Donations Privacy Policy

Information on the processing of personal data

Pursuant to Article 13 Regulation (EU) 2016/679 "GDPR"

DATA CONTROLLER

The Data Controller is the Association "VIVICARLINO ETS - ODV" (C.F.: 94080980033), in the person of the President pro tempore, with headquarters in Vicolungo (NO), Via Vittorio Emanuele No. 5, email: info.vivicarlino@vivicarlino.org

PURPOSE AND LEGAL BASIS FOR PROCESSING

Personal data (personal details, social security number, contact details, bank and/or payment details) are processed for the fulfillment of the following purposes:

• Completion of all donation-related steps (e.g., communications on disbursements, donation summaries and reporting); legal basis Art. 6 lett. b) GDPR.

• fulfillment of legal or regulatory obligations (e.g., communication to the Internal Revenue Service); legal basis Art. 6 lett. c) GDPR.

RECIPIENTS OF THE DATA

Personal data processed by the Owner are disclosed to third-party recipients exclusively for administrative and legal needs and, in particular, to:

• Tax consultant

• Control authority

• Banking institutions

• External platforms for making the donation

DATA TRANSFER

The Data Controller has no intention to transfer the data subject's personal data to a country outside the European Union or to an international organization. Should it become necessary, it is advised as of now that the transfer will take place in compliance with Chapter V of Regulation (EU) 2016/679.

PERIOD OF STORAGE

Personal data collected are retained for a period of time not exceeding the achievement of the purposes for which they are processed ("principle of limitation of storage" - Art. 5 GDPR) in compliance with current legislation except for further storage for historical archiving purposes.

NATURE OF PROVIDING DATA

The provision of data is mandatory and failure to provide it, partial or incorrectly, will not allow all activities related to the donation to be carried out.

RIGHTS OF THE DATA SUBJECT

The data subject may exercise any of the following rights at any time:

• Right of access, i.e., the right to request confirmation from the Controller that personal data concerning him or her is or is not being processed, obtaining all the information specified in Article 15 GDPR (e.g., purpose of processing, categories of personal data processed, etc.);

• Right of rectification i.e., the ability to correct inaccurate data or request supplementation if they are incomplete (Art. 16 GDPR);

• Right to cancellation in the cases indicated in Article 17 GDPR;

• Right to limitation of processing if one or more of the cases provided for in Article 18 GDPR apply;

• Right to data portability (Art. 20 GDPR)

• Right to object, at any time, to the processing of personal data concerning him/her if the conditions indicated in Article 21 GDPR are met.

The rights listed above may be exercised by communication to the Data Controller through the contact details indicated above. In addition, the data subject has the right to lodge a complaint with the Data Protection Authority: https://www.garanteprivacy.it/modulistica-e-servizi-online/reclamo