Notice for processing of personal data pursuant to and in accordance with Articles 13 and 14 of REGULATION (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (“GDPR”).
The data resulting from browsing this site, as well as all the personal data that you would like to communicate to us by forwarding emails, letters or faxes to our contact details, will be processed in compliance with the regulations in force and in accordance with the provisions of this policy.
1. DATA CONTROLLER
The Data Controller is FONDAZIONE PICO ETS, with registered office in via G. Guattani 9 – 00161 Roma, C.F. 96417650585, P.IVA 17908941002, Legal Persons Register Prefecture of Rome n. 1350/2019, email [email protected]
2. DATA PROTECTION OFFICER
Due to the processing activities carried out within the Foundation, the Data Controller has deemed it necessary to designate a Data Protection Officer in accordance with Article 37 of the European Regulation. To contact the Data Protection Officer, you can write to FONDAZIONE PICO, via G. Guattani 9 – 00161 Rome, or send an e-mail to [email protected].
3. PLACE OF DATA PROCESSING
Processing related to the web services of this site takes place at the aforementioned registered office and is handled only by personnel employed by the Data Controller. The personal data provided by users who forward requests for the sending of informative material are used for the sole purpose of performing the service or provision requested and are communicated to third parties only if this is necessary for that purpose.
4. TYPE OF DATA PROCESSED AND RETENTION TIME
a) Navigation data.
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct operation and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site: except for this eventuality, at present the data on web contacts do not persist for more than seven days.
b) Data provided voluntarily by the user.
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site, or faxes or missives to our contact details, entails the subsequent acquisition of the sender’s address, which is necessary to respond to requests, as well as any other personal data included in the communication. Specific summary information will be progressively reported or displayed in the pages of the site that may be implemented to allow the use of particular services on request.
5. ORIGIN, TYPE, PURPOSE AND LEGAL BASIS OF PROCESSING
ORIGIN: The personal data processed by Fondazione Pico, are exclusively those provided by the interested party and/or known when browsing the web pages of this site or when sending communications to our contact details.
TYPE: Ordinary personal data such as: name of the compiler, e-mail address and any other contact data; C.F./VAT number of the cooperative or enterprise.
PURPOSE: Personal data will be processed exclusively to enable navigation on the web pages of this site, to take advantage of the services made available to users, or to fulfill specific user requests or to respond to communications received or to fulfill regulatory, administrative, tax obligations.
LEGAL BASIS: The legal basis on which personal data are processed is the legitimate interest of the Data Controller and the fulfillment of pre-contractual, contractual or regulatory obligations.
6. CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The processed data will not be disclosed to third parties. However, the following may become aware of the aforementioned data, in relation to the purposes of processing previously set out:
1. the subjects who can access the data by virtue of provisions of Law provided for by the law of the European Union or that of the Member State to which the Data Controller is subject, including the current legislation on the regulation of public and private procurement;
2. our employees, provided that they are previously designated as persons acting under the authority of the Data Controller in accordance with Article 29 of the European Regulations or as System Administrators;
3. persons who carry out, within the borders of the European Union, in total autonomy as separate Data Controllers or as Data Processors appointed for this purpose by Fondazione Pico, purposes ancillary to the activities and services referred to in paragraph 5., i.e. postal services and shipping and home delivery agencies, banking and insurance institutions, legal and notary firms, tax and labor and occupational medicine consultants, companies for the selection, training and evaluation of personnel, companies offering payroll services, social security funds, companies offering welfare services, companies offering computer assistance and consulting services as well as design and implementation of software and/or websites, service centers, voluntary organizations, companies or consultants appointed to provide specific services to the Data Controller, within the limits of the purposes for which your data were collected.
Any communication of your personal data will take place in full compliance with the provisions of the Law stipulated in the European Regulations and with the technical and organizational measures prepared by the Foundation to ensure an adequate level of security.
