Premise
Pursuant to Legislative Decree no. 196/2003 and art. 12 of EU Regulation 2016/679, the NGO Action for a United World ETS (hereinafter AMU) informs its supporters and beneficiaries about the use of personal data concerning them, including those defined as “sensitive” (for example: data on general health, information on religious beliefs, information relating to racial origins), collected from the interested parties. Normally, the processing of such data is not necessary for the implementation of the project, and your data processed by AMU is not sensitive.
In any case, AMU has arranged a series of interventions that allow to protect the security and confidentiality of the data, in implementation of Legislative Decree 196/2003 and EU Regulation 2016/679, among which the adoption of the policy on the processing of personal data.
The processing of users’ personal data will be carried out as specified below.
1 Purpose of the processing
The personal data collected and processed are:
- the data provided spontaneously by supporters to allow the completion of the support for the project (credit card details, current account, email, etc.)
- the data provided by the beneficiaries of the project to allow the project to be completed (personal identification data, current account, email, address, etc.)
Such data are processed exclusively for the pursuit of the institutional purposes of the NGO.
2 Treatment methods
Data collection occurs in compliance with the principles of lawfulness, correctness, relevance, completeness, non-excess and transparency, provided by law and in relation to the purposes for which they are processed.
The processing is normally carried out with the aid of IT and telematic tools designed to store and manage the data itself, in some phases it may take place on paper and, in any case, in such a way as to guarantee its security and protect the confidentiality of the interested party.
3 Nature of the provision of data and consequence of refusal
The provision of data is, in general, mandatory. Failure to provide the data referred to in the previous point 1, precludes the establishment and continuation of the project undertaken with the NGO.
4 Data Subjects
The owner of the data provided by you is “ Azione per un Mondo Unito ETS ”, with headquarters in Via Piave, 15 in Grottaferrata (RM) Italy, in the person of the legal representative pro tempore.
5 Categories of subjects to whom the data may be communicated or who may become aware of them in their capacity as Managers or Persons in Charge
The personal data of users may be known and processed, in compliance with the current legislation on the matter, by personnel explicitly appointed for processing.
The data provided to the NGO may be communicated to other parties. In particular, they may be communicated to:
- Partner subjects of the NGO exclusively for the pursuit of the project purpose;
- INPS and other social security institutions where applicable (beneficiaries);
- Medical practices in compliance with obligations regarding hygiene and safety at work (beneficiaries);
- Insurance for accidents at work practices (beneficiaries);
- Bodies responsible for reporting the NGO’s activities;
- to some external subjects, identified as external Data Processors;
Such data may be communicated to subjects and entities engaged in studies or activities having historical, statistical or scientific purposes, always in compliance with the principles set out in point 2.
Sensitive and judicial data may be communicated, in the context of pursuing the purposes indicated above, only where required by law or regulation. In any case, the communication or dissemination of data requested, in accordance with the law, by police forces, judicial authorities, information and security bodies or other public entities for purposes of defense, state security and detection of crimes, as well as communication to the judicial authorities in compliance with legal obligations, where hypotheses of crime are identified, is reserved.
The data may also be communicated to some external subjects, identified as external Data Processors (for example, IT manager) or operating as independent Data Controllers (for example: public bodies responsible for managing contributions to development projects, partners in development activities).
Apart from the aforementioned cases, personal data will not be communicated or disclosed to third parties in any way or for any reason.
6 Rights of the interested party
Pursuant to articles 13 and 14 et seq. of EU Regulation 2016/679, your rights regarding the processing of the data you provide are:
A) revoke your consent to the processing of your data at any time; obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
B) obtain the indication:
1) the origin of the personal data;
2) the purposes and methods of processing;
3) the logic applied in case of processing carried out with the aid of electronic instruments;
4) the identifying details of the owner, the managers and the designated representative pursuant to article 5, paragraph 2;
5) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or persons in charge.
C) obtain:
1) the updating, rectification or, when there is interest, the integration of the data;
2) the portability of data to another entity;
3) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
4) the certification that the operations referred to in the letters a) and b) have been brought to the attention, including with regard to their content, of those to whom the data have been disclosed
communicated or disseminated, except in cases where such fulfillment proves impossible or involves the use of means that are manifestly disproportionate to the right protected.
D) to object, in whole or in part:
1) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
2) to the processing of personal data concerning you for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.
E) In case of violations in the processing of personal data, the interested party has the right to lodge a complaint with the Authority for the protection of personal data ( http://www.garanteprivacy.it/ )
The rights referred to in articles 13 and 14 of EU Regulation 2016/679 are exercised by making a request without formalities to the owner or manager, also through a representative. The request will be responded to promptly.
7 We hereby inform you that personal data will be retained for a period not exceeding 10 years from the end of the relationship.
The above rights may be exercised by contacting “ Azione per un Mondo Unito ETS ”, with headquarters in Via Piave, 15 in Grottaferrata (RM), in the person of the legal representative pro tempore, or by writing to privacy@amu-it.eu .