INFORMATION FOR THE PROCESSING OF PERSONAL DATA – ECOality PROJECT
Oxfam Italia, with registered office in Via C. Concini n. 19 – 52100 Arezzo (AR), VAT number 92006700519 mail [email protected] (hereinafter, “Holder”), as data controller, intends to inform you that, pursuant to art. 13/14 EU Regulation n. 2016/679 (hereinafter, “GDPR”) your data will be processed in the following manner and for the following purposes:
1. Object of the data processing
The Data Controller processes personal data (such as name, surname, company name, address, telephone number, e-mail address, bank and payment details, hereinafter, “personal data” or even “data”) that you have provided for the pursuit of the purposes and aims of the “ECOality: youth and local authorities together for climate and gender justice” project.
2. Purpose of Processing
Your personal data is processed only with your specific consent for the following purposes:
-
Management of the ECOality project activities.
-
Development of studies, research and statistics derived from the ECOality project activities.
-
Use of images and/or videos collected during trainings, activities, events or conferences and/or quotations from any interviews, in any form and for free in any media, website, publication or article useful to promote the activities of the ECOality project and the Oxfam Italy association. The images may be used worldwide and in all fields (publications, screenings, internet). Use is also prohibited in all cases that prejudice the honor, reputation, and dignity of the individual.
3. Profiling
We inform you that information will be gathered and saved (through the cookies) and resources will be employed on user’s device when he/she interacts with Oxfam Italia’s website. These technologies are defined as “tracking tools”. Oxfam Italia’s website employs tracking tools directly managed by the Data controller (generally defined as “first part” tracking tools) and tracking tools that enable services provided by third parties (generally defined as “third part” tracking tools). You may view the typology of the tracking tools used in the Cookie Policy.
4. Methods of Processing and Data Retention Period
The processing of your personal data is carried out about the operations indicated in Article 4, Paragraph 2 of the GDPR, specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data. Your personal data is subject to both paper-based and electronic and/or automated processing.
The processing may be carried out in paper and electronic form and will be conducted in a manner that ensures the security and confidentiality of the data following current legislation, guided by the principles of fairness and lawfulness of processing.
Oxfam Italy will process personal data only for the time necessary to fulfill the purposes referred to in Article 2 and, in any case, for no longer than 10 years from the conclusion of the ECOality project. Your data may also be deleted upon your request (Article 9).
-
Categories of Entities to Whom Data May Be Disclosed
Your data may be made accessible for the purposes described in Article 2:
-
To employees and collaborators of Oxfam Italy in Italy and abroad who are authorized to process the data.
-
To the Funding Entity and other entities involved in the management and accounting activities of the ECOality project.
-
To partners of the ECOality project operating in Italy and abroad.
-
To employees and collaborators of Oxfam Italy Intercultura in their capacity as External Data Controllers.
-
To third-party companies or other entities (such as banks, professional firms, consultants, insurance companies providing insurance services, educational institutions, telemarketing companies, entities tasked with creating or updating business management systems, etc.) that perform outsourced activities on behalf of Oxfam Italy, acting as External Data Controllers.
Without the need for express consent (Article 6(b) and (c) GDPR), Oxfam Italy may disclose your data to supervisory bodies, judicial authorities, insurance companies providing insurance services, and other entities to whom communication is mandatory by law for the fulfillment of the aforementioned purposes. These entities will process the data in their capacity as independent data controllers.
6. Data Transfer
Personal data is stored on servers located within the European Union. However, it is understood that the Data Controller may transfer servers to non-EU countries if necessary. In such a case, the Data Controller ensures that the transfer of data to non-EU countries will be following applicable legal provisions, including the signing of the standard contractual clauses provided by the European Commission.
7. Nature of Data Provision and Consequences of Refusal
The provision of data for the purposes outlined in Article 2 is optional. You may choose not to provide any data or subsequently deny the possibility of processing data already provided: in this case, you will not be able to participate in the activities of the ECOality project or receive information and documentation related to the project’s activities.
8. Rights of the Data Subject
As a data subject, you have the rights outlined in Articles 15-22 of the GDPR, specifically the rights to:
-
Obtain confirmation of whether or not personal data concerning you exists, even if not yet recorded, and to receive communication of such data in an intelligible form.
-
Obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing with the aid of electronic means; d) the identification details of the data controller, data processors, and the representative designated under Article 3, Paragraph 1, GDPR; e) the entities or categories of entities to whom personal data may be disclosed or who may become aware of them in their capacity as designated representatives within the State, data processors, or appointees.
-
Obtain: a) the updating, rectification, or, when interested, integration of data; b) the deletion, anonymization, or blocking of data processed unlawfully, including data that is not required to be retained for the purposes for which it was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been notified, including their content, to those to whom the data was communicated or disseminated, except where such fulfillment is impossible or involves a disproportionate effort compared to the protected right.
-
Object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for sending advertising material or direct sales or for carrying out market research or commercial communication, using automated call systems without operator intervention via email and/or traditional marketing methods via phone and/or mail. Please note that the data subject’s right to object, described in point b), extends to traditional marketing methods while preserving the possibility for the data subject to exercise the right to object, even only partially. Therefore, the data subject can decide to receive only communications via traditional methods or only automated communications or neither type of communication.
-
Where applicable, you also have the rights under Articles 16-21 GDPR (Right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with a Supervisory Authority.
9. Methods of Exercising Rights
You may exercise your rights at any time by sending a registered letter with acknowledgment of receipt to the Data Controller – Via Pierluigi da Palestrina, 26 R 50144 Florence or by sending an email to [email protected].
10. Data Controller and Data Processors
The updated list of data controllers and processors is kept at the registered office of the Data Controller. For information, you can send an email to [email protected]