Information pursuant to EU Regulation 2016/679 (GDPR): SURGERY FOR CHILDREN ONLUS, Via Giuseppe Mazzini, 127 - 36100 Vicenza, as Data Controller, in the person of the President and legal representative pro tempore, informs you pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the manner and for the following purposes:
1. CATEGORY OF DATA
The personal data processed by the Data Controller include: (i) personal data (name, surname, age, sex, tax code, residential or domicile address and contact details - telephone, email address); (ii) bank and / or payment details.
2. PURPOSE OF TREATMENT AND LEGAL BASES
Your personal data will be processed for the fulfillment of the following purposes:
a) completion of all phases related to the donation and / or adhesion to specific projects and appeals promoted by the Data Controller, including instrumental activities (e.g. communications on payments, donation summaries and reporting);
b) compliance with internal administrative procedures and compliance with legal obligations or regulations in force in Italy (e.g. communication to the Revenue Agency - for the preparation of pre-filled tax returns - of personal data and data relating to donations made, pursuant to the Ministerial Decree Economy and Finance 30.01.2018);
c) sending communications of an informative, promotional and fundraising nature relating to the activities and initiatives of SURGERY FOR CHILDREN, with appropriate personalization according to the interests and preferences expressed by participating in our initiatives.
The provision of data for the purposes referred to in points a) and b) are necessary to respectively ensure the execution of contractual relationships and compliance with internal administrative procedures, compliance with legal obligations or regulations in force in Italy. The "personalized" treatments referred to in letter c), ie those relating to the sending of communications of an informative, promotional and fundraising nature relating to the activities and initiatives of SURGERY FOR CHILDREN, will be carried out on the basis of the legitimate interest of SURGERY FOR CHILDREN ; the personalization of the mailings has the sole objective of making the relationship with the donor / supporter more transparent, effective and lasting by sending specific information on the particular activities or projects already supported and on the SURGERY FOR CHILDREN initiatives, on the most urgent needs of projects in the start-up or development phase, considering it important that the donor / supporter receives only the communications of his interest and in line with his expectations, thus avoiding being disturbed by unwelcome or non-specific messages. The donor / supporter can ask at any time to stop receiving this type of communication or to receive all communications, excluding the personalization filter.
3. METHOD OF TREATMENT
The processing of your personal data is carried out with reference to the operations indicated in art. 4 n. 2 of the GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic processing, including automated, in order to guarantee the security and confidentiality of the data in accordance with current legislation, inspired by the principles of correctness and lawfulness of processing.
4. RECIPIENTS
The personal data processed may be known only by personnel specifically responsible for the processing operations and may be communicated:
a) to the banking institutions that will process the data for the purposes relating to the management of means of payment and, where required, to the Revenue Agency for the preparation of pre-filled tax returns;
b) to third parties who are entrusted with communications and other processing activities (e.g. personal data communicated to third party suppliers for sending the magazine or other paper material, for the management of telephone calls, emails or SMS), or to whom the communication of data is necessary to comply with laws or regulations (administrative obligations), or to organize and coordinate particular initiatives promoted to make the association's activities known.
Personal data will not be disclosed for other purposes nor, much less disseminated.
5. RIGHTS OF THE INTERESTED PARTY AND METHOD OF EXERCISE
You can exercise your rights under art. 15 GDPR and precisely:
to have access to personal data concerning you;
to obtain the correction, integration or cancellation of the same or the limitation of the processing that concerns you;
to oppose the treatment;
to revoke the consent, where provided: the revocation of the con