The information on the processing of data is provided only for the Website and for the processing performed by Fondazione and is not extended to the processing carried out by third parties through other websites that may be consulted by the User via links. With respect to said further processing, Fondazione does not assume any responsibility, and the User must refer to the privacy policies of each third party website.
1. Data Controller and place of the processing
The Data Controller is Fondazione Riccardo Catella, with headquarters in Milan (Italy), Via G. de Castillia, 28 – 20124.
The data is mainly processed at the Data Controller’s headquarters, within the territory of the European Union and, in relation to the services entrusted to or offered by third parties, also outside Italy and/or outside the European Union. In case of transfer of data to countries that do not have standards of protection equivalent to those identified by the European legislation, the Data Controller undertakes to take the necessary measures to protect such transfer. The User has the possibility to know the countries where the data can be communicated by sending a request to the following email address: email@example.com.
2. Methods of the data processing
The Data Controller processes User’s data by taking appropriate security measures to prevent unauthorized accesses, as well as the unauthorized disclosure, modification or destruction of the data. The processing is carried out with both manual and IT and/or telematic tools, with organizational methods and logics that are strictly related and limited to the purposes indicated.
3. Purposes and legal basis of the processing
The Data Controller, through the Website, may process User’s data for the following purposes:
a. Activation and management of the information services offered by Fondazione, subscription to the Newsletter, for the purpose of sending information and communications on events organized by Fondazione, sponsored or co-sponsored by Fondazione, invitations to events and/or initiatives, invitations to participate in surveys and market research, etc. The subscription to the Newsletter will take place by inserting the User’s contact details, such as an e-mail address and the name and surname of the User who wishes to adhere to the information service.
The legal basis for this processing is the User’s consent, which will be requested at the bottom of the Newsletter subscription form and can be revoked at any time by clicking on the appropriate “unsubscribe” link at the bottom of the communications sent via email. In this way the User has the possibility to refuse further mailings. Consent is optional, failure to provide it will prevent the User from receiving the Newsletters, leaving unaffected the possibility of using the Website’s services.
b. Purposes linked to the execution of legal obligations, regulations, national and EU provisions as well as deriving from provisions issued by authorities legitimated by law. For this processing the legal basis is represented by an obligation imposed by the applicable legislation.
4. Cathegories of data subject to the processing
The Data Controller receives and collects, through the Website, information relating to the User who visits the pages of the Website and uses the services offered the same. In particular, Fondazione collects and processes the following information.
4.1. Data collected through the web-browsing and through cookies
The computer systems and softwares used to operate the Website acquire, during their normal operations, some personal data which transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by the User, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used in the submission of the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the IT environment of the User. This data, necessary for the use of the web services, are also processed to:
(i) obtain statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
(ii) control the correct working of the services offered.
The web-browsing data does not persist for more than seven days (except for any need to investigate crimes by the Judicial Authority)
4.2. Data voluntarily provided by the User
The optional, explicit and voluntary sending of messages to the contact addresses of Fondazione, the private messages sent by the Users to the profiles/institutional pages on social media (where this possibility is provided), as well as the filling in and submission of the forms available on the Website (for the subscription to the Newsletter), entail the collection of the contact details of the sender, necessary to answer, as well as all the personal data included in the communications.
If necessary, specific information will be published on the pages of the Website set up for the provision of certain services.
5. Communication of the data to third parties
The data provided by the User as well as the data collected by the Website as part of the relevant services (such as the IP address) won’t be disseminated and may be disclosed, exclusively for the purposes and methods described above, to the following categories of subjects: (a) collaborators, consultants or freelancers which Fondazione avails itself of for the carrying out of technical or organizational tasks (such as IT service providers), or which Fondazione collaborates with, for the purpose of providing and operating its services also informative; (b) persons, companies or professional firms that provide assistance and consultancy services to Fondazione, with particular but not exclusive reference to accounting, administrative, legal, tax and financial matters; (c) third parties and commercial partners of the Foundation, for the purposes described in the previous paragraph where required by law, with the prior consent of the User.
The subjects belonging to the categories indicated above will use the data as autonomous data controllers in accordance with the law or as data processors duly appointed by Fondazione. The list of subjects to which the data is or can be communicated may be requested to Fondazione by contacting the contacts indicated in the section “Users’ rights and Contacts”.
