Privacy policy

1 Introduction

The Angels for Impact association (afterwards “A4I“) considers the protection of the Personal Data of its associates and/or potential visitors to be essential, ensuring that the processing of personal data, carried out in any manner, whether automated or manual, takes place in full compliance with the protections and rights recognized by Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, relating to the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (afterwards the “Regulation“) and by the additional applicable rules on the protection of personal data.

The term personal data refers to the definition contained in Article 4 in point 1) of the Regulation, i.e. “any information concerning an identified or identifiable natural person; the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, is considered identifiable, physiological, genetic, psychological, economic, cultural or social (afterwards the “Personal Data“). In particular, A4I, in pursuing all its purposes, may become aware of or request Personal Data such as your name and surname, your e-mail address, your telephone and postal numbers, your Fiscal Code or your VAT identification number, your date of birth and other data that could make you identifiable.

The Regulation provides that, before proceeding with the processing of Personal Data – with this term meaning, according to the relative definition contained in article 4 at point 2) of the Regulation, “any operation or set of operations, carried out with or without the aid of automated processes applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction (afterwards the “Treatment“) – it is necessary that the person to whom such Personal Data belong to is informed about the purposes of the Processing, the ways in which the latter will be conducted as well as many other information required by law.

In this regard, the contents of this internet page of the site www.angels4impact.net are intended to provide you, in a simple and intuitive way, as much additional information as that contained in the specific privacy information provided pursuant to Article 13 of the Regulation upon the provision and collection of your Personal Data.

This internet page, therefore, has been prepared on the basis of the principle of transparency in order to contain all the elements required by articles 13 and 14 of the Regulation and is divided into individual sections (afterwards “Sections” and individually “Section“) each of which it deals with a specific topic in order to make your reading faster, easier and more intuitive (afterwards the contents of this internet page will be defined jointly with the term “Information” for simplicity).

2 Data Controller

A4I covers the role of data controller (the “Data Controller“) according to the relevant definition contained in article 4 at point 7) of the Regulation, “the natural or legal person, public authority, service or other body that , individually or together with others, determines the purposes and means of the processing of personal data “.

The Data Controller can be contacted through the following channels:

– by sending an e-mail to the e-mail address [ ]; and
– by calling the telephone number + [ ].

3 Purpose of the Treatment

The Data Controller may process your Personal Data for the following Processing purposes:

– registration to websites: the Data Controller, in order to follow up your request for registration to one or more of its websites, needs to collect some of your Personal Data, as requested in the specific collection form . The processing of your Personal Data will be conducted by the Data Controller to allow you, therefore, to access your profile, participate in the initiatives promoted through the website, [receive newsletters] and take advantage of all the other services offered from time to time. from the same.

Legal basis and lawfulness of the processing: contractual legal basis pursuant to article 6 letter b) of the Regulation – the processing of your Personal Data will be legally based on the contractual relationship that will be created between you and the Data Controller following your acceptance of the terms and conditions of participation of the specific website;

– participation in events: the Data Controller, in order to allow you to participate in the events organized by the same, needs to collect some of your Personal Data, as requested in the event registration form.
Legal basis and lawfulness of the processing: contractual legal basis pursuant to article 6 letter b) of the Regulations – the processing of your Personal Data will be conducted by the Data Controller to register you for the event and guarantee your participation and therefore will be legally based on the contractual relationship that it will come to be created between you and the latter;

– request for information: the Data Controller, in order to follow up your request for information received by the same through one of the methods present on its websites, needs to process some of your Personal Data as requested in the form of collection and / or as spontaneously conferred by you.
request for information: the Data Controller, in order to follow up your request for information received by the same through one of the methods present on its websites, needs to process some of your Personal Data as requested in the form of collection and / or as spontaneously conferred by you.

