PRIVACY AND COOKIE POLICY IN ACCORDANCE WITH EU REGULATION 2016/679.
This policy is provided under and for the effects of the EU Regulation 2016/679 on data protection (GDPR, General Data Protection Regulation EU 2016/679).
On this page we describe the ways in which the personal data of users of the website “www.fondazioneambrosoli.it” are processed.
The policy is provided only for the indicated websites and not for other addresses that can also be reached by the user through the link.
The data controller is:
The Foundation Dr. Ambrosoli ETS with registered office in Via Roncate 4 / B 22100 Como (CO) and headquarters in Via Bartolomeo Panizza 7 - 20144 Milan (MI)
For any information or to exercise the rights referred to in Articles from 15 to 22 of EU Regulation No. 2016/679, you can contact the Data Controller at the following addresses:
• E-mail: info@fondazioneambrosoli.it
• Telephone: 02.36558852
GENERAL INFORMATION FOR ANY PROCESSING OF PERSONAL DATA
The processing of personal data carried out through this website is based on the principles of lawfulness, correctness and transparency.
At any time, it is possible to exercise the rights set out in the previously cited articles of law by making an explicit request to the data controller. It is also possible to request precise information about the subjects who process the data on behalf of the controller(Managers, Officers, etc ...).
During the processing operations, an adequate level of protection and confidentiality will be guaranteed and in compliance with the provisions of art. 32 of the GDPR.
In the event that the Website uses personal information for purposes other than those established in this policy, the User will be asked for specific consent.
SPECIFIC INFORMATION FOR ANY PROCESSING OF PERSONAL DATA
a. Use of data for sending communications and for statistical analysis
Type of data processed: personal contact data.
Purpose: sending information about the updates on the Foundation projects at Dr. Ambrosoli Memorial Hospital and St. Mary Midwifery School in Kalongo, Northern Uganda and other fundraising and / or awareness initiatives organized by the Foundation in Italy, sending invitations to events and / or solidarity and awareness initiatives organized directly by the Ambrosoli Foundation or for the communication of events in which the Ambrosoli Foundation has been invited to participate as a guest or speaker or beneficiary. Processing of data collected through the compilation of questionnaires, to analyze user preferences in order to prepare effective communications.
Legal basis: Art. 6 lett. a) GDPR: the interested party has given consent to the processing of personal data, for one or more specific purposes, expressed by selecting the check box at the bottom of the form.
Retention times: 2 years from consent or until the revocation of the specific consent by the interested party takes place. In any case, the Foundation has implemented procedures to avoid the data retention indefinitely and therefore limits the retention time in compliance with the principle of minimization of data processing.
Nature of the conferment: optional, in the absence of explicit consent no communications and / or updates will be sent.
b. Data collected from the use of our services by the User
Type of data processed:
• internet protocol (IP) address;
• date and time;
• type of connection (http-https);
• destination and origin url;
• browser and OS identification string;
• connection status code.
Purpose: to obtain statistical information on the use of services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.); check the correct functioning of the offered services. This information is not collected to be associated with identified data subjects, but by their nature could allow users to be identified, through processing and association with data held by third parties. The data could be used to inspect the responsibility in case of hypothetical computer crimes against the website. Legal basis: Art. 6 lett. f) GDPR: the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the fundamental interests, rights and freedoms of the data subject that require the protection of personal data are not prevailing, in particular if the data subject is a minor.
Retention times: the navigation data do not persist for more than seven days and are deleted immediately after been aggregated (except for any need to ascertain crimes by the judicial authorities). Nature of the processing: mandatory to use the website's functions.
c. Data provided by the user through the use of the website's features:
Type of data processed: personal contact data. Purpose: management of requests for information received from visitors by filling in the electronic forms on the pages of the website, or through the email addresses of the offices and / or staff.
Legal basis: art. 6 lett. b) GDPR, the processing is necessary for the execution of a contract of which the interested one is a party or an execution of pre-contractual measures adopted at the request of the same.
Nature of the processing: the processing of the data is necessary in order to respond fully and correctly to requests.
Retention times: the data will be kept for periods compatible with the purpose of the collection and subsequently deleted. The data may be transmitted to third parties only when it is functional to give correct feedback to the interested party.
SUBJECTS TO WHOM THE DATA MAY BE COMMUNICATED
Where necessary, the communication of data will eventually be made only to the authorities in charge, trusted subjects appointed by the Website Owner for the performance of technical and / or organizational tasks (provision of legal, accounting, tax, consulting services, etc. .). Your data may be transmitted to partner companies appointed as external data processors pursuant to art. 28 of EU Reg. 2016/679 to follow up on your requests.
Personal data are not subjected to transmission or transfer of data outside the EU.
RIGHTS OF THE INTERESTED PARTY
The interested parties have the right to obtain from the Data Controller, in the cases provided for, the access to personal data and the correction or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 and following ones of the Regulation). Interested parties who believe that the processing of their personal data carried out through this service is not as provider for from the Regulations, have the right to complain with the Guarantor, as required by art. 77 of the Regulation itself. To exercise your rights, you can use the contacts of the Data Controller.
Safe procedure with 128 bit cryptography
