INFORMATION ON PERSONAL DATA PROTECTION (PRIVACY POLICY)

General Regulation on Personal Data Protection – “GDPR”

WHO WE ARE

Care to Action Italia Onlus ONG, with registered office in Corso del Popolo, 227/A | 30172 Mestre (Vene-zia), (now “Care to Action”) while carrying out its activity gives utmost attention to the security and confi-dentiality of personal data of its supporters

Care to Action is therefore the owner of the personal data collected and treated on this web site.

WHICH OF YOUR PERSONAL DATA CAN BE COLLECTED

Following personal data categories can be collected:

Contact data – information regarding name, place and date of birth, tax code, address, phone number, email address

Use of the web site – information regarding how you use this web site, open and forward our communications, including information collected through cookies (you can find our Cookie Policy, which regulates all related details)

HOW WE COLLECT YOUR PERSONAL DATA

Care to Action collects and manages your personal data in the following circumstancies:

when you register on the “Contact Area” of the web site

when you subscribe to newsletters and notifications of events organized by Care to Action for charity purposes

If you provide personal data on behalf of someone else, you need to ensure in advance that con-cerned people have read this Privacy Policy.

We kindly ask you to help us keep your personal data updated by informing us of any modification.

PURPOSES FOR WHICH YOUR PERSONAL DATA CAN BE USED

Personal data processing must be legitimized by one of the legal requirements established by the current legislation on personal data protection as described below.

Response to a request made through the website

Care to Action may process your contact data in order to manage the requests you may have submitted through the website by completing the appropriate form in the “Contact Area”.

Prerequisite for processing: execution of contractual/pre-contractual obligations.

The provision of data is mandatory to manage your request; missing that, we will not be able to proceed.

Periodic newsletter sending

Care to Action may process your contact data for communication purposes, in order to send you, upon re-quest, the periodic newsletter aimed at keeping you updated on Care to Action services and initiatives.

Prerequisite for processing: legitimate interest in carrying out charity activities for funds collection.

The provision of data is mandatory to manage your request; missing that, we will not be able to proceed.

At any time you can withdraw the authorization to the use of your email address for the purpose above by following the instructions you will find at the bottom of each email message (‘Unsubscribe’).

d) Compliance with legally binding requirements to fulfil a legal obligation, regulations or provisions of the legal authority as well as to defend a right in Court of Law.

Care to Action collects your contact data to fulfil a legal obligation and/or to defend its rights in Court of Law.

Pre-requisite for processing: legal obligations, which Care to Action is compelled to fulfil.

HOW WE KEEP YOUR PERSONAL DATA SAFE

Care to Action uses a wide range of security measures to improve protection and maintenance of security, integrity and accessibility of your personal data.

All your personal data is stored in our secure servers (or on secure paper copies) or on those of our suppliers and commercial partners, and it is accessible and usable according to our standard and to our security policies (or equivalent standard by our suppliers or commercial partners).

HOW LONG WE KEEP YOUR PERSONAL DATA

We keep your personal data only for the time needed to achieve the purposes for which it was collected or for any other legitimate related purpose. Therefore, if personal data is processed for 2 different purposes, we will keep such data until the purpose with longer term ceases, however we will no longer process data for the purpose for which the retention period has expired.

We limit the access to your personal data only to those who need to use it for relevant purposes.

Your personal data that is not longer necessary, or for which there is no longer the legal basis for related retention, is made irreversibly anonymous (and in such way it can be stored) or destroyed in a secure manner.

Hereafter you can find the various conservation times according to the different purposes mentionned above:

Contractual obligations fulfilment: data processed to fulfil any contractual obligation may be kept for the entire contract duration and in any case not exceeding the following 10 years, so to verify any pending matter, there including accounting documents (for example invoices)

Reply to a request made through the website: data processed to reply to such requests will be kept for the time necessary to reply and subsequently for 36 months.

Sending of newsletters and updating on events: personal data processed for such purpose may be kept for 36 months from the date on which we obtained your last subscription to the service.

In the event of disputes: in the event that we defend ourselves or take actions or even raise claims against you or third parties, we may retain the personal data that we deem reasonably necessary to process for such purposes for the time during which such claim can be pursued.

WITH WHOM WE CAN SHARE YOUR PERSONAL DATA

Your personal data may be accessed by duly authorised employees as well as by external suppliers, ap-pointed, if necessary, as data controller to provide support in the provision of specific services.

Your personal data may be accessed also by our corporate and individual suppliers for purposes connected with IT infrastructure management on the basis of specific contractual agreements.

Please kindly contact us if you wish to see the list of data collectors and other subjects to whom we may have communicated your personal data.

CONTACTS

You can find [here] Care to Action’s contact data as owner of data processing

Should you have any questions regarding our processing of your personal data, please kindly use the “pri-vacy” web form available under the “contacts” session of the web site www.caretoaction.org or kindly contact the phone number (+39) 041.2443292 asking for the secretariat of the legal and corporate affairs office.

YOUR RIGHTS IN TERMS OF DATA PROTECTION AND YOUR RIGHT TO SUMBIT CLAIMS TO THE CONTROL AUTHORITY

Under certain conditions you have the right to ask us:

access to your personal data

copy of personal data you have provided (c.d. portability)

rectification of data in our possession

cancellation of any data for which we no longer have any legal basis for processing

opposition to processing where required by applicable law

revocation of your consent where processing is based on consent

limitation of the way in which we process your personal data, within the limits established by the legisla-tion for personal data protection

The exercise of such rights is subject to some exceptions aimed at safeguarding the public interest (for example the prevention or identification of crimes) and our interests (for example the maintenance of professional secret). In the event that you exercise any of the above mentionned rights, it will be our responsibility to verify that you are entitled to exercise them and we will reply, normally, within one month.

For any complaint or report on the methods of processing of your data, we will make every effort to reply to your concerns. However, if you wish, you can forward your complaint or report to the authority responsible for data protection, using the relevant contact details:

Guarantor for personal data protection – Piazza di Monte Citorio n. 121 – 00186 ROMA – Fax: (+39) 06.69677.3785 – Phone: (+39) 06.696771 garante@gpdp.it – Certified mail: protocollo@pec.gpdp.it .