Dear User (data subject),

Before providing data that concerns you, we require you to read the following information. It will help you to understand the reasons why your personal data will be processed, what your rights are and how you can exercise them in accordance with the provisions of the EU General Data Protection Regulation (“GDPR”) 2016/679 and Legislative Decree 196/2003 (Data Protection Code) and subsequent amendments thereof, the purpose of which is to protect the fundamental rights and freedoms of individuals.

Data Controller

Fondazione Marcelo Burlon is the Controller of your personal data. You may contact Fondazione Marcelo Burlon at Via Giuseppe Vigoni, 10 - 20122 Milano (MI) or by telephone … and email at info@fondazionemarceloburlon.com You can use this contact information to exercise your rights as set out below.

Purpose of data collection and legal basis

We, the Data Controller, may collect various types of data, including browsing data. The computer systems and software procedures used to operate the website acquire, during their normal operation, some data whose transmission is implicit in the use of Internet communication protocols. These data are used for the sole purpose of acquiring information to ensure that the website is working correctly.

The website also contains forms which require you to provide personal data. The personal data requested may include your name and surname, email address, contact details and telephone number, which you, the User, agree to provide in order to request information by filling in the form, and/or register with the website. Furthermore, the Data Controller may collect data that you, the User, voluntarily provide during telephone calls or in emails requesting information forwarded to the Data Controller.

The legal basis for the aforementioned processing is the performance of the service expressly requested by you, the User, and the fulfilment of that request.

If, on the other hand, personal data are entered in the donations section of the website, then the information (consisting of name and surname, email address, contact details, including telephone numbers, tax data necessary for the receipt and bank/credit card data for payment) will be processed for the purpose of proceeding with the fulfilment of the requirements for making the donation and issuing the necessary receipt.

The legal basis is the performance of the requested service.

Personal data provided in relation to our newsletter will be used by the Data Controller only with your explicit consent, which is optional. By providing us your consent you, the data subject, authorise Fondazione Marcelo Burlon to process the personal data provided for the purpose of sending promotional offers and newsletters in relation to the services provided and/or other activities organised such as cultural events, as well as for sending invitations to events etc.

The legal basis is the consent given.

Sharing of data

The personal data provided by you, the User, may be shared with any of the Data Controller’s employees/partners who, in their capacity as designated data processors, may process the data in accordance with the instructions given by the Data Controller. In addition, personal data may be shared with companies, consultants or freelance professionals that the Data Controller appoints to carry out tasks of a technical or organisational nature (such as, for example, providers of IT services and website maintenance services), or with whom it collaborates in order to provide its services. The subjects belonging to the above categories may use your personal data in their capacity as independent data processors in accordance with the law and/or Article 28 GDPR.

International transfer of data

Personal data collected or processed in relation to the website will not be transferred outside the European Union.

Retention period and duration of processing

Personal data will be retained for as long as is necessary to achieve the purposes for which they are collected: in the case of a reply to a request from you, this may be up to 6 months, unless otherwise provided for by law; in the case of data collected in relation to donations, this may be up to 10 years after the conclusion of the relationship and, in the case of data collected in relation to our newsletter, until you withdraw your consent in writing.

Your rights

You, the User, may exercise your rights at any time with respect to us, the Data Controller, by contacting us using the above contact information, pursuant to Articles 12, 13, 14,15, 16, 17, 18 and 20 of the EU Reg. 2016/679. Moreover, you have the right to obtain from the Data Controller confirmation as to whether or not your personal data are being processed. More specifically you have the right to:

• Access personal data, request the rectification or erasure of personal data or the restriction of the processing of your personal data, or object to their processing;
• Receive personal data in a structured, commonly used and machine-readable format and to transmit these data to another data controller (data portability) where possible;
• Be informed about the existence of automated decision-making and profiling systems;
• Withdraw consent in writing, at any time, to the use of your data without affecting the lawfulness of its use prior to the withdrawal;
• Lodge a complaint with the supervisory authority.

Optional data submission and consequences of non-submission

We inform you that you are free to provide your personal data. However, if you fail to provide some data or if you submit incorrect data, this may make it impossible for us to contact you and fulfil your request, or impossible for us to complete a donation and issue a receipt for tax purposes.

You are free to provide your personal data in relation to our newsletter and their provision is not required to browse the website.