Privacy & Cookie Policy
This Privacy Policy applies to the processing of data (hereinafter, collectively, "Personal Data") provided and/or collected during your visit to the website www.stravarda.org (the "Site"). For further information and clarifications on our Privacy Policy, you can send us a request by writing an email to info@stravarda.org.
1. WHO COLLECTS YOUR PERSONAL DATA
The entity that collects and processes the Personal Data, as data controller (hereinafter “Controller”) is Stravarda ETS, Via V. Emanuele 119, 36050 Pozzoleone (VI), Italy.
To ensure the proper functioning of the Site, we have appointed several data processors (hereinafter collectively "Processors") who process data on our behalf. These individuals have been appointed based on their technical expertise regarding the purposes and methods of processing, the guarantees offered regarding the security measures adopted, and compliance with applicable data protection laws. These individuals are under our control, and you may request a complete list by emailing info@stravarda.org.
2. WHY WE COLLECT YOUR PERSONAL DATA
A. Donations
The Data Controller will collect information about individuals and/or legal entities wishing to submit donation requests through the application form. Some data is mandatory, and if missing, we will be unable to process your donation request. Other data is optional and will help us learn more about your organization and evaluate your project. The Data Controller will keep this information strictly confidential.
The legal basis for this processing is: performance of a service/contract involving the data subject.
The collected data will be retained for ten years after the termination of the relationship with the Data Controller. After this date, the data will be destroyed or anonymized, consistent with technical deletion and backup procedures.
Pursuant to Article 13, paragraph 2, letter e) of the GDPR, we remind you that providing your Personal Data is necessary for the requested service; therefore, any refusal to provide such information will make it impossible to establish a relationship with the Data Controller.
Furthermore, in the case of donations, in order to enable the sending of receipts to donors and to fulfill tax obligations, the Data Controller will process some optional or mandatory personal data, if refusal to provide such data would make it impossible to make the donation. The legal basis for this processing is compliance with tax and accounting regulations, and the processing duration is as required by tax and accounting regulations.
Data processing may be carried out using paper, electronic, and/or telematic media and, in any case, will be carried out using methods that guarantee confidentiality, security, and use for the purposes described.
The data may be processed, on behalf of the Data Controller, by external parties designated as data processors, who are provided with appropriate operating instructions (including Selle Royal Group SpA and Star Due Srl) and by independent external data controllers (auditing firms, accountants). The data will be processed by parties external to the Data Controller in the case of public or private entities authorized to request the data and operating as independent data controllers, such as, for example, authorities and supervisory and control bodies and in general.
The data may be processed by employees of the company departments responsible for pursuing the aforementioned purposes, who operate under the direct responsibility of the Data Controller, who have been expressly authorized to process the data and who have received adequate operating instructions.
By sending an email to info@stravarda.org, data subjects may request from the Data Controller access to their data, erasure, rectification of inaccurate data, completion of incomplete data, and restriction of processing in the cases provided for by Art. 18 of the GDPR, as well as object to processing for reasons related to their particular situation, in cases of legitimate interest of the data controller. Furthermore, if processing is based on consent or a contract and is carried out by automated means, data subjects have the right to receive the data in a structured, commonly used, and machine-readable format, and, if technically feasible, to transmit the data to another controller without hindrance. Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State in which they habitually reside or work, or in the State in which the alleged infringement occurred.
Identity and contact details of the Data Controller: The Data Controller is Stravarda ETS, with registered office at Via V. Emanuele 119, 36050 Pozzoleone (VI), Italy, email: info@stravarda.org.
B. Newsletter
Upon request, we collect your email address to send you updates on project progress and activities. You can unsubscribe from the mailing list at any time by contacting the Foundation at info@stravarda.org.
The legal basis for this processing is: performance of a service/contract involving the data subject.
The collected data will be retained until newsletter recipients unsubscribe from the service. After that date, the data will be destroyed or anonymized, consistent with technical deletion and backup procedures.
Pursuant to Article 13, paragraph 2, letter e) of the GDPR, we remind you that providing an email address is necessary for the requested service. Therefore, any refusal to provide this information will make it impossible to send you the newsletter.
C. Site
The Site automatically collects Personal Data. The computer systems and software procedures used to operate the Site acquire, as part of their normal operation, Personal Data, as the transmission of such data is an intrinsic feature of Internet communication protocols. This information is not collected to be associated with identified data subjects; however, it may allow the user to be identified after being processed and compared with data held by third parties.
Personal Data includes: IP addresses and/or domain names of computers used by any user connecting to this website, URI (Uniform Resource Identifier) addresses of requested resources, the time of such requests, the method used to submit a request to the server, the size of the returned file, a numeric code relating to the server's response status (successful, error, etc.), other parameters relating to the user's operating system and computer environment, data relating to the user's browsing behavior on the Site, information on the pages visited or searched for, in order to select and return specific content to the Site user, for example, using cookies, about which you will find complete information at the following URL www.stravarda.org.
When processing Personal Data that may directly or indirectly identify you, we strive to adhere to the principle of strict necessity. For this reason, we have configured the Site to minimize the use of Personal Data and to limit the processing of Personal Data that may identify you only when necessary or at the request of authorities and law enforcement (such as, for example, traffic data and time spent on the Site or your IP address) or to ascertain liability in the event of hypothetical crimes against the Site.
Some Personal Data is strictly necessary for the functioning of the Site, while other Personal Data is used solely to obtain anonymous statistical information on the use of the Site and to monitor its proper functioning. These data are deleted immediately after processing. You will be informed from time to time whether providing Personal Data is mandatory or optional and the possible consequences.
The legal basis for this processing is: performance of a service/contract involving the data subject.
Pursuant to Article 13, paragraph 2, letter e) of the GDPR, we remind you that the provision of your Personal Data is necessary for the requested service, therefore any refusal to provide such information will make it impossible to use the Site.
3. HOW WE USE YOUR PERSONAL DATA
Your Personal Data will be processed using automated tools for the time necessary to fulfill the purposes for which they were collected and in compliance with the principles of necessity and proportionality, avoiding processing Personal Data where the operations could be performed using anonymous data tools or other means.
Specific security measures are implemented to prevent the loss of Personal Data, illegal or improper use, and unauthorized access. However, please remember that it is essential for the security of your data that your device is equipped with tools such as constantly updated antivirus software and that your Internet provider provides a connection that guarantees secure data transmission through firewalls, anti-spam filters, and similar measures.
4. WHO WILL USE YOUR PERSONAL DATA
The Data Controller will process your personal data for the technical administration of the website. Your data will be processed by the Data Controller's employees and collaborators appointed as data processors and data processors.
Further information regarding the scope of communication and dissemination of your personal data will be provided in specific areas of the site.
5. YOUR RIGHTS
Pursuant to Chapter III of Regulation (EU) 2016/679 and other applicable local data protection laws, you may at any time request information about the personal data collected, used, disclosed, or processed by data controllers (right of access), as well as request its integration, rectification, or erasure, and object to its processing. Furthermore, starting May 25, 2018 (the date of application of Regulation (EU) 2016/679), you may also exercise the following rights: restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority.
To exercise your rights above and/or submit requests or complaints regarding the processing of your personal data, you can contact the data controllers by writing to info@stravarda.org.