The Pico Foundation offers interested cooperatives and businesses the SELFI 4.0 Digital Maturity Assessment service from Unioncamere, as part of the collaborative relationship between the two organizations. From the Pico Foundation website, it is possible to transit directly to Unioncamere’s platform, dedicated specifically to the Digital Maturity Assessment. It is specified that, in accordance with privacy regulations, the Pico Foundation and Unioncamere act as autonomous Data Controllers of personal data. The provision of the service will entail the transmission of personal data and information (name of the compiler, email address and other possible contact data; C.F./VAT number of the cooperative or company) collected by the Pico Foundation to Unioncamere, in order to allow the identification of the individuals who join the service proposed by the Pico Foundation and access the platform. Unioncamere, in turn, will transmit to the Pico Foundation the findings (reports) of the Digital Maturity Assessment related to the cooperative or enterprise concerned and the corresponding tracked records with the relevant data acquired. In fact, the service offered by Fondazione Pico also entails: a) the possibility of contact by Fondazione Pico in the event that the cooperative or enterprise concerned has not completed the Assessment, in order to guarantee possible assistance and coaching for the continuation of the provision of the service itself; b) the possibility of contact by Fondazione Pico once the Assessment has been completed, in order to allow the enterprise or cooperative concerned to deepen and evaluate the findings of the Assessment carried out, and to assess the possibility of using services for enterprises similar to the one used.
7. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES AND DATA RETENTION
The Data Controller does not intend to transfer personal data to third countries. The entire processing of personal data, in fact, takes place within the borders of the Italian territory. Personal data will be processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, except in case we need to defend one of our rights in Court or respond to requests from the Authority. After two years, the data are deleted.
8. NATURE OF CONTRIBUTION
i. without your express consent (cf. art. 6, lett. b, GDPR), in order to execute the request for the use of the requested service.
In addition, we would like to inform you that your personal data may be processed without your express consent (cf. art. 6, lett. b, c, e, f), in order to fulfill administrative, accounting and tax obligations, arising from the existing relationship;
9. RIGHTS OF THE DATA SUBJECT
In relation to the processing of your personal data, in accordance with the European Regulation, you as a data subject have the right to:
– where provided and actually granted, withdraw your consent to the processing at any time. It should be pointed out, however, that revocation of consent does not affect the lawfulness of processing based on consent prior to revocation, as stipulated in Art. 7, paragraph 3, of the European Regulation;
– to ask the Data Controller for access to your personal data, as provided for in Art. 15 of the European Regulation;
– obtain from the Data Controller the rectification and supplementation of your personal data deemed inaccurate, including by providing a simple supplementary declaration, as provided for in Art. 16 of the European Regulation;
– obtain from the Data Controller the deletion of your personal data if there is even one of the reasons provided for in Art. 17 of the European Regulation;
– obtain from the Data Controller the restriction of the processing of your personal data if any of the cases provided for in Art. 18 of the European Regulation;
– receive from the Data Controller the personal data concerning you in a structured, commonly used and machine-readable format, as well as you have the right to transmit such data to another data controller without hindrance, as provided for in Art. 20 of the European Regulation;
– object at any time, for reasons related to your particular situation, to the processing of your personal data carried out pursuant to Art. 6, paragraph 1, letters (e) or (f), including profiling on the basis of such provisions, as provided for in Art. 21 of the European Regulation;
– not to be subjected to decisions based solely on automated processing, including profiling, which produce legal effects concerning you or significantly affect you, if you have not previously and explicitly consented, as provided for in Art. 22 of the European Regulations. By way of example only, this category includes any form of automated processing of personal data aimed at analyzing or predicting aspects concerning consumption and purchasing choices, economic situation, interests, reliability, behavior;
– to lodge a complaint with a supervisory authority, if you believe that the processing concerning you violates the European Regulation, by writing to Garante per la protezione dei dati personali [email protected]. The complaint may be filed in the member state where he or she habitually resides, works, or where the alleged violation occurred, as provided in Art. 77 of the European Regulation.
To exercise each of your rights, you may contact the Data Controller:
► by registered mail with return receipt: Fondazione Pico with registered office in 00161 – Rome, via G.A. Guattani, 9;
► by e-mail: [email protected]
► may also contact DPO Marco Fossi at the email: [email protected]
This version was prepared on October 4, 2024.
The Interested Party declares that he/she has read the Information on the proposed service, defined in accordance with Article 13 of the EU Regulation No.2016/679
The Data Subject gives his/her specific and unequivocal consent to the Data Controller (see Art. 6, letter a, 7, GDPR), for purposes of information and dissemination related to the activities of the Pico Foundation (sending emails, newsletters, institutional communications and regarding the services and opportunities activated by the Foundation for businesses and cooperatives).