Privacy Policy

Privacy Policy – GDPR information for site users valid from 05/04/2024

1. Premise.

The EU Regulation 2016/679 on the “protection of natural persons with regard to the processing of personal data and on the free movement of such data” (hereinafter “EU Reg. 2016/679” or “GDPR”) contains a series of rules aimed at ensuring that the processing of personal data is carried out in compliance with the fundamental rights and freedoms of individuals.

This information provided pursuant to Articles 13 and 14 of Regulation (EU) No. 679 of 27 April 2016 (the so-called “GDPR”), is intended to illustrate how the MARCHESINI ACT FOUNDATION (hereinafter also the “Foundation“) processes the personal data collected in the context of the use by the user of the services offered through this website. This information is provided exclusively in relation to the FOUNDATION’s website.

All processing will be based on the principles of correctness, lawfulness and transparency, protecting the confidentiality and rights of all interested parties.

2. Browsing data.

The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful,  error, etc.) and other parameters related to the user’s operating system and IT environment.

These data, necessary for the use of web services, are also processed for the purpose of:

– obtain statistical information on the use of the services (most visited pages, number of visitors per hour or day, geographical areas of origin, etc.);

– check the correct functioning of the services offered.

The legal basis for the processing is Art. 6 par. 1 lett. f of R.E. 679/2016.

3. Data Controller.

The Marchesini ACT Foundation (hereinafter referred to as the “Foundation”), with registered office in Pianoro (BO), Via Nazionale n. 100, Tel +39 051 0479411, e-mail: info@fondazionemarchesiniact.org  is the Data Controller and is required to provide information regarding the processing of personal data as indicated below. 

4. Categories of personal data.

The data processed by the Data Controller are exclusively “personal data” (pursuant to Art. 4.1 of the GDPR). Within the limits of the purposes and methods described in this Policy, information may be processed that can be considered as “Personal Data”, which includes your personal details, your contact details (such as, for example, mobile phone number, e-mail address, etc.).

5. Purposes of processing of personal data.

The personal data collected will be processed for the purposes and on the basis of the following legal bases:

1) for the management of the contractual relationship or to execute pre-contractual measures (such as, for example, the request for information). In this case, you are free to provide your personal data, however failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request.

The processing is necessary in relation to the performance of a contract to which you are a party and is necessary to comply with a legal obligation to which the Data Controller is subject.

The retention period of personal data, in relation to the purposes referred to in this section, is until the end of the pre-contractual activity and no later than 12 months from the acquisition of the data.

The legal basis for the processing is Art. 6 par. 1 letter b) of R.E. 679/2016.

2) to comply with current administrative, accounting and tax obligations. For these purposes, the processing is carried out without the need to obtain your consent. If you refuse to provide the data necessary for the above-mentioned requirements, we will not be able to provide you with the services requested.

The data will be stored in order to comply with legal obligations, i.e. for ten years (ordinary legal prescription). The legal basis for the processing is Article 6(1)(c) of R.E. 679/2016.

3) the management of preliminary activities, preordained to the performance of the Foundation’s institutional activity and, in particular, to that of formal evaluation and merit of the initiatives received, the management of operational activities, aimed at ensuring the possible disbursement of contributions.

The data will be stored in order to comply with legal obligations, i.e. for ten years (ordinary legal prescription).

The legal basis for the processing is Art. 6 par. 1 letter f) of R.E. 679/2016.

4) Through the appropriate section of the site it is possible to send us requests for information. In this case, the personal data provided will be acquired and used by us for the sole purpose of following up on your requests.

The retention period of personal data, in relation to the purposes referred to in this section, is until the end of the pre-contractual activity (request for information) and no later than 12 months from the acquisition of the data.

The legal basis for the processing is Art. 6 par. 1 letter b) of R.E. 679/2016.

5) information activities in relation to institutional activities.

The processing is based on the legitimate interest of the controller, balanced against the interests or fundamental rights and freedoms of the data subject. The user, at the time of collection and on the occasion of sending any communication made for the purposes referred to in this paragraph, is informed of the possibility of objecting to the processing at any time, in a simple and easy manner.

The legal basis for the processing is Art. 6 par. 1 letter f) of R.E. 679/2016.

