Source: https://indipendenzaroma.com/privacy-policy/
Timestamp: 2019-04-24 15:54:46+00:00

Document:
Pursuant to Art. 13 of Legislative Decree 30 June 2003 No. 196, “Personal Data Protection Code” (hereinafter referred to as “Privacy Code”) and Art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter referred to as “Regulation”), we hereby inform you on the processing of your personal data.
1. Type of data and purposes of the processing.
The type of personal details requested or acquired by Indipendenza Associazione culturale (hereinafter, referred to as the “Association”) include, but is not limited to: identification data, such as name and surname, e-mail addresses or social platform accounts.
- fulfillment of the Association’s legal and regulatory obligations.
Your personal data will be processed manually, by electronic and non-electronic devices.
Your personal data will in any case be processed in a correct, legal and transparent manner, in order to guarantee their security and confidentiality.
Personal data shall be processed so as to ensure their appropriate security, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
In any case, the processing of personal data will be based on the principles of correctness, lawfulness and transparency guaranteed, in particular, by the adoption by the Association of the minimal security measures referred to in Articles 33 and the following, Annex B of the Privacy Code and Art. 32 of the Regulation.
Users of the site who send requests and / or register on the Association’s website may receive newsletters providing information and promotions, aimed at improving the services offered. Users have the right to revoke their subscription to these newsletters at any time and the Association undertakes to acknowledge any such revocation in the strictly necessary technical time.
4. Data retention time and other information.
- for the time strictly necessary for the achievement of the purposes for which the data are processed, as per Section 1 above.
in the person of its legal representative. The Association may also make use of external subjects for the performance of all or part of the activities, related and/or consequent to the processing of the personal data for the performance of the activities indicated in Section 1 above, including registered professionals providing legal and/or contractual obligations – such as, by mere way of example, accounting, administrative and tax obligations – in line with the object and purposes of the processing.
Pursuant to Art. 29 of the Privacy Code and Art. 28 of the Regulation, the Data Controller may designate one or more Data Processors. The Data Processor is selected among subjects who, by experience, ability and reliability, are able to guarantee the correct performance of the assignment.
The Data Processor assists the Data Controller in the fulfillment of the applicable laws, developing strategies relating to the purposes and methods of processing and securing of the data.
The indication of the Data Processor or the updated list of Data Processors is available at the registered office of the Data Controller.
The e-mail address for the exercise of the rights indicated in Art. 7 of the Privacy Code and Articles 13, paragraph 2, letters (b) and (d), 15, 18, 19 and 21 of the Regulation (also in reference to requests made to third parties whose data have been communicated with the specific consent of the interested person) is: info@indipendenzaroma.com.
7. Place and processing of data.
The processing of personal data related to commercial relationships with the Association, or relating to the provision of booking / purchasing services, as well as marketing and promotional purposes, relating to the activities of the Association will be made at the Association’s headquarters, or in the places where the designated Data Processors operate and are only handled by technical staff in charge for the data processing or for carrying out specific operations. The personal data provided by users who ask to receive information (through brochures, leaflets, submission of estimates, etc.) shall be used only for the performance of the requested service. More information in relation to the processing of personal data may be requested at any time to the Data Controller using the contact information.
8. Nature of the provision of data.
The provision of data is optional, unless required by law or by contractual rules. Any refusal to provide personal data may however prevent the performance of the Association’s services and activities.
During normal operation, the computer systems and software procedures used to operate the website may acquire some personal data whose transmission is implicit in the use of Internet communication protocols (such as Internet domain and IP protocol, type of browser and operating system of the computer used, date, time and permanence on the site, pages viewed, any search engine from which the site was accessed).
This information, per se, may allow users to be identified through the processing and association with data held by third parties. This category of data includes IP addresses or computer domain names used by users connecting to the site, the Uniform Resource Identifier (URI) notation addresses, the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the response status given by the server (success, error, etc.) and other parameters related to the user’s operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its operation and are deleted immediately after processing.
9. Communication and dissemination of data.
- collaborators and employees of the Association specifically appointed and within the scope of their duties.
Apart from the above cases, personal data will not be disclosed.
