Associazione La Raccolta della Barca Lariana and management of personal data
Associazione La Raccolta della Barca Lariana (hereafter “Associazione”) undertakes to protect the privacy of its users (hereafter “Data subject”) and to protect personal data collected on the website www.museobarcalariana.it for the sake of brevity the “Website”) in compliance with Regulation (EU) 2016 / 679 of 27.04.2016 (for the sake of brevity the “Regulation”) and current legislation.
“Personal data” pursuant to art. 4 (1) of the Regulation means: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly; in particular, the natural person may be identified by direct or indirect reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (for the sake of brevity “Data”);
“Processing” pursuant to art. 4 (1) of the Regulation means: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction; (“Processing”);
“Data Subject” pursuant to art. 4, (1) of the Regulation means a natural person identified or indentifiable directly or indirectly, with particular reference to Personal Data (for the sake of brevity “Data Subject/s”)
“Data Protection Authority” means the competent authority for the protection of Personal Data (for the sake of brevity l “Supervisory authority”)
‘Persons authorised to process data’ means a natural person, who pursuant to current regulations is qualified as a person authorised to process data and, in the light of the provisions in the Regulation “persons authorised to process personal data” meaning persons who “operate on behalf of the controller or processor, following instructions given to them” (for the sake of brevity “Persons authorised to Process”).
L’Associazione La Raccolta della Barca Lariana with head offices in Pianello del Lario, in Via Regina 1268 (22010) contact email email@example.com telephone +39 0344 87235 e +39 3357681511 is the Data Controller (for the sake of brevity “Controller”) pursuant to the terms of art. 4, 7 and 24 of the Regulation.
Personal data may be processed either manually or by electronic or telematic means also by third parties who process data on behalf of Associazione having been designated by the latter as Data controller. The full and up to date list of Processors of the data of Data Subjects may be requested by writing to firstname.lastname@example.org
Processing connected to the web services of the Website takes place at the main offices of the Associazione and are dealt with by Staff Authorised to Process Data. Data are treated in compliance with the provisions of the Regulation and current legislation.
Associazione acquires the Data provided by the Data Subjects, both in their presence and via postal and telematic services, IT and telephone services, in compliance with confidentiality and security rules provided for in the Regulation and under law. Data Processing takes place using paper, electronic and telematic instruments. Associazione processes the Data collected for the sole purpose of carrying out its normal activities, i.e. spreading knowledge and making Data Subjects aware of the specific aims of the organisation. Data are processed in order to manage operations relating to and arising from donation/s as well as to provide information about initiatives, activities and projects of Associazione, to send newsletters and information material reserved for supporters and donors also potentially in paper or digital format, as well as to request participation in fundraising campaigns and surveys, petitions and acquire the curriculum vitaes of those who intend to offer their services as collaborators.
The form to be filled out – on-line or else as a download – entails an obligatory consent to Data Processing in cases where it is strictly necessary in order to follow up on a request from the Data Subject or is optional in every other case.
With your express optional consent, Data may also be processed for profiling in pursuant to art. 4 (1), no. (4) of the EU Regulation, for the purposes of personalising communication and fundraising, based on the support preferences displayed over time in relation to donations made and data recorded. The Data involved in the above-mentioned processing shall not be disseminated to anyone other than the Data Controller and any Data Processors appointed by same. Data may be processed for the above-mentioned purposes by third party companies and/or professionals and/or suppliers who require the Data for the purposes connected, inherent to and/or instrumental to the Processing.
Data storage period
Your Data will be stored with due regard for the principle of proportionality and unless you ask to be removed or failing specific necessity to comply with legal requirements, until the objectives of the data processing have been achieved. The Data will therefore be stored for purposes relating to donations, over the course of the period during which you support Associazione and up to ten years after the last donation made, also in compliance with the legal obligations concerning storage of documents. As far as information, fundraising and profiling activities are concerned, your Data will be kept as long as you support Associazione and for a further 10 years afterwards anticipating the interests of Associazione to receive financial support and have its initiatives shared by all those willing to support the activities of our corporate purpose.
Provision of Data and Consensus of the Data Subject
Without prejudice to what is required in terms of online browsing data, the provision of Data is optional and any refusal to do so will have no consequences where browsing the Website is concerned.
An exception to this general rule is access to certain functions on the Website which can be blocked, in accordance with the law, where Associazione needs to obtain explicit consent.
For example, in order to make an online donation, visitors to the Website are asked for the necessary consent for processing their data.
Rights of the Data Subject
Pursuant to art. 13, para. 2 (b) and (d), 15, 18, 19, 20 and 21 of the Regulation, we hereby inform you that:
The Data Subject has a right to obtain confirmation from the data controller as to whether or not their data is being processed and to obtain acess to this data and the following information:
In accordance with art. 20 of the Regulation, the Data Subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a Data Controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another Data Controller without hindrance from the Data Controller to which the personal data have been provided.
Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), the Data Subject, on grounds relating to his or her particular situation, shall have the right to object to processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out for reasons of public interest.
The exercise of these rights is not subject to any constraints and is free of charge.
Associazione adopts appropriate security measures in order to safeguard confidentiality, integrity, completeness and availability of the personal data.
Information of a financial nature
Associazione guarantees the utmost confidentiality and security of information of a financial nature collected for the purposes of making donations by credit card or bank transfer or other systems of payment. Associazione only keepts information which is strictly necessary to follow up on the service requested.
Modification to the current policy
The policy could undergo changes over time also in view of any legislative amendments or modifications on the subject. The Data Subject is invited to periodically consult the page on the website www.museodellabarcalariana.it/privacy