INFORMATION ON THE PROCESSING OF PERSONAL DATA AND USE OF COOKIES
Art. 13 of Regulation (EU) 2016/679 (“GDPR”)
The Comunità di Sant’Egidio – ACAP (“the Community”) is committed to protecting and safeguarding the personal data of users acquired through the website (the "Site"). The processing of your personal data is guided by the principles of lawfulness, fairness, and transparency, and is carried out in accordance with the terms and conditions of this Privacy Policy, which we invite you to read carefully. It contains relevant information on how and why we process personal data and lists your rights regarding such processing.
Please also note that this Privacy Policy applies exclusively to activities on the Site and therefore does not apply to personal data collected via external links.
1. INVOLVED PARTIES
The Comunità di Sant’Egidio – ACAP, headquartered at Piazza Sant’Egidio 3/a, 00153 Rome, Italy, is the Data Controller of the personal data (“the Data Controller”). The Community has appointed a Data Protection Officer (“DPO”), who can be contacted at: dpo@santegidio.org. The processing of personal data may also be carried out by third parties on behalf of the Data Controller; in such cases, the Data Controller will formally appoint them as Data Processors and define their tasks and processing limits in writing. To obtain the list of Data Processors handling data on behalf of the Data Controller, you can contact the DPO (dpo@santegidio.org).
2. TYPE OF DATA COLLECTED AND LEGAL BASIS FOR PROCESSING
The Site collects different categories of personal data:
-
Navigation data: This includes internet protocol (IP) addresses, browser type and parameters of the device used to connect to the site, name of the internet service provider (ISP), date and time of visit, and the visitor's referring and exit web pages. This data is used anonymously and collected in an aggregated form solely for statistical purposes, to allow the correct functioning of the site, and for security reasons. The processing of this type of data is therefore permitted based on the legitimate interest of the Data Controller and does not require your consent.
-
Contact and Donation data: On the Site, you can subscribe to our newsletter, contact the Community by filling out the contact form, and make online donations. To use these features, we will ask you to provide your contact details (name, surname, and email address), and we may also request your tax and banking data for online donations. This data is processed for the specific purpose for which it was collected (sending the newsletter, contacting the Data Controller, and processing donations) using manual and/or IT and telematics tools to ensure security, integrity, and confidentiality in compliance with current regulations. The provision of this data is optional, and its processing is based on your consent. Your refusal to provide the requested data will not affect your navigation of the Site, but it will prevent us from fulfilling your request.
-
Cookies: The Site uses cookies, which are small text files that collect and store information about user preferences. There are three types of cookies:
-
Technical cookies: Used to collect information for statistical and security purposes, and to ensure the Site functions properly. They do not contain personal data, and their processing does not require your consent.
-
Profiling cookies: Used to track user habits online in order to send advertising messages aligned with the user's preferences and habits. Your consent is always required for the use of such cookies.
-
Third-party cookies: Used to provide additional services and functionalities to visitors and to improve the use of the Site itself, such as social media buttons or video links. The Data Controller has no control over third-party cookies. Consequently, information on the use of these cookies, their purposes, and how to disable them is provided directly by the respective third parties.
Third-Party Cookies Used on the Site:
-
GOOGLE ANALYTICS: A Google analysis tool that uses cookies to collect anonymous and exclusively aggregated navigation data to examine how users use the Site, compile reports on Site activity, and provide other information, including the number of visitors and pages visited. To disable Google Analytics cookies, you can download and install the browser add-on provided by Google (https://tools.google.com/dlpage/gaoptout).
-
FACEBOOK PIXEL: A tool for collecting statistical data that allows monitoring user actions on the Site to create "targeted" communication campaigns. For more information on how this tool works, please refer to the developer's page (https://www.facebook.com/business/help/742478679120153).
SOCIAL NETWORK PLUGINS The Site incorporates plugins and/or buttons for social networks (Facebook, Twitter, LinkedIn, Google+, Instagram, and YouTube) to allow easy sharing of Site content on your social profiles. The plugins are programmed so that no cookies are set when accessing the page. Cookies are activated only after the user's actual and voluntary consent to activate the plugin. Please keep in mind that if you browse the Site while logged into a social network, your consent to the use of cookies is considered already granted.
The collection and use of information obtained via plugins are governed by the respective privacy policies of the social networks, to which you can refer:
We also inform you that you can independently choose which cookies to consent to by selecting the preferred option in your browser's service settings, available at the following links:
3. DATA RECIPIENTS
The personal data collected on the Site is intended for the Data Controller's administrative, commercial, and communications staff, as well as system administrators, the DPO, and, in general, all processors, managers, and persons authorized to process data appointed by the Data Controller in the performance of their duties. The data may also be communicated to third parties providing external services to the Data Controller, such as Site management, market research, technical service providers, postal couriers, hosting providers, IT companies, communication agencies, and those carrying out profiling activities.
Your data may potentially be transferred abroad, in accordance with the provisions of current legislation, including to countries outside the European Union where the Community pursues its statutory purposes. Transfers to non-EU countries, aside from cases guaranteed by adequacy decisions of the European Commission, are carried out in a way that provides appropriate and suitable safeguards pursuant to the GDPR. Finally, we inform you that the collected data will never be disseminated and will not be communicated to others without your explicit consent, except for necessary communications that may involve the transfer of data to public bodies, consultants, or other entities to fulfill legal obligations.
4. RETENTION PERIOD OF PERSONAL DATA
The personal data collected will be stored in a form that allows the identification of the data subjects for no longer than is necessary to achieve the purposes for which the personal data is processed. Contact data for newsletter subscriptions will be retained until you communicate your cancellation from the service. Data related to donations will be kept for ten years in compliance with regulations on the preservation of accounting records. You can request further information regarding the retention period of your data and the general principles we apply by contacting the DPO (dpo@santegidio.org).
5. RIGHTS OF THE DATA SUBJECT
We inform you that you are granted the following rights:
-
The right to request access to your personal data from the Data Controller, as well as its rectification, erasure, or restriction of processing, or to object to its processing;
-
The right to data portability;
-
The right to lodge a complaint with a supervisory authority (the Italian Data Protection Authority / Garante per la Protezione dei dati personali).
You also have the right to obtain confirmation from the Data Controller as to whether or not personal data concerning you is being processed and to obtain the following information: the purposes of the processing, the categories of data processed, the recipients or categories of recipients, and all information regarding the source of the data.
For any necessary information and to exercise your rights, you can contact the DPO (dpo@santegidio.org).
This Privacy and Cookie Policy was drafted on May 24, 2018, and may be subject to additions or variations depending on any national or international regulatory changes applicable to the Site.
The Data Controller
Comunità di Sant'Egidio - ACAP