6. Manage your Instagram and Facebook profile.

When you follow our Instagram or Facebook channel and interact by leaving a comment or advice or sharing one of our posts, we use your data to communicate with you through our Instagram or Facebook profile in order to propose products and services and develop our “Brand” on this channel as well. We inform you that the information you voluntarily provide to us and the expressions of interest will be used exclusively for the analysis and communication purposes stated in this policy. Comments that are offensive or in violation of any applicable law and to protect its interests in court.

Method of acquisition: The data are voluntarily provided by you through our social profiles

Lawfulness basis: We process this data by virtue of our Legitimate Interest to promote our brand through social channels and to respond to any requests for information – Article 6.1 letter f) of the GDPR

How long we keep your data: We keep your personal data until you delete your Linkedin account or delete your commendation or posts in which you have tagged us.

7. Processing methods.

The processing of personal data is carried out using manual, computer and telematic tools with logics strictly related to the purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data in accordance with the regulations in force.

In the case of processing carried out with electronic processing methods and not with state-of-the-art hardware and software, the Foundation may use third-party service companies that will be made aware of their responsibilities with notice of appointment as Data Processor pursuant to art. 28 of the GDPR.

       There is no automated decision-making.

If the Foundation intends to further process personal data for a purpose other than that for which it was collected, information will be provided prior to such processing and any other relevant information.

8. Scope of communication and dissemination of data.

In order to pursue the purposes stated in this document and within the limits of what is strictly necessary, the Data Controller makes use of the activities of external parties with whom specific agreements on the processing of personal data are stipulated to regulate the relationships of Ownership/Responsibility pursuant to the Regulation (e.g. external parties who carry out technical consultancy activities,  commercial, legal, administrative, companies that provide IT services in the Cloud, etc.). Internally, the subjects involved in the processing of your personal data are bound by confidentiality and are formally authorized to process them.

       The data provided by Users are not intended for third parties and will not be communicated or disseminated, unless otherwise provided for by law or regulations, in particular the data may be communicated to Supervisory Bodies, Judicial Authorities as well as to all other subjects to whom communication is mandatory by law for the fulfilment of the aforementioned purposes.


9. Data Retention Period.

Users’ personal data will be stored in accordance with current legislation on the subject, for a period of time not exceeding that necessary for the purposes for which they were collected and processed. In compliance with the principles of proportionality, minimisation and necessity, personal data will be stored in a form that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which they are processed, i.e. taking into account: the need to continue to store the personal data collected in order to offer the services agreed with the Data Subject or to protect the legitimate interest of the Data Controller,  as described in the purposes indicated above, and the existence of specific regulatory or contractual obligations that make it necessary to process and store data for certain periods of time.

10. Transfer of personal data outside the EU.

For the purposes stated in this policy, the Marchesini Act Foundation does not transfer your data outside the European Economic Area (EEA). However, if your personal data is transferred to countries outside the European Economic Area (EEA), in the absence of adequacy decisions by the Commission of the European Union, we will ensure that appropriate safeguards are in place to protect your personal data in these countries. Therefore, in this case, the “Standard Contractual Clauses” (SCCs) established by the European Commission pursuant to art. 46 (1) GDPR.

11. Rights of the data subject and right to lodge a complaint with the supervisory authority.

The Data Subject may, at any time, by sending a communication to the Data Controller at the references listed above, exercise the right:

  • the withdrawal of consent;
  • access to personal data;
  • rectification of personal data;
  • the erasure (so-called right to be forgotten) of personal data;
  • restriction of the processing of personal data;
  • to object to the processing of personal data;
  • the portability of personal data;
  • the right not to be subject to automated decision-making, (the data subject has the right not to be subject to a decision based solely on automated processing).

With regard to the purposes for which consent is required, the Data Subject may revoke his/her consent at any time and the effects will take effect from the moment of revocation, without prejudice to the terms provided for by law. In general terms, the withdrawal of consent only takes effect for the future.

12. How to exercise your rights.

The interested party may at any time exercise the rights attributed to him/her by sending a registered letter with acknowledgement of receipt to Fondazione Marchesini, with registered office in Pianoro (BO), Via Nazionale n. 100, or an e-mail to the address: info@fondazionemarchesiniact.org.  

We inform you that if you believe that your rights have been violated by the Data Controller and/or a third party, you have the right to lodge a complaint with the Data Protection Authority and/or other competent supervisory authority pursuant to the GDPR, in the manner indicated by the same Authority at the following internet address https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524