This document describes how to manage the website www.change-onlus.org (hereinafter, the”Site”) and the processing of personal data of the users who consult it and of the readers of the newsletter (hereinafter the”Newsletter”) of the Change Onlus Association (hereinafter”Fellowship”)
The information is provided pursuant to of art. 13 of the Information pursuant to art. 13 of EU Regulation no. 2016/679 (hereinafter, the”GDPR”). This Privacy Policy must be considered to refer and therefore apply only to the Site and to the services offered by the Data Controller through it, without extending to pages or sites accessible through links and managed by third parties. Each user is therefore invited to carefully read the related privacy policies for a more detailed understanding of the treatments carried out through these sites.
On 25 May 2018, the European Privacy Regulation EU/2016/679, the so-called GDPR (General Data Protection Regulation), came into force, which establishes the new rules on the protection of individuals with regard to the processing of personal data, as well as the rules relating to the free movement of such data. The association processes data exclusively to respond to users who contact it and to send the Newsletter if requested by the interested party. “Special” or “sensitive” data are not required in accordance with the said Regulation. However, we invite you to take a full view of the European Privacy Regulation (EU) 2016/679 on the website of the Privacy Guarantor:
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/6807118
1. The data controller
As part of the consultation of the Site, data relating to identified or identifiable persons may be processed. The data controller is the Change Onlus Association (hereinafter also the”titular”).
2. Place and method of data processing
The processing connected to the web services of this site takes place at the headquarters of the Data Controller and will be carried out both with manual and/or IT and telematic tools with organizational and processing logic strictly related to the purposes of the processing itself and in any case in order to guarantee the security, integrity and confidentiality of the Data in compliance with the organizational, physical and logical measures provided for by the provisions in force.
All personal data are processed both in paper format and, mainly, electronically. They will be kept in a form that allows the identification of the user only for the time strictly necessary to achieve the purposes for which the data were originally collected and, in any case, within the limits of the law.
Specific security measures are observed to prevent data loss, illegal or incorrect use and unauthorized access, in accordance with the provisions of the GDPR. In order to ensure that personal data is always accurate, updated, complete and relevant, we invite interested parties to report any changes that have occurred to the following e-mail address:
info@change-onlus.org
3. Purposes of the treatment
With reference to the Site, the purpose of data processing is the provision of services accessible through the Site itself and in particular for:
The carrying out of the activities listed above does not require the consent of users, since these are services or services performed in execution of requests made directly by the interested parties.
With reference to the Newsletter, the purpose of data processing is the communication of insights into the sector and activities of the Association, news on the non-profit world and invitations to events.
If a user decides to subscribe to the Association's newsletter, this can only happen after providing certain personal data: name, surname and email address. The future cancellation or updating of data will always be possible at any time through the links at the bottom of each of our communications.
4. Types of data processed
4.1 Browsing data
The computer systems and software procedures used to operate this Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site.
4.2 Data provided voluntarily by the user
The optional, explicit and voluntary sending of an e-mail address to the addresses indicated on the Site, as well as the sending of messages and/or other data through the published collection forms, involves the subsequent acquisition of the sender's address and any other personal data indicated.
5. Scope of data circulation
The Data is not subject to dissemination or transfer to third parties. The Data is stored on servers located in Italy, within the European Union.
6. Links to other websites
The Data Controller does not control or have the opportunity to supervise either the content, nor the personal data processing policies, websites and third-party services accessible through the links contained within the Site. The Voluntary Association, therefore, cannot under any circumstances be held responsible for the processing carried out through or in relation to these third-party sites. Users are therefore invited to pay the utmost attention in this regard, taking note of the terms of use and privacy policies published on the portals visited.
7. Rights of interested parties
The subjects to whom the personal data refer may, at any time, exercise their rights:
8. How to exercise your rights
In order to exercise your rights, simply send an email to info@changeonlus.org