Information notice on personal data processing
EU regulation no. 679/16 "data protection general regulation" d.lgs n. 196/03 "code regarding the protection of personal data" (including subsequent amendments and additions)
Dear User,
pursuant to art. 13 of the EU Regulation n. 679/2016 (hereinafter also "GDPR"), as well as the current national legislation, we hereby provide you with the following information regarding the processing of your personal data collected by completing this form.
Data Controller and Data Protection Officer
Il Titolare del trattamento dei dati personali da Lei conferiti è Flying Angels Foundation ETS, con sede legale a Genova, in Via San Luca n. 2, che potrà essere contattato scrivendo a info@flyingangels.it; oppure inviando una raccomandata all’attenzione del Titolare del Trattamento presso Flying Angels Foundation ETS, a Genova, in Via San Luca n. 2.
Data Protection Officer can be contacted by sending an e-mail to privacy@flyingangels.it;
Object and purpose of the processing
Personal data you provide will be used by the Data Controller for the following purposes:
a) respond to any requests for information by email or through the appropriate form in the "Contact us", "Keep in touch", "Solidarity favors" and "Solidarity products" sections, by collecting and processing personal data, contact data and any other information provided by you in the message sent;
b) receive the possible donation and proceed with the consequent processing of payment and accounting data, by collecting and processing personal data, contact details and bank details; processing of payment and accounting data, by collecting and processing credit card data (holder, number, CVC, expiry date), bank details, date and time of the transaction and amount of payment;
c) send any report of the project / initiative / events that have been subsidised;
d) propose tailor-made initiatives, services and products, including through remarketing activities.
To better study services and products closer to users interests, individual data such as date of birth, place of residence and / or donation behavior, as well as data collected from user's navigation on Flying Angels website, are taken into consideration too.
Legal basis of the processing
Provision and processing of your personal data are spontaneous and optional and are configured as necessary for the establishment of the contractual relation and for the possible sending of the request and the receipt of a reply from the Data Controller. Failure to provide the data will preclude the Data Controller from carrying out the requested services.
The lawful basis relating to processing carried out for the purposes referred to in point 2 lett. a), consists in the execution of pre-contractual measures at the request of the interested party or in any case in the legitimate interest of the Data Controller in the internal organization to give an answer to the contact request (Article 6, paragraph 1, letter b) and f) GDPR ). For the purposes referred to in point 2 lett. b) and c), lawful bases are to be found in the execution of a contract and in the fulfillment of legal obligations ex art. 6, par. 1, lett. b), c) of the GDPR. Finally, the awful basis for the purposes referred to in point 2 lett. d) consists in the consent of the interested party (Article 6, paragraph 1, letter a) GDPR), which may be revoked at any time.
Data communication
Your data may be disclosed, for the purposes referred to in point 2 above, to the following recipients:
- Companies or other third parties such as consultants, subjects who provide services for the computer system management, as well as the website itself, subjects who manage financial transactions through the website, who carry out outsourced activities on behalf of the Data Controller, who will be appointed processing external executives;
- Public entities, for the fulfilment of legal obligations, and to the judicial authorities, in the event of a formal request;
- Other subjects authorised to process by the Data Controller for the performance of the tasks and functions entrusted to them.
L’elenco completo dei Responsabili esterni può essere richiesto scrivendo a info@flyingangels.it;
Methods of data processing and storage time
Personal data will be processed by Data Controller in accordance with art. 5 GDPR and therefore in compliance with the principles of lawfulness, correctness and transparency, mainly on computerized support and by means of the following operations: collection, registration, organization, structuring, storage, consultation, use, extraction, comparison, interconnection, limitation, cancellation and data destruction.
Your personal data are generally not subject to transfer to non-EU countries.
Data Controller, in order to provide you with the requested services, will keep your data for the time necessary to achieve the purposes indicated in point 2 lett. a) and in any case for a period not exceeding 2 years.
In case of donation ("Solidarity favors" and "Solidarity products") your personal data will be kept for a period of 10 years from the last donation for the purposes referred to in point 2 lett. b) and c); as well as for a period of 5 years for the purposes referred to in point 2 lett. b). Once the periods set out above have elapsed, personal data will made anonymous and used only for statistical reports or otherwise deleted.
Data subject rights
As an interested party in the data processing, you are entitled to the rights referred to in Articles. 15 - 22 GDPR and more precisely: access to your personal data, data correction or cancellation or limitation of processing, the right to oppose the processing, in addition to data portability. Finally, you have the right to lodge a complaint with the Supervisory Authority pursuant to art. 77 GDPR.
Potrà esercitare i diritti sopra riportati, nonché il diritto di revoca del consenso prestato, in qualsiasi momento inviando un messaggio e-mail all’indirizzo privacy@flyingangels.it;
Data Controller
Flying Angels Foundation ETS