The data won’t be transferred to European Union Countries and to other Countries outside the European Union.
Any transfer to other Countries will be protected after the acquisition, in written form, of express consent or prior authorization of the Authority for the protection of personal data on the basis of adequate guarantees to protect the rights of the interested subject, also provided in contractual form.
The Data Controller reserves at any time the right to make changes to this information, which will be automatically effective, unless otherwise specified.
12. Management of third-party cookies.
Cookies are small text strings that the sites visited by the user send to his terminal (usually the browser), where they are stored before being re-transmitted to the same sites at the next visit of the same.
Cookies are used for different purposes: execution of computer authentication, monitoring of sessions, storage of information on specific configurations concerning users who access the server.
Given that there are no technical characteristics that differentiate them from each other, in order to achieve proper regulation of such devices, it is necessary to distinguish them on the basis of the aims pursued by those who use them.
Therefore, in implementation of the provisions contained in Directive 2009/136 / EC, pursuant to art. 1, paragraph 5, lett. a) of Legislative Decree 28 May 2012, n. 69, which amended the art. 122 of the Privacy Code, the legislator has established the obligation to obtain the prior and informed consent of users to the installation of cookies used for purposes other than purely technical.
Technical cookies are those used only for navigation and to facilitate access and use of the site by the user. Technical cookies are essential for example to access Google or Facebook without having to log in to all sessions.
- functionality cookies that allow the user to navigate according to a series of selected criteria (for example the language, the products selected for purchase) in order to improve the service provided.
Profiling cookies are designed to create profiles related to the user and are used in order to send advertising messages in line with the preferences expressed by the user in the context of surfing the net. Because of the particular invasiveness that such devices can have in the private sphere of users, European and Italian legislation requires the user to be adequately informed about their use and express their valid consent.
13.3 How cookies are approved.
For the installation of technical cookies no consent is required while profiling cookies can be installed on the user’s terminal only after the latter has given consent following simplified disclosure.
By connecting for the first time to the website, the user must immediately display a banner containing brief information, the request for consent and a link to the more extensive information on what are profiling cookies and on the use that is done on the site.
13.4 Cookies used on the site.
• cookies directly implanted in the user’s / contractor’s terminal (which will not be used for further purposes) such as session cookies used for online reservations on the site, authentication cookies, personalization cookies (for example for the choice of browsing language); these cookies remain active only for the duration of the session.
• cookies used to statistically analyze accesses / visits to the site (so-called “analitycs” cookies) that only pursue statistical purposes (and not even profiling or marketing) and collect information in aggregate form without the possibility of identifying the individual user. In these cases, since the current legislation requires that for analytics cookies the person concerned is provided with a clear and adequate indication of the simple ways to oppose their system (including any anonymous display of the cookies themselves). The duration of analytics session cookies is * minutes.
13.5 How to deactivate cookies.
If the user blocks or deletes a cookie, it may be impossible to restore preferences or custom settings previously specified and the ability of the site to personalize the user experience will be limited.
14. Rights of the interested party.
- the right to withdraw consent to the processing of data, at any time, without prejudice to the lawfulness of the processing based on consent given before the revocation and to oppose at any time the processing for marketing and / or marketing related profiling purposes (opposition right pursuant to Article 21 of the Regulation).
The exercice of the above rights is not subject to any formalities.
The address to use for the exercise of the above rights is: info@indipendenzaroma.com.
The user has the right to file a complaint with the Data Protection Authority without prejudice to any other administrative or judicial remedy.
e) the persons or categories of subjects to whom its personal data may be communicated or who may be informed of the same in their capacty of designed representative in the State, data supervisors or personsin charge of pprocessing.
c) a statement attesting that the operations set forth by points a) and b) have been disclosed, together with the content thereof, to anyone to to whom the data has been disclosed or disseminated, unless this is impossible or involves disproportionate mean with respect to the protected right.
b) processing of its personal data in order to send advertising materials or make direct sales or carry out market research or forward commercial messages.

References: Art. 13
 Art. 13
 Art. 32
 Art. 29
 Art. 28
 Art. 7
 art. 1
 art. 122