– request for collaboration or affiliation: the Data Controller, in order to follow up your request for collaboration or affiliation, needs to collect some of your Personal Data, as requested in the information request form.
Legal basis and lawfulness of the processing: pre-contractual legal basis pursuant to article 6 letter b) of the Regulation – the processing of your Personal Data will be conducted by the Data Controller to provide feedback to your request for information and will legally be based on the pre-contractual relationship that will be created between you and the latter;

– execution of contractual documentation: the Data Controller, in order to carry out the contractual relations between you and the latter as well as the related obligations, needs to collect and process some of your Personal Data as requested in the single contractual document ;
execution of contractual documentation: the Data Controller, in order to carry out the contractual relations between you and the latter as well as the related obligations, needs to collect and process some of your Personal Data as requested in the single contractual document ;

– fulfilment of legal obligations: the Data Controller, in order to fulfil legal obligations, needs to collect and process some of your Personal Data as, from time to time, required by specific laws;

Legal basis and lawfulness of the processing: legal obligations pursuant to article 6 letter c) of the Regulation – The processing of your Personal Data will be conducted by the Data Controller to fulfil legal obligations and will be legally based on the applicable laws;

– profiling activities: the performance by the Data Controller of profiling activities, i.e. evaluating your tastes, preferences and consumption habits also related to market surveys and statistical analyses. This category includes any form of automated processing of personal data to evaluate certain personal aspects such as those concerning, by way of example but not limited to, professional performance, economic situation, personal preferences, interests, reliability, behavior, the location or movements;

Legal basis and lawfulness of the processing: consent of the interested party pursuant to Article 6 letter a) of the Regulations – The processing of your Personal Data will be conducted by the Data Controller and will be legally based on your free, express and unequivocal consent;

The list of the purposes of the processing indicated above is to be understood as an example and not exhaustive since A4I, by reason of the principle of transparency towards the interested party provided for by the Regulation, adopted the setting for which your Personal Data will be processed for the specific purposes that will be illustrated to you in the information, extended and/or brief, which is given to you before the collection of Personal Data or within the times referred to in Article 14, paragraph 3, of the Regulation.
The contact methods aimed at profiling activities may be both automated (email) and traditional (telephone calls with operator, postal items). In any case, and as better specified below, you can object to the processing and / or withdraw your consent, even partially, for example by consenting only to traditional contact methods.

One of the principles applicable to the processing of your Personal Data concerns the limitation of the retention period, governed by Article 5, paragraph 1, point e) of the Regulation which states “Personal Data are stored in a form that allows the identification of the Data Subjects for a period of time not exceeding the achievement of the purposes for which they are processed; Personal Data may be stored for longer periods provided that they are processed exclusively for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1, without prejudice to the implementation of technical measures and organizational requirements required by this regulation to protect the rights and freedoms of the interested party”.

In light of this principle, your Personal Data will be processed by the Data Controller limited to what is necessary for the pursuit of the purpose referred to in Section D of this Information. In particular, your Personal Data will be kept for a period of time equal to the minimum necessary, as indicated by Recital 39 of the Regulation, for example, if the legal basis of the Processing is a contract stipulated between you and the Data Controller, up to ten years. from the termination of the contractual relationships between you and the Data Controller without prejudice to a further retention period that may be imposed or permitted by law as also provided for by Recital 65 of the Regulation.

4 Subjects to whom Personal Data may be disclosed

Our Personal Data may be disclosed to specific subjects considered recipients of such Personal Data, meaning natural or legal persons, public authority, service or another body that receives communication of personal data, whether or not of third parties.

In this perspective, in order to correctly carry out all the Processing activities necessary to pursue the purposes referred to in this Notice, the following Recipients may be in a position to process your Personal Data:

third parties who carry out part of the Processing activities and/or activities connected and instrumental to them on behalf of the Data Controller. These subjects have been appointed as data processors, i.e. natural or legal persons, the public authority, the service or other body that processes Personal Data on behalf of the Data Controller;
individuals, employees and/or collaborators of the Data Controller, who have been entrusted with specific and/or more Processing activities on your Personal Data. These individuals have been given specific instructions on the subject of security and correct use of Personal Data and are defined as the people authorized to process Personal Data under the direct authority of the Data Controller;
third parties who carry out Processing activities and/or activities connected and instrumental to them as independent data controllers, including by way of example and not limited to consulting companies, freelancers, credit institutions, insurance companies, third-party companies;
third parties who carry out Processing activities and/or activities connected and instrumental to them as independent data controllers, including by way of example and not limited to consulting companies, freelancers, credit institutions, insurance companies, third-party companies;

5 Opposition to the processing and revocation of any consent given

As required by the Regulation, if you have given your consent to the processing of your personal data for one or more purposes for which it was requested, you can, at any time, revoke it totally and/or partially without prejudice to the lawfulness of the processing based on the consent given before the revocation.

