Privacy Policy Notice

DONOR INFORMATION ON DATA PROCESSING
PURSUANT TO ARTICLE 13 OF ITALIAN LEGISLATIVE DECREE 196/2003 AND ARTICLE 13 OF EU REGULATION 2016/679

Dear Sir / Madam,
While thanking you for your valuable support, we inform you that the Fondazione Italia Uganda per l’opera di padre Giovanni Scalabrini Onlus, with registered office in Milan, via Vincenzo Monti no. 34 (hereinafter, also referred to as the “Foundation”), processes your personal data for the purposes set out in paragraph 3. We therefore provide you with the information relating to the processing of personal data, pursuant to and for the purposes of Article 13 of Italian Legislative Decree 196 of 30 June 2003 (hereinafter the “Privacy Code”) and Article 13 of the EU Privacy Regulation 2016/679 (hereinafter the “Privacy Regulation”).

1. Glossary
«Personal data»: any information relating to an identified or identifiable natural person («data subject»); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
«Processing»: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
«Data Controller»: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
«Data Processor»: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;
«Third party»: a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

2. Data Controller and Data Processors
The Data Controller is the Foundation, in the person of its pro tempore legal representative domiciled at the Foundation's registered office (hereinafter the “Controller”): e-mail address: segreteria@italiauganda.org; by post: Via Vincenzo Monti 34, 20123 Milano.
The Controller has the right to appoint other Data Processors, as well as authorized persons entrusted with processing operations. A complete and updated list of the Processors and authorized persons is available by contacting the Controller at the addresses above.

3. Type of Data Processed
Within the scope of managing the relationship, the Foundation directly acquires your common personal data (e.g., first name, last name, personal details, address, financial data, etc.)

4. Purposes of Personal Data Processing
a) Purposes of administrative and operational management of donations
The processing of the data provided by you is primarily aimed at achieving the Foundation's purposes of administrative and operational management of donations. Your data may be processed, purely by way of example, for: (a) registration of the donation on the supporting management software; (b) sending the annual report of donations made; (c) sending a paper thank-you letter upon receipt of donations; (d) managing the Foundation's personal records and databases; (e) allocating the donations received to the relevant projects.
b) Purposes of developing new campaigns for the implementation of new projects
Furthermore, the Foundation may use your data by carrying out communication activities (sending messages, requests for help, sponsorship of events and projects, etc.) to develop new fundraising campaigns and to publicize and implement new projects supported and coordinated by the Foundation itself.

5. Nature of the Provision of Personal Data and Consequences of Refusal
The provision of your personal data is essential for achieving the purposes indicated above; failure to provide the data and any refusal to process them will make it impossible to establish and/or continue the relationship with the Foundation.

6. Methods of Personal Data Processing
The processing of your personal data is carried out by personnel duly trained in personal data processing matters, such as employees, collaborators, or external consultants, specifically appointed as “persons in charge” or “processors” by the Controller within the scope of their respective functions or professional assignment conferred. The processing of your personal data is also carried out with the aid of electronic, automated, IT, and telematic tools, and in any case with logics strictly related to the purposes mentioned above, in order to guarantee the confidentiality and security of personal data. Pursuant to and for the effects of the Privacy Code and the Privacy Regulation, the Foundation processes the data in compliance with the principles of lawfulness, fairness, transparency, accuracy, integrity, non-excessiveness, relevance, and necessity with respect to the pursued purposes, guaranteeing the protection of your confidentiality and your rights.

7. Data Retention
Your personal data will be kept for a period no longer than strictly necessary for the purposes pursued. Your personal data will be processed and stored through computer archives at the Foundation's headquarters, as well as at the offices of the professionals and/or service companies to which your personal data are transmitted to pursue the purposes described above.

8. Communication of Data to Other Third Parties
Your personal data may eventually be communicated to third parties if this becomes strictly necessary within the scope of the purposes indicated above, or to subjects who may access the data by virtue of legal provisions (e.g., public administrations, police forces, judicial authorities, etc.).

9. Data Subject Rights
As provided for by Article 13 of the Privacy Regulation, you may, at any time, by way of example: (a) request access to personal data, rectification, erasure, or restriction of the processing concerning him or her; (b) exercise the right to data portability; (d) withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal; (e) lodge a complaint with a supervisory authority.
Furthermore, you may at any time exercise against the Controller the rights provided for by Article 7 of the Privacy Code.

The rights described above may be exercised with a request addressed informally to the Data Controller at the following addresses: via e-mail: segreteria@italiauganda.org; by post: Via Vincenzo Monti 34, 20123 Milano.