6. Data retention
The data will be processed for the time necessary to carry out the activities indicated in the previous paragraphs and will be deleted when the purposes for which the data was collected and processed no longer exist. The data relating to the subscription to the Newsletter will be retained until the User unsubscribes, while the data voluntarily provided by the User in the context of the information requested from Fondazione through the “Contacts” channel will be kept until the feedback to the User is provided.
7. Users’ rights and Contacts
The User can exercise, in the cases expressly provided for by the law and where applicable, the rights set forth by the Regulation. In particular, the User has the right to request:
- confirmation that the personal data is being processed and, in this case, to request the data controller to access the information relating to the processing (such as purposes, categories of data processed, recipients or categories of recipients of data, storage period, etc.);
- the rectification of incorrect or incomplete data;
- to the data controller the deletion of data (e.g. if personal data is no longer necessary with respect to the purposes for which it was collected, in the event of revocation of the consent on which the processing is based, etc.);
- the limitation of the processing (e.g. in the event of a claim by the User regarding the accuracy of the data; if the processing is unlawful and the User opposes to the deletion of personal data; if the data is necessary for the ascertainment or defense in court of a User’s right, even if the data controller no longer needs it; in case of exercise of the right of opposition, for the time necessary to verify the existence of legitimate grounds for the processing);
- in a commonly used and machine readable format, the personal data concerning the User and to request its transmission to another data controller, or to obtain direct transmission from one data controller to another, if technically feasible (so-called portability of data).
Furthermore, the User has the right to object in whole or in part, for legitimate reasons, to the processing of personal data concerning him/her.
These rights can be exercised directly by sending a communication to the following email address: firstname.lastname@example.org
Finally, if the User considers that the processing of his/her personal data carried out through the Website violates the provisions of the Regulation and the applicable legislation on the protection of personal data, the User has the right to lodge a complaint to the Italian Authority for the protection of personal data (www.garanteprivacy.it), as required by art. 77 of the Regulation, or to take the appropriate judicial remedies (art. 79 of the Regulation).
8. Collection of data through Cookies
8.1. What is a Cookie?
8.2. Technical/session cookies
Technical cookies are essential to allow the User to move within the Website and to use its features. These cookies are strictly necessary and are used to store a unique identifier in order to manage and identify the User as unique to other users who are visiting the Website in the same moment, in order to provide the User with a consistent and accurate service . Furthermore, these cookies allow the Website to remember the User’s choices (such as username, language, country of origin, etc.), to distribute requests on multiple servers, to memorize when the User gives his/her consent to certain options (for example by accepting the use of certain cookies by passing the information banner), to allow the User to view contents and videos through Adobe Flash Player.
The storage of session cookies in terminals or browsers is under the User’s control, whereas on the servers, at the end of the HTTP sessions, information relating to cookies remains recorded in the service logs, with retention periods not exceeding seven days like the other web-browsing data.
These cookies do not require the consent of the User.
8.3. Performance and Analytics Cookies
At the moment Fondazione does not use these types of coo
8.4. Disabling cookies through the browser
If desired, the User can delete cookies from the browser placed by the Website also through the settings of the same browser.
Most browsers are set to accept cookies. However, the User can configure his/her browser to restrict the number of accepted cookies or block all cookies by changing the browser settings with the following modalities.
Microsoft Internet Explorer
Click “Tools” in the top right corner and select “Internet settings”. In the pop-up select “Privacy”: here the User may change the cookies settings.
Click the “wrench” in the top right corner and select “Settings”. Then select “Show advanced settings” and change the “Privacy” settings.
In the top left menu select “Settings”. In the pop-up window select “Privacy”: here the User may change the cookies settings.
In the top right menu select “Preferences”. Then select “Security” and change the cookies settings.
8.5. Further information on cookies
The website www.allaboutcookies.org contains the instructions for the management of cookies of the most used browsers; alternatively, it is possible to consult the documentation related to the software used on the device.
In case the amendments are particularly meaningful and/or highly impact on User’s rights, Fondazione may communicate them to the User also by means of a different channel (e.g. by sending an email).