Information on the processing of personal data collected in the use of this webpage owned by the La Salle Foundation, with Tax Code 11267011002

Reference to the European General Data Protection Regulation GDPR EU 2016/679 - Legislative Decree 196/2003 harmonized with Legislative Decree 101/2018

1. Data Controller.
The La Salle Foundation - with registered office in Via Aurelia 476, 00165, Rome, Italy, Tax Code 11267011002, data controller (Controller) guarantees compliance with the regulations on the protection of personal data by providing the following information regarding the processing of data freely communicated to us by you (Data Subject) while browsing this webpage https://dona.lasallefoundation.org

2. Processed data, purposes, and legal bases of processing
Data generated by access to the webpage.
The computer systems and software procedures used to operate this page automatically acquire some user data, however anonymized, the transmission of which is implicit in the use of Internet communication protocols. These data (such as, for example, domain names, operating system used, type of device or browser used for connection) are not accompanied by any additional personal information and are used exclusively to:

1. obtain anonymous statistical information on the use of the page;
2. manage needs to check the methods of use of the same;
3. ascertain responsibility in case of hypothetical computer crimes;
4. improve the user experience when navigating our sites.

Cookies
The webpage therefore does not use profiling cookies aimed at detecting behaviors associated with IPs or other information that can be linked to the Data Subject using them. Only first-party technical cookies and third-party analytical cookies are used, but without the possibility of identifying the Data Subject (IP masking) in order to improve navigation and usability.
The legal basis legitimizing the processing of such data is the need to make the functionalities of the webpage usable and to ensure adequate usability of the same. The only personal data collected are those provided voluntarily and directly by the user via explicit forms and processed for the following purposes:

1. in the presence of specific consent, for the periodic sending, via e-mail, of newsletters and informational material regarding our activities;
2. in the presence of specific consent, to receive updates on our activities and services;
3. in the presence of specific consent, to adhere to and/or register for training courses, webinars, or internal events;
4. in the case of sending a curriculum vitae, exclusively for personnel selection purposes.

In the cases expressly indicated, the legal basis is the consent freely given by the data subject in addition to the legitimate interest of the Controller
Any refusal to the processing will result in the impossibility for the Association to send you newsletters and informational material or invitations to proposed events and initiatives.
Data related to donations made from this webpage.
The personal data collected in the Credit Card donation form: Name, Surname, Email address, phone number, are necessary to complete the voluntary donation made by the data subject to the Foundation. They will therefore be kept within the legal terms provided for commercial contracts and in relation to the Organization's accounting accountability needs. In the case of a request for continuous bank donation via the Sepa Direct Debit method, the tax code provided by the data subject will also be stored as it is mandatory by law. Data relating to credit cards are not stored by the system but transmitted via a secure connection to the designated banking circuit. In the case of recurring donations, subsequent transactions will be carried out with an anonymous code provided by the banking circuit on the first transaction.
In the case indicated, the legal basis is the act of liberality freely carried out by the Data Subject.
For security reasons, in order to prevent and monitor fraudulent actions by malicious individuals, the IP address from which the transaction originates is stored on an ad hoc external system. This is for a time strictly limited to the successful conclusion of the donation transaction, without this being at this stage associated with the data subject and therefore without any profiling purpose. In the case indicated, the legal basis is the possible request for information from the competent judicial authority.

 

3. Processing methods and data retention times of the Data Subject. The collected data will be processed using electronic computer tools with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee their security at all times. The data are kept for the time strictly necessary for the management of the purposes for which the data themselves are collected in compliance with current regulations and legal obligations.
In any case, the Controller implements rules that prevent data from being kept indefinitely and therefore limits the retention time in compliance with the principle of data minimization.
All processed data are stored within the territory of the European Community and are under no circumstances sold to third parties, transferred outside of it, or disseminated.

4. Subjects authorized to process, processors, and communication of data.
The processing of collected data is carried out by internal personnel employed by the Controller, specifically identified, trained, and authorized to process according to specific instructions given in compliance with current Privacy legislation.

5. Rights of the data subject. The Foundation has appointed a Data Protection Officer (DPO) who can be contacted to access data, object to processing, or request the deletion, modification, or updating of any personal information collected by the Data Controller. It is also possible to exercise the right to restrict processing and the right to data portability by sending an email to foundation@lasalle.org. The data subject can, if they do not consider their rights satisfied, also contact the Data Protection Authority directly.

Revision of this document: A1- 20201125 of 25 11 2020