Furthermore, you can object, at any time, to the Processing of your Personal Data in the following cases:

a) if these are processed for direct marketing purposes, including profiling to the extent that it is connected to such direct marketing; or

b) for reasons related to your particular situation, if your Personal Data are processed on the basis of the legitimate interest of the Data Controller or third parties, unless there are compelling legitimate reasons to proceed with the Processing that prevail over your interests, rights and freedoms or that the Processing is necessary for the assessment, exercise or defense of a right in court.

The methods for withdrawing consent and exercising the right to object are very simple and intuitive: just contact the Data Controller using the contact channels listed in Section 2 of this Notice.

6 Redirect to external sites

From the website it is possible to connect through specific links to other third party websites.

In this regard, A4I cannot be held responsible for any management of personal data by third party websites and for the management of authentication credentials provided by third parties.

7 Rights of interested parties

As foreseen by article 15 of the Regulations, the interested party can access their personal data, request their correction and updating, if incomplete or incorrect, request their cancellation if the collection took place in violation of a law or regulation, as well as oppose to the processing for legitimate and specific reasons.

In particular, we list below all the rights that can be exercised, at any time, towards the Data Controller:

Right of access: the right, pursuant to Article 15, paragraph 1 of the Regulation, to obtain from the Data Controller confirmation that Personal Data is being Processed or not and, in this case, to obtain access to such Personal Data and the following information: a) the purposes of the Processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations; d) when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; g) if the Personal Data are not collected from the data subject, all available information on their origin; h) the existence of an automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4, of the Regulation and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of this treatment for the interested party. All this information can be found in the information that will always be available in the Privacy section of each of the websites.

Right of rectification: right to obtain, pursuant to Article 16 of the Regulation, the rectification of Personal Data that are inaccurate, taking into account the purposes of the processing, moreover, it is possible to obtain the integration of Personal Data that are incomplete, also by providing an additional declaration.

Right of cancellation: right to obtain, pursuant to Article 17, paragraph 1 of the Regulations, the cancellation of Personal Data without undue delay and the data controller will have the obligation to cancel your Personal Data, if even one of the following reasons: a) the Personal Data are no longer necessary with respect to the purposes for which they were collected or otherwise treated; b) you have revoked the consent on which the processing of your Personal Data is based and there is no other legal basis for their Processing; c) the interested party has opposed the processing pursuant to Article 21, paragraph 1 or 2 of the Regulations and there is no longer any legitimate overriding reason to proceed with the processing of Personal Data; d) the Personal Data have been unlawfully processed; e) it is necessary to delete the Personal Data to fulfill a legal obligation provided for by a community standard or internal law. In some cases, as provided for by Article 17, paragraph 3 of the Regulation, the Data Controller is entitled not to delete your Personal Data if their processing is necessary, for example, to exercise the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court.

Right to limit the Processing: right to obtain the limitation of the processing, pursuant to article 18 of the Regulation, in the event that one of the following hypotheses occurs, the interested party: a) has contested the accuracy of his Personal Data (the limitation will last for the period necessary for the data controller to verify the accuracy of such Personal Data); b) the processing is unlawful but you have opposed the cancellation of your Personal Data, requesting, instead, that its use be limited; c) although the Data Controller no longer needs it for processing purposes, the Personal Data are used to ascertain, exercise or defend a right in court; d) opposed the processing pursuant to Article 21, paragraph 1, of the Regulations and is awaiting verification of the possible prevalence of the data controller’s legitimate reasons with respect to his own. In case of limitation of processing, Personal Data will be processed, except for conservation, only with the consent or for the assessment, exercise or defense of a right in court or to protect the rights of another natural or legal person or for reasons of significant public interest.

Right of data portability: right to request at any time and receive, pursuant to Article 20, paragraph 1 of the Regulation, all Personal Data processed by the Data Controller in a structured, commonly used and legible format or to request its transmission to another data controller without hindrance. In this case, it will be the responsibility of the interested party to provide us with all the exact details of the new data controller to whom he intends to transfer his Personal Data by providing us with written authorization.

Right to object: in accordance with article 21, paragraph 2 of the Regulation and as also reiterated by Recital 70, it is possible to object, at any time, to the Processing of your Personal Data if these are processed for direct marketing purposes, including profiling insofar as it is related to such direct marketing.

Right to lodge a complaint with the supervisory authority: without prejudice to the right to appeal to any other administrative or judicial office, if it is believed that the processing of Personal Data conducted by the Data Controller is in violation of the Regulations and/or applicable legislation it is possible to lodge a complaint with the Competent Authority for the Protection of Personal Data.