Information on the processing of personal data collected in the use of this web page owned by Associazione Comunità di Sant’Egidio,
with fiscal code 80191770587
Reference to the European Data Protection Regulation GDPR UE 2016/679-D.L. 196/2003 and DLG 101/2018
1. Data controller.
The Association Comunità di Sant’Egidio - with registered office in Piazza Sant’Egidio 3a, 00153 Roma, F.C. 80191770587,
owner of data processing (holder) guarantees compliance with the rules on the protection of personal
data by providing the following Information about the processing of data freely communicated by you
(interested) during the navigation on this web page https://dona.santegidio.org/
2. Processed data, purpose and legal basis of the treatment
Data generated from accessing the Web page.
The computer systems and software procedures responsible for the functioning of this page
automatically acquire some anonymised user data, the transmission of which is implicit in
the use of Internet communication protocols.
This data (such as domain names, operating system used, type of browser device used for
connection) is not accompanied by any additional personal information and is used exclusively to:
-
obtain anonymous statistical information on the use of the webpage;
-
manage control needs of how to use it;
-
ascertain liability in case of hypothetical computer crimes;
-
Improve the user experience in browsing our sites.
Cookies
The website therefore
does not use profiling cookies to detect behaviors associated with IP or
other information that can be related to the owner (the person) who uses them.
Only
first-party technical cookies and third-party analytics are used but without the possibility of
identifying the interested party (IP masking) in order to improve navigation and usability.
The
legal basis that legitimizes the processing of such data is the
need to make the site
functionalities available and to guarantee an adequate usability of the same.
The only personal data collected is that provided voluntarily and directly by the user through explicit
forms and processed for the following purposes:
-
in the presence of specific consent of the interested party, for the periodic sending, by e-mail, of newsletters and informative material concerning our activities;
-
in the presence of specific consent of the interested party, to receive updates on our activities and services;
-
in the presence of specific consent of the interested party, to receive and / or enroll in training courses, webinars, or internal events;
-
in the case of sending curriculum vitae, exclusively for personnel selection purposes.
In the cases expressly indicated above, the
legal basis is the
consent freely given by the interested party in addition
to the legitimate interest of the Owner, respectively pursuant to art. 6, par. 1, letters b) and f) of EU Regulation 2016/679.
Any refusal to the treatment will make it impossible for Associazione to send newsletters and informative material or invitations to proposed initiatives and events.
Data related to donations made from this web page.
The personal data collected on the Credit Card donation form: First name, Surname, email address,
telephone number, are necessary to complete the free donation made by the person concerned to the Organization.
They will then be retained in the terms of the law provided for commercial contracts and regarding the need
for accountability of the Organization's accounting. In the case of a request for continuous bank donation
through the Sepa Direct Debit mode, the tax code provided by the person concerned will also be stored as
compulsory by law. Credit card data is not stored by the system but transmitted with a secure connection
to the expected bank circuit. In the case of a repetitive donation the subsequent transactions will be
made with an anonymous code provided by the banking circuit on the first transaction.
In the case indicated, the
legal basis is the
act of liberality freely carried out by the person concerned,
and the legitimate interest of the holder of the treatment.
For security reasons in order to prevent and monitor fraudulent actions by malicious
people is stored on an external ad hoc system prepared the IP address from which the
transaction comes. This for a time strictly limited to the correct conclusion of the donation
transaction, without it being at this stage associated with the person concerned and without
therefore any purpose of profiling. In the case indicated, the
legal basis is the possible
request for
information from the competent judicial authority.
3. Method of treatment and time of retention of the data of the person concerned.
The data collected will be processed by electronic computer tools with logic strictly related to the
purposes for which the personal data has been collected and, however, in order to guarantee in any case the
safety of the same. The data is kept for the time strictly necessary to the management of the purposes for
which the data is collected in compliance with the current regulations and the statutory obligations.
In any case the Owner has rules which prevent the retention of data indefinitely and thus limits the
retention time in compliance with the principle of minimization of the data processing.
All the data processed shall be kept within the territory of the European Community and for no reason transferred
to third parties or moved outside the same or disseminated.
4. Persons authorized to treat, responsible and communicate data.
The processing of the data collected is carried out by an internal employee of the holder for this purpose identified,
formed and authorized of the treatment according to specific instructions given in compliance with the laws in force regarding Privacy.
5. Rights of the person concerned.
At any time it is possible to access the data, object the processing or obtain its cancellation, the modification or updating of all
personal information collected by the holder, exercising the right to limit the processing and the right to the portability of
data, by sending an e-mail to info@mydonor.it.
If the interested party does not consider his rights satisfied, he can also contact a supervisory authority for the Protection of Personal Data directly at this web address www.garanteprivacy.it.
Revision of this text A2-20210929 of 31 03 2022
Safe procedure with 128 bit cryptography
