Privacy Policy
This Privacy Policy is intended to be rendered only for the website http://www.uniamo.org while it does not apply to other websites that may be consulted through external links, and is to be understood as Information provided pursuant to EU Reg. 679/2016 to those who interact with the Site and complies with Recommendation no. 2/2001 on minimum requirements for collecting data on-line in the European Union, adopted on 17 May 2001 by the Article 29 Working Party.
Your personal data will be processed in accordance with the principles of lawfulness, fairness, transparency, purpose limitation and storage, data minimisation, accuracy, integrity and confidentiality. Your personal data will therefore be processed in accordance with the legal provisions of the Applicable Legislation and the confidentiality obligations therein.
1. DATA CONTROLLER
The data controller is UNIAMO F.I.M.R. Onlus, with registered office in Via Nomentana 133, 00161 Rome CF. 92067090495 – is .I.V.A. 08844231004
2. PERSONAL DATA SUBJECT TO PROCESSING
Personal Data’ shall mean any information concerning an identified or identifiable natural person with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his/her physical, physiological, psychological, economic, cultural or social identity.
The Personal Data collected by the Site are as follows:
a. Browsing Data
The Site’s computer systems collect some Personal Data whose transmission is implicit in the use of Internet communication protocols. This information is not collected in order to be associated with you, but by its very nature could, through processing and association with data held by third parties, allow you to be identified. Among these are the IP addresses or domain names of the devices used to connect you to the Site, the URI (Uniform Resource Identifier) notation addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to your operating system and computer environment.
These data are used to obtain anonymous statistical information on the use of the Site and to check its correct functioning; to allow – given the architecture of the systems used – the correct provision of the various functions requested, for security reasons and to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site or third parties and are deleted after 7 days.
b. Cookies and related technologies
The UNIAMO F.I.M.R. Onlus website does not collect Personal Data through cookies. The cookies used are exclusively functional cookies and do not persist in the user’s device.
3. PURPOSE, LEGAL BASIS AND OBLIGATORY OR OPTIONAL NATURE OF THE PROCESSING
The Personal Data you provide through the Site will be processed by UNIAMO F.I.M.R. Onlus for the following purposes
a) purposes of statistical research/analysis on aggregate or anonymous data, without therefore the possibility of identifying the user, aimed at measuring the functioning of the Site, measuring traffic and assessing usability and interest;
b) purposes related to the fulfilment of a legal obligation
c) purposes necessary to ascertain, exercise or defend a right in court or whenever the judicial authorities exercise their jurisdictional functions;
The legal basis for the processing of Personal Data for the purposes referred to in point a) is the provision of a service or the response to a request that does not require consent under Applicable law.
The provision of your Personal Data for the purposes listed above is optional, but failure to provide it may make it impossible to respond to your request or fulfil a legal obligation to which the data controller is subject.
4. RECIPIENTS
Your Personal Data may be communicated to subjects authorised by UNIAMO F.I.M.R. Onlus for the management of the site. The authorised subjects have been previously identified.
5. TRANSFERS
Personal data shall not be transferred outside the European Economic Area. The site is hosted at the ARUBA Server Farm in Italy.
6. DATA RETENTION
The Data Controller will keep your Personal Data for the time strictly necessary to achieve the purposes indicated in point 3.
7. YOUR RIGHTS
In your capacity as data subject, you have the rights set out in Articles 15 et seq. of the GDPR, namely the rights to:
(a) to obtain from the controller confirmation as to whether or not personal data relating to him are being processed and, if so, to obtain access to the personal data and to the following information the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients in third countries or international organisations; where possible, the period for which the personal data are to be retained or, if this is not possible, the criteria used to determine that period; where the data are not collected from the data subject, all available information as to their origin; the existence of an automated decision-making process
including profiling, and, at least in such cases, meaningful information on the logic used, as well as the importance and the envisaged consequences of such processing for the data subject.
(b) obtain from the controller the rectification of inaccurate personal data concerning him/her without undue delay. Having regard to the purposes of the processing, the data subject shall have the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.
(c) obtain from the controller the erasure of personal data concerning him/her without undue delay, if one of the following grounds applies (a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; (b) the data subject withdraws the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) and if there is no other legal ground for the processing; (c) the data subject objects to the processing pursuant to Article 21(1) and there is no overriding legitimate ground for the processing, or objects to the processing pursuant to Article 21(2) (d) the personal data have been unlawfully processed; (e) the personal data must be erased in order to comply with a legal obligation laid down by Union or Member State law to which the controller is subject; (f) the personal data have been collected in connection with the provision of information society services referred to in Article 8(1).
(d) obtain from the controller the restriction of the processing where one of the following applies: (a) the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of the personal data; (b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be restricted; (c) although the controller
processing no longer needs them for the purposes of the processing, the personal data are necessary for the data subject to establish, exercise or defend a legal claim; d) the data subject has objected to the processing pursuant to Article 21(1), pending verification as to whether the legitimate reasons of the data controller prevail over those of the data subject
(e) to receive in a structured, commonly used and machine-readable format personal data concerning him/her that he/she has provided to a data controller and to transmit such data to another data controller without hindrance from the data controller to whom he/she has provided them where: a) the processing is based on or
a contract b) the processing is carried out by automated means. When exercising his or her data portability rights, the data subject shall have the right to obtain the direct transmission of personal data from one controller to another, if technically feasible.
(f) object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f), including profiling on the basis of those provisions. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her carried out for such purposes, including profiling insofar as it is related to such direct marketing.
(g) the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him/her or significantly affects him/her in a similar way
(h) right to lodge a complaint with a supervisory authority
Requests should be addressed by e-mail to: privacy@uniamo.org