies can be disabled by intervening on the browser settings. However, modifying these settings may render the Website unusable if technical cookies are blocked. Each browser has different settings to disable cookies. Below are the links to the instructions for the most common browsers: Apple Safari, Google Chrome, Mozilla Firefox, Opera.
PURPOSES, LEGAL BASIS, AND NATURE OF THE CONSENT
| Purpose of Processing | Legal Basis | Nature of the Provision |
|---|---|---|
| Use of Website content and services and ensuring network and information security. | Execution of a contract (art. 6.1 (b) of the GDPR). Compliance with legal obligations (art. 6.1 (c) of the GDPR). Legitimate interest (art. 6.1 (f) of the GDPR). | Mandatory. Failure to provide would prevent the use of the Website content and services. |
| Receiving newsletters on the Association’s activities and/or initiatives. | Consent (art. 6.1 (a) of the GDPR). | Optional. Failure to provide does not affect the use of the Website but may prevent the requested service from being provided. |
| Where applicable, establishing, exercising, or defending the Controller’s rights in extrajudicial and/or judicial proceedings. | Legitimate interest (art. 6.1 (f) of the GDPR). | Mandatory. Failure to provide may hinder the exercise of the Controller’s rights. |
RETENTION OF PERSONAL DATA
Personal data for the purposes under point (3), item (A), will be retained for the time necessary to use the requested services.
Personal data processed for the purposes under point (3), item (B), will be retained for 24 months, unless a request for cancellation and/or revocation of consent is made, which can be submitted at any time according to the procedure outlined in the section “Rights of the Data Subject.”
In the case of processing for the exercise of a right in judicial proceedings (point (3), item (C)), personal data will be retained for the entire duration of the dispute and until the expiration of the terms for appealing.
RECIPIENTS OF PERSONAL DATA
Personal data may be communicated to the following subjects:
Those who can access the data by law, as provided by the law of the European Union or the Member State to which the Controller is subject;
Subjects performing auxiliary activities for the purposes indicated in the relevant section, specifically, companies providing communication services, companies providing IT infrastructure services, and IT support and consultancy services, as well as those involved in software and website design and development, and companies involved in data analysis and development (including those related to user interactions with our services).
Furthermore, the Controller’s employees, designated as those acting under the authority of the Controller pursuant to art. 29 of the GDPR and/or as System Administrators, may also have access to personal data.
TRANSFER TO THIRD COUNTRIES
The data may also be transferred to non-EU countries for the above purposes. To ensure an adequate level of protection for personal data, the transfer will take place in compliance with the provisions of Chapter V of the GDPR. The list of non-European countries to which the data are transferred is available at the Controller’s premises.
AUTOMATED DECISION-MAKING PROCESSES
The Controller does not intend to use automated decision-making processes.
RIGHTS OF THE DATA SUBJECT
As a data subject, you have the right to revoke your consent at any time and to obtain access to your personal data from the Association. You can also request their rectification or deletion. Additionally, you have the right to obtain the limitation of processing of your personal data, as well as the right to data portability.
In addition to the above, you have the right to object at any time, for reasons related to your particular situation, to the processing of your personal data based on art. 6, (1), (f), including profiling based on these provisions, as provided by art. 21 of the GDPR.
Finally, you have the right to lodge a complaint with a supervisory authority or to seek judicial remedy if you believe that the processing of your data violates the GDPR.
To exercise any of your rights, you can contact the Controller at the address above or by emailing privacy@bellaesperanza.org.