Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users that access the website www.fondazionebrodolini.it

pursuant to Article 13 of Regulation (EU) 2016/679

The present notice (hereinafter also referred to as the "Notice" or "Privacy Policy") – to be understood as an information notice pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter also referred to as the "Regulation") – is provided by Fondazione Giacomo Brodolini ETS, for the purpose of explaining the methods of processing personal data in connection with the use of the website www.fondazionebrodolini.it (the "Website"), as well as in the provision of the related services and functionalities.

The information set out below applies to anyone browsing the Website or using its related services; with regard to specific services, the Data Controller will provide a dedicated privacy notice.

DATA CONTROLLER

The Data Controller of the personal data processed through the use of the Website is Fondazione Giacomo Brodolini ETS (hereinafter also referred to as "FGB" or the "Data Controller"), in the person of its pro tempore legal representative, with registered office at Via Goito, 39 - 00185 Rome (Italy).

TYPES OF DATA PROCESSED

Within the limits of the purposes and methods described in this Notice, while browsing the Website the user's browsing data (hereinafter also referred to as "Personal Data" or "Data") may be processed. Indeed, the IT systems and software procedures used to operate the Website collect certain data (e.g., IP addresses; domain names of the devices used by users to access the Website; URI – Uniform Resource Identifier – addresses; date and time of access; type of resources requested; method used to submit requests to the server; additional data and parameters relating to the interaction between the user and the Website and the user’s device), which are processed for the purpose of obtaining anonymous statistical information on the use of the Website, ensuring its proper functioning, and preventing cyber fraud.

With regard to data collected through cookies, please refer to the Cookie Policy.

PURPOSES AND LEGAL BASIS OF THE PROCESSING

The provision of browsing data is necessary to obtain the requested service, namely browsing the Website and ensuring its proper operation, and the legal basis for the processing is Article 6(1)(b) of the Regulation; in the absence of such data, it will not be possible to provide the related services.

The processing of browsing data also takes place for purposes related to the prevention of cyber fraud. Such processing is based on the legitimate interest of the Data Controller in pursuing this purpose, pursuant to Article 6(1)(f) of the Regulation. The data subject has the right to object at any time to such processing by writing to privacy@fondazionebrodolini.eu; in such a case, the Data Controller shall refrain from further processing unless there are overriding legitimate grounds to continue the processing.

For additional purposes pursued by the Data Controller, such as activating the newsletter service requested by the user or sending commercial communications, please refer to the specific privacy notices provided prior to the collection of the data.

RETENTION OF PERSONAL DATA

Personal Data shall be retained for the time necessary to enable browsing of the Website. More specifically, log data are retained by the Data Controller for the period strictly necessary to achieve the relevant purposes and, in any case, for no longer than 2 months from collection, except where events occur that require the intervention of the competent Authorities, also in cooperation with third parties/recipients entrusted with security activities, without prejudice to further retention periods required by law.

The hosting provider, appointed as Data Processor pursuant to Article 28 of the Regulation, retains additional technical infrastructure logs relating to the hosting of the Website for purposes of security, prevention of abuse, and legal protection of its systems, for a maximum period of 6 years, in compliance with legal obligations and the principles set out in Article 5 of the Regulation. The relevant privacy notice is available at the following link:
https://www.serverplan.com/about-us/privacy/ 

In any case, upon expiry of the retention period, all Personal Data shall be deleted or stored in a form that does not permit the identification of the data subject.

DISCLOSURE AND TRANSFER OF DATA

Browsing data may be disclosed to third parties that carry out personal data processing operations on behalf of the Data Controller, duly appointed as Data Processors and required to comply with the obligations imposed by data protection legislation.

The list of Data Processors appointed pursuant to Article 28 of the Regulation is available upon request by writing to privacy@fondazionebrodolini.eu. The Personal Data provided shall not be disclosed to additional parties, nor shall they, in any case, be subject to dissemination.

Where Personal Data are transferred outside the European Union by service providers engaged by the Data Controller for activities connected with the management and functionalities of the Website, such transfer, where applicable, shall be governed by the execution of Standard Contractual Clauses adopted by the European Commission under Decision 2021/914/EU and any subsequent amendments, or alternatively on the basis of an adequacy decision of the Commission, binding corporate rules and/or any other instrument permitted under the applicable legislation.

The data subject may obtain information on the location where the Data have been transferred and receive a copy of such Data by writing to privacy@fondazionebrodolini.eu.

RIGHTS OF DATA SUBJECTS

The data subject may exercise their rights in accordance with the procedures and within the limits provided by the applicable data protection legislation.

In relation to the aforementioned processing activities, the data subject has the right to:

• request confirmation from the Data Controller as to whether or not personal data concerning them are being processed, as well as further clarification regarding the information referred to in this Notice, and to receive such data, within reasonable limits (right of access);
• request that the Data Controller rectify or supplement the data provided or otherwise held by it, where inaccurate (right to rectification);
• request that the data acquired or processed by the Data Controller be erased where no longer necessary for the purposes pursued or where there are no ongoing disputes or controversies, in the event of withdrawal of consent or objection to processing, in the event of unlawful processing, or where there is a legal obligation to erase the data (right to erasure/right to be forgotten);
• request the restriction of the processing of their Personal Data where one of the conditions set out in Article 18 of the Regulation applies; in such case, the data shall not be processed, except for storage without the user’s consent, subject to the exceptions expressly set out in paragraph 2 of the same Article (right to restriction of processing);
• with regard to data processed by automated means, request that the Data Controller provide their data, or transmit them to another controller indicated by the user, in a structured, commonly used and machine-readable format (right to data portability).

To exercise their rights and request information, the data subject may contact the Data Controller by writing to the following e-mail address: privacy@fondazionebrodolini.eu.

RIGHT TO LODGE A COMPLAINT

Data subjects who believe that the processing of Personal Data carried out through the Website is in breach of the provisions of the Regulation have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), as provided for by Article 77 of the Regulation, or to bring proceedings before the competent judicial authorities (Article 79 of the Regulation).