Privacy Policy
INFORMATION PURSUANT TO EU REGULATION 679/16 (GDPR)
Introduction
Dear Customer, Pursuant to EU Regulation No. 679/16 and Legislative Decree. 196/2003, as amended by Leg. 101/2018, The Girolomoni Foundation, VAT No. 01368210413, located in Via Montebello 1 – 61030 Isola del Piano (PU), tel. 0721.720334, e-mail fondazione@girolomoni.it, certified email address fondazionegirolomoni@pec.it, as the Data Controller, is required to bring to your attention the following.
Purpose of processing: what your personal data are used for
The personal data (e.g. name, surname, address, e-mail, telephone number, bank details, payment details) you provide will be processed only for the purposes set out below:
- to enable the Subscription to be activated;
- for any fulfilment resulting from legal obligations (including tax and accounting obligations).
Processing methods and storage term: how your personal data are processed and how long they will be stored
The data may be processed both via paper files and computerised files (meaning with the aid of electronic tools including portable devices), always in the manner strictly necessary to achieve the above-mentioned purposes and with the adoption of appropriate security measures.
The data will be kept, at the premises of the registered office, for the time necessary to pursue the purposes for which they are processed (e.g. for the term of the Subscription), without prejudice to the any additional time required to fulfil legal, accounting and litigation management obligations.
Nature of Appointment and Consequences of Refusal to Provide Consent
The processing of Data for the purpose indicated in point 1 is carried out to enable the activation and use of the Subscription, and therefore does not require express consent (pursuant to Article 6.1 letter (b) of the EU Regulation). The processing of Data for the purpose specified in point 2 is metal legal obligations and therefore does not require express consent (pursuant to Article 6.1 letter (c) of the EU Regulation).
Communication and dissemination: who has access to the personal data
In addition to the data controller, your personal data may be disclosed only to staff specifically instructed/authorised and trained in data protection always in compliance with the principles of necessity and non-excessiveness.
Your personal data may also be brought to the attention of certain specific categories of external parties, who have been entrusted with the task of carrying out specific operations necessary to ensure the services offered.
Personal data may also be disclosed to third parties, only when fulfilling legal obligations.
Your rights
With a special request addressed to the Girolomoni Foundation, also by e-mail, you may exercise at any time the following rights, pursuant to articles 15 to 22 of GDPR no. 679/16:
– request access to your personal data and information concerning them, the rectification of inaccurate data or the integration of incomplete data, erasure of your personal data and limitation of the processing;
– request and obtain – in cases where the legal basis of the processing is a contract or consent, and the processing is carried out by automated means – your personal data in a structured, machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to data portability);
– object at any time to the processing of your personal data in the event of special situations concerning you, bearing in mind that this may make it impossible for the foundation to fulfil the contract, service and/or legal obligations;
– withdraw your consent at any time, limited to cases where the processing is based on your consent for one or more specific purposes and common personal data (e.g. date and place of birth or place of residence), or special categories of data (e.g. data revealing your racial origin, political opinions, religious beliefs, state of health or sex life). Processing based on consent and carried out prior to the revocation of consent nevertheless remains lawful;
– oppose automated decision-making concerning natural persons, including profiling;
– if specific requirements are met, file a complaint before a supervisory authority (the Italian Data Protection Authority – Autorità Garante per la protezione dei dati personali – http://www.garanteprivacy.it), always without prejudice to the right to a lawsuit before the court if you consider that your rights under the GDPR have been breached as a result of the processing of your personal data.
