INFORMATION ON THE PROCESSING OF PERSONAL DATA

Privacy Policy, pursuant to articles 13 et seq. of Regulation (EU) 2016/679

Website www.aicarm.it

Aicarm APS, with head office at VIA DELL'STUDO 5, 50122 FLORENCE CF 94288930483, as Data Controller, intends to provide clear and complete information on the methods and rights that users can exercise in relation to the processing of their Personal Data.
These treatments are carried out by adopting adequate technical and organizational security measures, with the highest priority of the correct protection of personal data and in compliance with the principles of the GDPR European Regulation (EU) 2016/679 ) and pursuant to Legislative Decree n.196/2003 (Privacy Code) and subsequent amendments,

  1. CATEGORY OF PROCESSED DATA

The processing activities carried out are aimed at acquiring the following personal data:

Categories Use cases
Common data Personal data
Common data Navigation log
Common data Tax data
social Network Facebook, Instagram, Youtube and LinkedIn

Technical treatments

The data relating to the type of browser used during the connection to the aicarm.it domain (anonymous data) are also processed, automatically recorded by the logical devices for the protection and control of access to the domain (log files).
Such personal data is intended exclusively for monitoring the network flow towards the aicarm.it domain.

This is information initially collected without the intention of being associated with identifiable individuals. However, due to their intrinsic nature, they could, through elaborate analysis and association with third-party data, allow the identification of users.

This data is used solely to obtain anonymous statistical information on the use of the site and to guarantee its correct functioning; thereafter, they are deleted immediately after the processing process. In the case of cyber criminal activity against the site, such data could be used to attribute responsibility, but at the moment, data relating to web contacts are not kept for more than a year, unless this eventuality occurs.

  1. CATEGORIES OF INTERESTED PARTIES

The processing activities carried out are aimed at the following categories of interested parties: Web Users and Users who make the donation.

  1. PURPOSES AND LEGAL BASES

The Personal Data will be processed for the fulfillment of the following administrative, organizational, informative and institutional purposes.

Due to the finality mentioned, your personal data may be:

  1. processed, including by external managers, duly authorized and trained in processing, in compliance with privacy legislation and procedures, for compliance with internal administrative procedures and fulfillment of legal obligations or regulations in force in Italy (e.g. communication to the Revenue Agency – for the preparation of pre-compiled tax returns – personal data and data relating to donations made);
  2. processed in compliance with the principles of lawfulness, correctness and transparency for the completion of all phases connected to the donation and/or participation in the projects and specific appeals promoted by the Data Controller, including the related instrumental activities (e.g. communications on payments, summaries of donation and reporting) and for further purposes compatible with them;
  3. used to send communications of an informative, fundraising nature and for promotional purposes of the activities and initiatives of Aicarm APS, with appropriate customization based on the interests and preferences expressed by participating in the association's initiatives and only with explicit consent

The provision of data for the purposes referred to in point a) e b) it is necessary to guarantee the execution of the obligations relating to the donation in compliance with internal administrative procedures, fulfillment of legal obligations or regulations in force in Italy. Failure to provide or subsequent refusal to process will not allow all activities related to the donation to be carried out.

The personalized treatments referred to in the letter c) will be carried out on the basis of the legitimate interest of Aicarm APS to make the relationship with the donor/supporter more transparent, effective and long-lasting by sending specific information on the activities or initiatives of Aicarm APS already incurred or deemed relevant.

The personal data acquired during browsing activity are subject to processing in order to enable the user to use the services provided by the site www.aicarm.it, as well as for maintenance and technical assistance purposes aimed at guaranteeing correct functioning and enhancing the quality and structure of the Site itself. Each data processing process is conducted in compliance with the limits and conditions imposed by current legislation, through the use of direct and/or automated tools, including those of an electronic, digital and telematic nature.
The Data Controller and the Data Processors will proceed with the management of the user/visitor's Personal Data in pursuit of specific purposes, of which the latter will be promptly informed, processing such Personal Data only in the presence of one or more of the following legal bases:

  1. The user/visitor has given his free, specific, informed and unequivocal consent to the processing;
  2. The processing is necessary for the execution of a donation contract of which the user/visitor is a party or for the fulfillment of pre-contractual measures adopted at his request;
  3. There is a legitimate interest on the part of the Data Controller and its managers, in respect of the fundamental rights and freedoms of the interested party which require the protection of personal data;
  4. Processing is mandatory based on legal provisions.
  1. TREATMENT METHODS

The operations that we foresee necessary in relation to the purposes described are (pursuant to Article 4, GDPR): collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and data destruction.

