Latest update: 27 march 2019
1. Data controller
The Foundation Dino Zoli (hereafter, also referred to merely as “Foundation”) is a private non-profit organisation with registered office in Viale Bologna n. 288/A- 47122 Forlì (FC), that collects and processes personal data within the ambit of its propositions, relative to cultural, educational and scientific events , and also via its Internet site, https://www.fondazionedinozoli.it whose aim is that of the divulgation and fostering of Italian culture worldwide. It is the cultural driver for entrepreneurial activities undertaken by the Dino Zoli Group.
Therefore, the notice herein aims to:
- describe the manner of management adopted for the purposes of the web site, https://www.fondazionedinozoli.it (hereafter, also referred to merely as “Site”) in respect of the processing of the personal data of those who consult the Site and interact with its services and functionalities;
- provide an account on the manners of management of the personal data of those who enter into contact with the Foundation via the e-mail addresses, telephone numbers or addresses indicated on the Site or that may be accessed elsewhere, or acquired in the framework of fairs, seminars, conventions and sundry events organised by the Foundation and by the Zoli Group to which the Foundation belongs directly or jointly with third-party enterprises and bodies.
To receive any information that may be required regarding the processing of personal data and in order to exercise ones rights as per section 7 of the notice herein, the Data Controller may be contacted via the following contact data:
Telephone no.: 0543 755770
2. Types of data processed
In the framework of use of the Site on the part of users and of performance of routine corporate tasks, the Foundation may process the data indicated below:
- Automatic navigation data: data that, during navigation on the part of users, are collected automatically, namely Internet Protocol (IP) addresses, domain names of the computers used to visit the Site, Uniform Resource Identifier (URI) addresses of the resources requested, sundry details regarding the requests submitted to the Site server, general geographic position as indicated by the IP address and other parameters concerning the user’s operating and computer system, transmission of which data is consequent to due and correct Internet operativity for the Site. The information in question is not collected to be associated with persons identified. However, due to its very nature, this information may be processed and associated with data held by third parties and may enable identification of such persons. Such data are used by the Foundation solely in order to ensure the functioning of the Site in a due and correct manner, and, if necessary, in order to ascertain the identities of, and proceed against, parties that may be responsible for unlawful acts that are detrimental to the Site and/or to the Site’s users.
- Data provided voluntarily by users: data such as names, surnames, telephone numbers, addresses, e-mail addresses and any other information voluntarily submitted to the Foundation by users within the contexts of its services, or of submission of forms available on the Site, or of submission of hard copy documents by way of correspondence, or of submission of data by e-mail to the addresses indicated on the Site or obtained at fairs and/or events organised by the Foundation, or of submission/delivery of curriculum vitae documents;
3. Purposes of, and the legal grounds for, data processing
The legal grounds for, and the purposes of, personal data processing by the Foundation are set forth below:
- consent, which may be revoked at any time, enabling processing for the purposes of conducting marketing initiatives such as transmission by e-mail of newsletters concerning the events organised by the Foundation;
- the legitimate interest of the Foundation, for the purpose of implementing and improving the computerized services of the Site, in order to analyse how users interact with the Site, to prevent the occurrence of computer-related fraud or cybercrime that may be detrimental to the Foundation or to third parties, to exercise rights during non-litigious and court proceedings, to adopt marketing initiatives addressed to users, such as distribution of newsletters or of other notices of interest to the Foundation’s contact base, to manage relations with the suppliers of products and services, and to manage administrative and accounting tasks in the framework of the entrepreneurial group to which the Foundation belongs;
- performance of contractual obligations or of pre-contractual procedures such as those required to draw up estimates, and provide information regarding the Foundation and events that the Foundation organises, renting the Foundation spaces for organisation of private events, responding to specific requests made by users, and assessing curricula received by applicants expressing an interest in available job openings;
- compliance with legal or regulatory obligations such as performance of anti-money laundering controls or, in the event, in response to requests and orders received from a Public Authority.
4. The freedom to provide or to withhold data
The user may provide or may withhold personal data. A failure to provide the information requested may quite simply render impossible execution on the part of the Foundation of the requests of withholding users, also in the framework of commercial relations.
5. Parties receiving the data
The Foundation may transmit the personal data of users to:
- the providers of products and services that it avails itself of as a part of its own activities, such as web designers, for Internet site maintenance purposes, suppliers of electronic mail and cloud services, professional accountants and/or business consultants, lawyers, banks and credit institutions, companies or professionals providing computer services and auditing companies ;
- the personnel of the Foundation and/or of suppliers of products or services as specified immediately above, in order to enable conduct of the commercial relations in relation to which the data were collected;
6. Time limits for storage of data
The Foundation shall store the data for a period of time of no greater length than that required for performance of the tasks for which the said data were collected and, in any case, for a period of no more than ten years, without prejudice to any legal requirements that provide otherwise.
7. The rights of the parties involved
In regard to the personal information held by the Foundation, the rights of the person to whom the said information refers are as follows:
- revocation of consent: this right enables the said person to cause the processing to be interrupted, when the said processing took place on the basis of the consent of the same person, without prejudice to further valid legal reasons such as may legitimate further processing of the said information on the part of the Foundation even without the consent of the said party;
- access: this right enables the said person to obtain confirmation that processing of the said person’s personal data held by the Foundation is under way, or, conversely to obtain a notice that such processing is not under way, and, if appropriate, to access the said data and to access the information concerning the said data;
- rectification: this right enables the said person to cause personal data to be modified, if imprecise, without undue delay and, in view of the purposes of processing, to cause the information, there where it is incomplete, to be supplemented;
- erasure: this right enables the said person to cause the data to be deleted without undue delay (e.g. when personal data are no longer required for the tasks for which the same were collected), without prejudice to such exceptions as are provided for by applicable regulations (e.g. when storage of data is required in order to comply with the legal obligations of the Foundation);
- portability: this right enables the said person, in certain circumstances set forth in the applicable regulations, to receive, in a structured, commonly used and machine-readable format, the personal data provided by the Foundation;
- limitation: this right enables the said person, in certain circumstances set forth in the applicable regulations, to cause limitations to be applied to the processing of personal data. In these cases the Foundation may continue to process the data only in certain circumstances, that are, for example, conducive to the exercise of the rights of defence, or for the safeguarding of the rights of another natural person or body corporate;
- objection: this right enables the said person, in certain circumstances set forth in the applicable regulations, to oppose the processing of personal data, in the absence of overriding legitimate reasons, rights or freedoms that entitle the Foundation to proceed with processing.
Furthermore, at any time, the party concerned may submit a complaint to the the Authority for the protection of personal data if, in respect of its rights, it is under the impression that the response received from the Foundation was unsatisfactory or if it is under the impression that its rights have been breached.