In compliance with Art.13 of EU Regulation 2016/679 - General Data Protection Regulation (GDPR)- as well as the national legislation on the subject, we hereby provide you with the following information regarding the processing of your personal data collected by browsing our site.
1. Data Controller and Data Protection Officer
Data controller of your supplied personal data is Flying Angels Foundation Onlus, with registered office in Genoa, Via San Luca n. 2. He/it can be contacted by email at firstname.lastname@example.org or by sending a registered letter to the attention of Data Controller at Flying Angels Foundation Onlus, in Genoa, Via San Luca n. 2.
Data Protection Officer can be contacted by sending an email to email@example.com.
2. Subject-matter and objectives of data collection
Personal data provided by browsing our site will be used by Data Controller for the following purposes:
a) to receive information material, communications and newsletters in order to be always updated on the projects, initiatives, events and above all the stories of the children and missions of Data Controller, through collection and processing of personal data and contact details. All above mentioned communications will be sent by e-mail or SMS and / or by phone call if User has entered his/her phone number;
b) to reply to any information requests, received by email or through the appropriate form in the "Contact us"/"Solidarity favors" sections, by collecting and processing personal and contact data and any other information provided in the message sent;
c) to receive donations by registering in the "Donate now" section, and thus by collecting and processing personal data, contact details, credit card data (holder, number, CVC, expiry date) and bank details;
d) to process payment and accounting data, by collecting credit card data (holder, number, CVC, expiry date), bank details, date and time of the transaction and amount of payment;
e) to send report related to a project /and or initiative and or event that has been subsidized;
f) to propose tailor-made initiatives, services and products, including remarketing activities.
To better study services and products closer to users interests, individual data such as date of birth, place of residence and / or donation behavior, as well as data collected from user's navigation on Flying Angels website, are taken into consideration too.
3. Processing legal basis
Provision and processing of personal data are spontaneous and optional, and are necessary for the establishment of the contractual report, for sending a request, receiving replies from Data Controller and for information, communications and newsletters reception.
Failure to provide data will preclude Data Controller from carrying out requested services.
Lawful basis relating to the purpose referred to in point 2 lett. a) consists in the consent of the interested party - in the event that the same has not yet made a donation - which can be revoked at any time (Article 6, paragraph 1, letter a) GDPR); or in the legitimate interest of Data Controller, in the event that it is a contributor (Article 6, paragraph 1 letter f) GDPR), notwithstanding the right to present the right to object at any time.
Lawful basis relating to data processing for purposes referred to in point 2 lett. c), d) and e) is the execution of a contract, as well as the fulfillment of legal obligations (Article 6, paragraph 1, letter b) and c) GDPR).
Lawful basis relating to processing carried out for the purposes referred to in point 2 lett. b), on the other hand, consists in the execution of pre-contractual measures on request of the interested party or in any case in the legitimate interest of Data Controller in the internal organization to give an answer to the contact request (Article 6, paragraph 1, letter b) and f ) GDPR).
Finally, lawful basis for the purposes referred to in point 2 lett. f) consists in the consent of the interested party (Article 6, paragraph 1, letter a) GDPR).
4. Communication and/or diffusion of personal data
Your data may be disclosed, for the purposes referred to in point 2 above, to the following recipients:
- Companies or other third parties such as consultants, subjects who provide services for the computer system management, as well as the website itself, subjects who manage financial transactions through the website, who carry out outsourced activities on behalf of the Data Controller, who will be appointed processing external executives;
- Public entities, for the fulfilment of legal obligations, and to the judicial authorities, in the event of a formal request;
- Other subjects authorised to process by the Data Controller for the performance of the tasks and functions entrusted to them.
The complete list of external executives can be requested by writing to firstname.lastname@example.org.
5. Processing practice and data retention policy
Personal data will be processed by Data Controller in accordance with art. 5 GDPR and therefore in compliance with the principles of lawfulness, correctness and transparency, mainly on computerized support and by means of the following operations: collection, registration, organization, structuring, storage, consultation, use, extraction, comparison, interconnection, limitation, cancellation and data destruction.
Your personal data are generally not subject to to extra-EU countries transfer. Only data necessary to receive a donation by registering in the "Donate now" section may be transferred to extra-EU countries, in compliance with the provisions of Articles 45-49 of GDPR.
Data Controller, in order to provide you with the requested services, will keep your data for the time necessary to achieve the purposes indicated in point 2 lett. a) and b) and in any case for a period not exceeding 2 years.
In case of donation, your personal data will be kept for a period of 10 years from the last donation for the purposes referred to in point 2 lett. c), d) and e); as well as for a period of 5 years from the last donation, for the purposes referred to in point 2 lett. a) and f). Once the periods set out above have elapsed, personal data will become anonymous and used only for statistical reports or otherwise deleted.
6. Rights of the interested party:
As interested party in data processing, you are entitled to the rights referred to in Articles. 15 - 22 GDPR and more precisely: access to your personal data, correction or cancellation of the same or the limitation of processing, right to oppose the processing, in addition to data portability. Finally, you have the right to lodge a complaint with the supervisory Authority pursuant to art. 77 GDPR.
You can exercise all above rights, as well as the right to revoke the given consent at any time by sending an e-mail to email@example.com.
For any clarification or information on the contents of this policy, please send an email to firstname.lastname@example.org.
Flying Angels Foundation Onlus