INFORMATION ON THE PROCESSING OF PERSONAL DATA NEWSLETTER SUBSCRIBERS
Pursuant to Article 13 of the EU Regulation 2016/679 (GDPR).
DATA CONTROLLER
The owner of the processing of personal data is the John Paul II Foundation for Dialogue, Cooperation and Development Onlus, hereinafter referred to as the Foundation, in the person of its legal representative pro tempore, with headquarters in Florence, Via Madonna della Tosse n. 2, e-mail privacy@fondazionegiovannipaolo.org website: http://www.fondazionegiovannipaolo.org
DESCRIPTION OF THE TREATMENT
Personal data are collected through the data subject's spontaneous completion of the Foundation's forms, in full compliance with the applicable regulations, guaranteeing the security, confidentiality and protection of the data they hold and the fundamental rights and freedoms that are recognized.
CATEGORIES OF STAKEHOLDERS
Those who have provided their e-mail address by giving specific consent to receive communications from the Foundation.
TYPES OF DATA COLLECTED
The personal data processed for sending the newsletter are those voluntarily provided by the person concerned: first name, last name and e-mail.
PURPOSE OF PROCESSING
Informational-cultural newsletter activities: personal data are processed for sending by e-mail, newsletters containing information concerning the activities carried out by the Foundation, updates on the geopolitical situation of the territories in which the Foundation operates, the progress of projects.
LEGAL BASIS.
The legal basis for the processing is the holder's express consent to receive newsletters (Art. 6(1)(a) GDPR). With reference to Article 7 of the GDPR, the data subject may revoke any consent given at any time. Withdrawal of consent, which can be done via the appropriate link in the footer of the e-mail newsletter, results in the discontinuation of sending the newsletter. Any revocation does not affect the lawfulness of the processing given before the revocation.
RECIPIENTS AND CATEGORIES OF RECIPIENTS
Personal data processed by the Data Controller are not disseminated.
Personal data may be communicated to workers working in the employ of the Data Controller, as authorized processors, and to external parties working with it, designated as Data Processors or otherwise operating under the authority of the Data Controller. In this species, in addition to the Data Controller, other subjects involved in the organization of the Site (administrative, sales, marketing, legal, system administrators) or external subjects (such as third party technical service providers, hosting providers, IT companies, communication agencies) may have access to the data. The updated list of Data Processors can always be requested from the Data Controller.
The obligation of the data controller to communicate data to Public Authorities upon specific request remains unaffected.
The newsletter will be sent through the "Give Newsletter" platform based in Italy.
TRANSFER ABROAD
The data is processed at the Controller's operational offices and in any other place where the parties involved in the processing are located, so the Controller does not transfer this personal data to third countries or to international organizations outside the EU.
However, it reserves the possibility of using cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees, as provided by Article 46 GDPR. The equivalent levels of protection adopted for the processing of personal data of its employees will be required for the processing of the information and data that may be communicated to these parties. In any case, only the data necessary for the pursuit of the intended purposes will be communicated and the regulatory tools provided by Chapter V of the GDPR will be applied.
DURATION OF TREATMENT
The Data Controller will retain and process personal data for the time necessary to fulfill the stated purposes, i.e., for the period for which the Data Controller will keep the service active, until the data subject unsubscribes. In each message the User will be reminded that he/she has the option to unsubscribe from the service with a special link in the footer of each email.
MODE AND NATURE OF CONTRIBUTION
Data are collected and recorded lawfully and fairly for the purposes stated above in accordance with the principles and requirements of Article 5(1) of the GDPR.
The processing of personal data is carried out using computer, telematic and manual tools with logic strictly related to the purposes themselves and, in any case, in such a way as to ensure the security and confidentiality of the data conferred.
The provision of data for the aforementioned purposes is entirely optional. Any refusal by the data subject to provide personal data, lack of consent or withdrawal of consent for one or more purposes will result in the inability to receive the newsletter.
AUTOMATED PROCESS
Under no circumstances, with respect to the processing operations that are the subject of the stated purposes, does the Controller carry out processing that consists of decisions based on automated processes on the data of natural persons.
RIGHTS OF INTERESTED PARTIES
The subjects to whom the personal data refer, in their capacity as data subjects, have the right to request from the Data Controller, in accordance with, within the limits and under the conditions provided for by the legislation on personal data protection, with regard to the processing operations covered by this Notice, regarding the exercise of the rights of the Data Subjects (Articles 15 to 22 GDPR), may:
- Request access to their data;
- Request verification and rectification of their data;
- Revoke previously given consent at any time;
- Object to the processing of their data;
- Request restriction of processing;
- Request deletion or removal of their personal data.
The data subject also has the right to lodge a complaint with the relevant Data Protection Supervisory Authority or take legal action if he or she believes that the processing operations concerning him or her violate the rules of the GDPR, pursuant to Article 77 of the GDPR.
To exercise mailto:privacy@fondazionegiovannipaolo.orgpropri rights, Users may address a request to the following email address: privacy@fondazionegiovannipaolo.org