PRIVACY NOTICE PURSUANT TO ARTICLE 13 GDPR ON THE PROCESSING OF PERSONAL DATA PERFORMED BY THE PONTIFICAL ATHENAEUM REGINA APOSTOLORUM
Pontifical Athenaeum Regina Apostolorum, with registered office in Rome, at Via degli Aldobrandeschi no. 190, in his capacity of Data Controller (hereinafter also “APRA” or “Data Controller”) pursuant to Article 13 of the Regulation (EU) no. 2016/679, bearing the so-called “General Data Protection Regulation” (“GDPR”), hereby informs You of the processing methods of your personal data, provided to the Athenaeum also through the digital services made available by the same, by reason of the donations made by you in favour of the Data Controller.
Data Controller
The Data Controller is, pursuant to Article 4 GDPR, Pontifical Athenaeum Regina Apostolorum, with registered office in Rome, at via degli Aldobrandeschi no. 190.
Data Protection Officer
In order to offer You an easier contact point for exercising the rights by GDPR, the Data Controller has appointed its own Data Protection Officer (“DPO”), the Attorney Elena Maggio, who can be contacted to the following email address [email protected] or by calling the telephone number +39 346.0145547, as well as writing, with a communication addressed to the head office of the Data Controller, to the attention of the DPO.
Personal Data processed
Data Controller requests You the following kind of personal data, and therefore processes and stores:
common data: i.e. personal data such as name, surname, tax domicile (required for invoicing);
contact data: i.e. personal data such as email address;
data relating to the donation made.
The provision of the data indicated above is mandatory because in the absence of the same the Data Controller cannot comply with legal obligations, in tax and fiscal matters, to which it is subject.
Purposes of the processing and legal basis of the processing
The processing of Your personal data (common data, contact data and data relating to the donation made) carried out by the Data Controller is aimed exclusively at fulfilling the legal obligations in tax and fiscal matters, to which the Data Controller is subject, as well as to update you on the Athenaeum’s initiatives.
The processing of your data is necessary pursuant to art. 6, par. 1, letter c) of the GDPR in order to comply with legal obligations in tax and fiscal matters.
Pursuant to Article 6, paragraph 1, lett. f) GDPR Data Controller will process Your common and contact data for sending communications aimed at promoting projects of Your possible interest.
In such cases your express consent is not necessary.
You may still object to the processing of Your personal data at any time, in the manner described in the “Rights of the Data Subject“, section of this privacy notice and revoke the consent given, without prejudice to the processing performed until then by the Data Controller.
Way of processing
Data Controller processes Your personal data in compliance with the guarantees of confidentiality and adequate security measures provided by the current legislation, with and without the aid of IT tools, with logic strictly related to the purposes of the processing.
Your data will be processed by: employees and collaborators of the Data Controller, in their capacity as authorized persons; third party companies or consultants who carry out outsourcing activities on behalf of the Data Controller, in their capacity of Data Processors pursuant to art. 28 of GDPR.
The updated list of Data Processors is kept at the registered office of the Holder of the Data Controller.
In the context of the processing activities carried out with the help of tools, Your personal data is stored on server situated inside the European Union or in countries where an adequacy decision has been taken pursuant to art. 45 GDPR.
Disclosure of personal data to third parties
The Athenaeum may communicate data relating to donations, without your consent, only in relation to the legal obligations in tax and fiscal matters to which it is subject.
These entities will process the data in their capacity as independent data controllers assuming all the obligations and responsibilities that the same APRA assumes with this statement.
Data Controller in no case will communicate Your common and contact data to third parties.
Transfer of personal data
Your personal data will be processed within the European Union and stored on server situated inside the European Union or in countries where an adequacy decision has been taken pursuant to art. 45 GDPR.
The same data may be processed in countries outside the European Union only for administrative purposes within companies, foundations, associations, even religious, to which the APRA belongs.
Retention of personal data
The retention period for your personal data is determined, according to legal obligations in tax matters, for ten years after your last donation.
All Your personal data processed for the afore mentioned purposes, will be retained as long as You don’t revoke your consent without prejudice to the processing performed until then by the Data Controller.
Data Subject’s rights
In connection with the personal data provided by You, pursuant to Articles 15-22 GDPR, You have the right to:
- access and ask for a copy;
- ask the correction;
- ask the deletion;
- obtain the limitation of processing;
- object to the processing;
- object, in any moment, to the processing performed for purposes of direct marketing, including the profiling as far as this is connected to such direct marketing, as well as in the case of Article 21, paragraph 1, GDPR;
- receive the personal data provided to the Data Controller, in a format of common use and readable by automatic device;
- lodge a complaint with the Italian Data Protection Authority pursuant to Article 77 GDPR. To this end You can use the template made available by the Data Protection Authority at the following link: http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.
For exercising Your rights or for revoking Your consent, You can contact the DPO, the Attorney Elena Maggio, sending an email to the following email address [email protected] or by calling the following telephone number +39 346.0145547, as well as writing with a communication addressed to the head office of the Data Controller, to the attention of the DPO.
Your request will be detected as soon as possible and, however, in the terms of GDPR.
Last reviewed of this Privacy Notice was on 14th of July, 2021.
