PRIVACY DISCLAIMER

[ART. 12, REG. (UE) 679/2106]

Dear Sir or Madam,
we invite you to carefully read the contents of the present privacy disclaimer, prepared by FONDAZIONE VALTER LONGO ONLUS with respect to the Regulation (EU) 2016/679.

1 CONTROLLER

FONDAZIONE VALTER LONGO ONLUS
F.C. 95196780100
registered office – Milano, Via Borgogna n. 9
branch office – Milano, Via Visconti di Modrone n. 27
[email protected]

2 DATA PROCESSED

DATA PROVIDED
In order to to process your donation to Fondazione Valter Longo Onlus (hereinafter “Foundation”), we will ask you to submit some information.
In particular, you may be asked to provide the following information (the following list is not comprehensive, but is indicated merely as an example): your name and surname, your contact information (such as address, telephone number, e.mail),
data relating to the chosen payment method.

Granting such information together with your CV is required in order to process your donation to the Foundation; the failure to communicate such data may determine the impossibility to proceed.

PARTICULAR CATEGORIES OF PERSONAL DATA
The Foundation generally avoids to collect and process particular categories of personal data. Among those categories are included data that reveal your ethnic or racial origin, your political position, your religious or philosophical convictions, or your trade union affiliation or genetic data, biometric data aimed to identify uniquely a natural person, data on wealth or sexual life or sexual orientation of the person.

Whenever, in specific cases, the Foundation should collect or anyway process particular categories of personal data, in order to achieve the purposes mentioned below, we will always process such data in accordance with dispositions of law and with the requirements as indicated in the present privacy disclaimer.

3 LEGAL BASIS FOR THE PROCESSING

The Foundation will process your data pursuant to Articles 6 and 9 of the Regulation (EU) 679/2016 and on the basis of the consent under Article 7:

• CONSENT – [art. 6, (1)(a), art. 7, and, if applicable, art. 9, (2)(a)] – the Foundation will process certain data solely upon your prior, free and express consent. You’ll have the faculty to withdraw your consent at any time with effect for the future.
• PROCESS YOUR DONATION – [art. 6, (1) (b)] – in order to process your donation to the Foundation, we need to have access to certain data.
• PROTECTION OF LEGITIMATE INTERESTS PURSUED – [art. 6, (1)(f)] – the Foundation will process certain data in order to protect its interests or third parties interests. Such principle, however, shall be applied except where such interests are overridden by your interests.

4 PURPOSES OF DATA PROCESSING

The Foundation will process your data only for the purposes permitted by the law.

This regards the following purposes: (i) purposes prior approved by you; (ii) data processing in order to process your donation; (iii) fulfillment of legal duties to which we are subject (included requirements set forth by the relevant Authorities); (iv) protection of our legitimate interests or of third parties legitimate interests, except where such interests are overridden by your interests; (v) exercise of our rights and fulfillment of our duties under social safety and protection laws; (vi) establishment, exercise or defence of a legal right or claim; (vii) for relevant public interest reasons.

Among the others, we will process your data for the specific purposes as listed below. Please take note that this is not a comprehensive list of any single purpose, but merely an exemplification aimed to explain the aforementioned purposes.

4.1 PURPOSES OF PROCESSING RELATED TO THE WORK RELATIONSHIP WITH THE FOUNDATION
a. MAIN PURPOSE. The main purpose of processing your data regards the processing of your donation to the Foundation, made through our website.

4.2 PURPOSES OF PROCESSING IN ORDER TO RESPECT LEGAL REQUIREMENTS.
The Foundation is subject to several legal requirements. If necessary, your data will be processed to guarantee the compliance with those requirements.

• DATA SAFETY. Data safety represents a relevant legal requirement. If necessary, we will process also your data in the context of the essential measures to evaluate and guarantee data safety.
• INTERNAL COMPLIANCE MANAGEMENT. Within the context of compliance management (intended as the respect of any rule and disposition of law) we will evaluate – for example – if you had received appropriate advices when you requested the services and if our personnel had behaved properly and accordingly to law requirements.
• LEGAL REQUIREMENTS. The Foundation is subject to several legal requirements. We will process your data as needed to the extent to be respectful of such requirements and we could forward your data to the competent Authorities, if set forth by communication law requirements. We could also process your data in case of law suit, if required.

5 STORAGE PERIOD OF YOUR DATA

The Foundation – Pursuant to art. 5, co. 1, lett. e) of Regulation (EU) 679/2016 – will store your data only for the period of time needed to processing the data for purposes for which they are processed.

In the event that the data are processed for different purposes, the same data will be automatically erased or saved in a format that doesn’t allow to reach a straight conclusion on your identity, as soon as the last specific purpose will be complied.

For a correct data erasing under Regulation (EU) 679/2016, the Foundation implements a storage policy of your data in accordance with what provided for the storage requirements of documents for fiscal purposes and with respect to the general rules on limitation period of the contractual claims. Therefore, the Foundation will delete data concerning the services provided upon expiry of a ten years period as sets forth by the law.