Personal Data will be subjected to both paper and electronic processing, including automated, in such a way as to ensure high levels of security and confidentiality for processing, including storage (if foreseen).

In particular, the following Personal Data may be processed:

    1. Navigation Data

The software and computer systems responsible for the functioning of the Site carry out, in the regular execution of their operations, the acquisition of specific personal data transmitted implicitly during interaction with Internet communication protocols. This information, having the potential to indirectly identify users/visitors (for example, the IP address), is used exclusively to supervise the operational integrity of the site. No disclosure or communication to third parties is foreseen for navigation data.

    1. Personal and fiscal data

Users/visitors, when connecting to the site www.aicarm.it, knowingly provide their personal data, such as personal and fiscal data, for access to specific activities, such as:
to. request for information;
b. forwarding requests to join training courses via the registration form;
c. offer your support to Aicarm APS and make a donation

    1. Cookies (Cookie Policy)

The site www.aicarm.it, in line with other digital platforms, automatically sends "cookies" to the user when browsing the pages of the site. These "cookies" are small text files that facilitate navigation and allow the operation of services that require identification of the user's path between the various sections of the site.

For more information on the use, consent and management of cookies, see Cookie Policy Site

  1. RECIPIENTS

In order to pursue the previously indicated purposes, the Owner and Managers may need to communicate users' Personal Data to third parties, in order to execute the Contract, fulfill legal obligations or carry out activities instrumental to the provision of the service and the requested services.

Therefore, recipients of such data may be subjects such as employees, consultants, collaborators and other natural persons who operate in accordance with the instructions received from the Data Controller and the Managers as Persons Authorized to Process the Data. Furthermore, the recipients of the data may belong to the following categories:

  1. Public and private authorities, bodies and organizations linked to the institutional activities of Aicarm APS;
  2. Persons who carry out tasks of a technical or organizational nature, data storage and processing, control, assistance and consultancy, including of a legal nature.
  3. Banking institutions that will process the data for purposes relating to the management of the means of payment used for the donation;
  4. Third parties (possibly appointed Data Controllers, pursuant to Art. 28 GDPR) who may be entrusted with specific processing activities, such as communications and related operations (e.g. personal details communicated to suppliers for sending paper material, e-mails or for the management of telephone calls, etc.), or to whom the communication of data is necessary to comply with laws or regulations or codes of conduct or to organize and coordinate particular initiatives promoted to raise awareness of the association's activities.

The subjects belonging to the categories indicated above will process the data as external data processors or as independent data controllers, or as Persons Authorized to process data, designated by the Data Controller and its Managers. These subjects will be provided with adequate instructions in order to guarantee the confidentiality, security and integrity of the data, together with the adoption of appropriate security measures.

The Personal Data processed may only be known to personnel specifically in charge of processing operations and will not be communicated for other purposes nor, much less, disseminated.

  1. RIGHTS AND METHOD OF EXERCISE

The Association Aicarm APS as Data Controller, pursuant to articles 5 and 13 of the GDPR, will process the personal data of the interested party in a lawful, correct and transparent manner, in the realization of the purposes indicated above, in compliance with the confidentiality obligations and current regulations.

These data will be processed both electronically and on paper or on any other type of suitable support, in compliance with the security measures provided for by the GDPR. Failure to consent will not allow the use of personal data in the manner and for the purposes indicated above.

At any time, the interested party has the right to ask the data controller for access to personal data and the rectification or cancellation of the same or the limitation of the processing of personal data concerning him or to oppose their treatment in addition to the right to data portability (data transfer), and, pursuant to articles from 15 to 22 and of the art. 34 of the GDPR, has the right to revoke consent to data processing with written communication to be sent by certified e-mail to: aicarmetsonlus@messaggipec.it, this revocation will not affect the lawfulness of the processing based on the previously given consent. .

The interested party also has the right to lodge a complaint with the Guarantor for the protection of personal data at any time.

  1. STORAGE TERMS

The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed ("conservation limitation principle", Article 5, GDPR) and / or for the time necessary to fulfill the obligations established. ex lege, and in any case, for the purposes of donation, for a period not exceeding 10 years.

The verification of the obsolescence of the data stored in relation to the purposes for which they were collected will be carried out periodically.

Last update date: February 2024