-
Data Controller
Crida Foundation with registered office in Via F. Pacchiani, 4 – 59100 – Prato (PO) – C.F. – VAT 01996050975, listed below as “Titolare”, guarantees compliance with the rules on personal data protection by providing the following information about the processing of data communicated or otherwise collected during navigation on this site pursuant to article 13, EU Regulation 2016/679 (General Data Protection Regulation – GDPR) and -
Data processed, purposes and legal basis of processing
2.1. Data generated by access to the site
The computer systems and software procedures for the operation of this site automatically acquire, during their normal operation, some information whose transmission is implicit in the use of Internet communication protocols.
The information collected may be as follows:- domain names;
- Internet protocol (IP);
- operating system used;
- type of browser and device parameters used to connect to the site;
- name of the internet service provider (ISP);
- date and time of visit;
- web page of origin of the visitor (referral) and exit;
- click number.
This information is processed in automated form and collected in an exclusively aggregated form in order to verify the proper functioning of the site, and for security reasons.
The legal basis for processing is the legitimate interest of the Data Controller.
2.2. Data recorded for security purposes
For security purposes (antispam filters, firewalls, virus detection), the data recorded automatically may also include personal data such as the IP address, which may be used, in accordance with applicable laws, in order to block attempts to damage to the site itself or to bring harm to other users, or in any case harmful or criminal activities. This data is never used for the identification or profiling of the user, but only for the purposes of protecting the site and its users.
The legal basis for processing is the legitimate interest of the Data Controller.2.3. Data provided voluntarily by the user
For the consultation of the site, no personal data is required by the user. However, the optional, explicit and voluntary sending of e-mail to the addresses indicated on this site as well as the insertion of your data in the “Contacts” section will involve the acquisition of the sender’s address and data entered, necessary to follow the requests sent. We invite users, in their requests for services or in their questions, not to indicate their personal data or other personal or personal data of third parties that are not strictly necessary.
The personal data provided by the user through form are collected and processed for the following purposes:- to carry out the activities of relationship with the customer according to contractual agreements and/or pre-contractual negotiations;
- for administrative purposes;
- to give course to any requests of the judicial authority;
- in the case of sending resume vitae, exclusively for selection purposes.
The legal basis that legitimizes the processing is the execution of a contract of which the data subject is a party, the execution of pre-contractual measures adopted at the request of the same or the legal obligation. In the cases expressly indicated, the legal basis is the consent freely provided by the data subject.
-
Nature of bestowal
Apart from what is specified for the navigation data, the provision of the data regarding the purposes referred to in point 2.3 lit. a), b), c), d) is optional, but the eventual refusal will result in the impossibility for the Owner to give course to any pre-contractual and contractual commitments assumed. -
Places and methods of processing and data retention times
The data collected from the site are processed at the headquarters of the Data Controller.
The data collected will be processed by electronic or otherwise automated, computerized and telematic tools, or by means of manual processing with logic strictly related to the purposes for which the personal data has been collected and, however, in order to ensure in any case the security of the data.
The data is kept for the time strictly necessary for the management of the purposes for which the data are processed (“principle of limitation of the conservation”, art.5, EU Regulation 2016/679) or in compliance with the deadlines provided for by the current norms and legal obligations.
In any case the Data Controller practices rules that prevent the retention of data indefinitely and therefore limits the retention time in accordance with the principle of minimization of data processing. -
Subjects authorized for processing, data processors and communication
The processing of the data collected is carried out by internal personnel of the Data Controller for this purpose identified and authorized of the processing according to specific instructions given in compliance with current legislation.
The data collected, within the limits relevant to the purposes of processing indicated and if it is necessary or instrumental for the execution of the purposes themselves, may be processed by third parties appointed external managers of the processing, or, depending on the case, communicated to the same as independent owners, and precisely:- persons, companies, associations or professional studies that provide assistance and advice to our Company for the purposes referred to in point 2.3 lit. b);
- companies, entities, associations that carry out related and instrumental services to the execution of the above purposes (for example, maintenance of IT systems).
The data collected may be provided in case of legitimate request, in only cases provided by law, by the Judiciary Authority.
In no case and for no reason your data will be in any way subject to dissemination.
Responsibles and persons in charge of processing are punctually identified in the Privacy Policy, updated regularly.
-
Data transfer in non-EU countries
The data collected may also be transferred abroad, even outside the European Union in the forms and ways provided for in the current legislation, ensuring in any case an adequate level of protection.
This site may share some of the data collected with localized services outside the EU area. In particular with the Google Analytics service. The transfer is authorized according to specific decisions of the European Union and the Data Protection Authority, in particular the decision 1250/2016 (Privacy Shield – here the information page of the Italian Guarantor), so no further consent is required. The company mentioned above (Google) guarantees its adherence to the Privacy Shield. -
Rights of the interested party
The data subject always has the right to request to the Data Controller what the data in his/her possession, rectification or deletion of the data, the limitation of the processing or the possibility to object to the processing, to request the portability of the data, to revoke the consent to the processing by asserting these and other rights provided by the EU Regulation 2016/679 (General Data Protection Regulation – GDPR) by sending an email to info@fondazionecrida.it.
The data subject may also lodge a complaint with a supervisory authority.