6 DATA SHARING

Your persona data – in general – will remain under the Foundation, but could be communicated, even without your consent, to supervisory bodies, law enforcement or judiciary, Ministry of Finance, Revenue Agency, ministerial bodies and competent Authorities, Local bodies, regional and provincial tax commissions, at their express request that will treat them as independent data controllers for institutional purposes and / or by law during investigations and controls.

Your data may also be communicated to third parties (for example, partners, freelancers etc.), as independent data controllers, for the performance of activities instrumental to the aforementioned purposes.

7 DATA SUBJECT RIGHTS

Nella Sua qualità di interessato, Lei potrà esercitare certi diritti nei confronti della Fondazione ai sensi del Regolamento (UE) n. 679/2016 e altre disposizioni applicabili in materia di protezione dei dati.

Il presente § 7 contiene spiegazioni relative ai Suoi diritti come interessato ai sensi del Regolamento (UE) n. 679/2016. In particolare:

In your quality of data subject, you shall exercise certain rights toward us as provided by Regulation EU 679/2016 and other applicable rules concerning data protection.

The present § 7 contains clarification regarding your rights as data subject under Regulation EU 679/2016.
In particular:
7.1 DATA SUBJECT RIGHTS.
In your quality of data subject, you have the following right toward the Foundation:

• RIGHT OF ACCESS. At any time you can ask to have information about your data as stored by us. Such information regards, among the others, the categories of data processed, the purposes of processing, the origin of the data in case we didn’t obtained such data directly from you, as well as the recipients to who we may have transferred your data, if applicable. You could obtain a free copy of your data. If you wish to have further copies, the Foundation reserves the right to ask a remuneration for them.
• RIGHT OF RECTIFICATION. At any time you can ask a rectification of your data. As a consequence, the Foundation will adopt appropriate actions to make your data – as stored and processed by us on an ongoing basis – to be kept correct, complete, updated and pertinent, on the basis of the most updated data granted.
• RIGHT TO ERASURE. At any time you can ask the erasure of your data, subject to conditions as provided by the law. For example, that could happen as set forth in Article 17 of Regulation EU n. 679/2016:
  • if your data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
  • if you withdraw consent on which the processing is based and there is no other legal ground for the processing;
  • if you object to the processing and there are no overriding legitimate grounds for the processing;
  • if your personal data have been unlawfully processed, unless the processing is necessary: (i) for the fulfillment of a legal requirement that pretends the processing of your data; in particular for what it regards the period of storage of the documents as set forth by the law; (ii) for the establishment, exercise or the defence of a legal right or claim.
• RIGHT TO RESTRICTION OF PROCESSING. At any time you can obtain a restriction of processing your data if:
  • you contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;
  • the processing is unlawful and you oppose to the erasure of the personal data and request the restriction of their use instead;
  • we no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims;
  • you have objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.
• RIGHT TO DATA PORTABILITY. At any time you have the right to receive a copy of your data as they have been prior provided directly to the Foundation on your explicit request, we will transfer your data – if it is technically workable – to another controller.
• RIGHT TO OBJECT. At any time you can object, on grounds relating to your particular situation, to the processing of your data pursuant to point e) or f) of Article 6, (1) of Regulation EU n. 679/2016, or whenever personal data are processed for direct marketing purposes. In such case, we will no longer process your data. This last condition is not applicable if we can demonstrate that compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
• RIGHT TO OBTAIN A COPY OF THE SAFEGUARDS. At any time you can obtain a copy of the appropriate safeguards implemented for what it regards the data transfer toward third countries, if applicable.
• RIGHT TO WITHDRAW THE CONSENT AT ANY TIME. At any time you can withdraw the consent, if the processing is based on your consent, without prejudice to lawfulness of the processing based on the consent granted prior to the withdrawal, by sending a request to the address afore indicated (see § 1) or otherwise with technical procedures made available by the Foundation for the relevant processing.

7.2 TERMS OF FULFILMENT.
The Foundation always tries its best to manage the request within a 30 (thirty) days period. Nevertheless, such period could be extended for reasons related to the specific right of the data subject or to the complexity of his request.

7.3 RESTRICTION RELATING TO THE COMMUNICATION OF INFORMATION PENDING THE FULFILLING OF REQUIREMENTS PERTAINING RIGHTS OF THE DATA SUBJECTS.
In certain situations, we may not be able to provide you with the information about your data due to legal provisions. In case we shall be obliged to decline your request of information, we will explain the reasons for our denial.

7.4 CLAIMS TO AUTHORITY.
In case you won’t consider exhaustive the feedback provided by the Foundation to your requests and/or notifications, you have the right to notify a claim to the competent authority with regard to data protection, pursuant to Article 77 of Regulation EU n. 679/2016.