Information on the processing of personal data of users in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR)
This notice is provided to users of the website https://www.jumamap.it/ in desktop and mobile versions (hereinafter referred to as the “Website”) and aims to describe the methods of managing the Website in relation to the processing of personal data, as well as to allow users of the Website to understand the purposes and methods of processing personal data by the Data Controller in the event of their provision. The information and data provided by users or otherwise acquired in the context of using the various services of https://www.jumamap.it/ will be processed in compliance with the provisions of the GDPR and confidentiality obligations. The processing activities will be based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality.
Data Controller – contact information
The Data Controller for the processing carried out through the Website is ARCI aps, with registered office at Via dei Monti di Pietralata n°16, 00157 Rome; Contact email: numeroverderifugiati@gmail.com.
Personal data subject to processing
Personal data processing refers to any operation or set of operations, performed with or without the aid of automated processes, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, communication by transmission, dissemination, or any other form of making available, alignment or combination, restriction, erasure or destruction. The personal data subject to processing will consist of an identifier such as name, email address, location data, an online identifier, and other data suitable for identifying the data subjects, depending on the type of services requested (hereinafter referred to as “Personal Data”).
In particular, the Personal Data processed through the Website are as follows:
Navigation data
The computer systems and software procedures used to operate the Website acquire, during their normal operation, certain Personal Data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified data subjects, but by their nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the Website, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the user’s operating system and computer environment. This data is used only to obtain anonymous statistical information about the use of the Website and to ensure its proper functioning, to identify anomalies and/or abuses, and is deleted immediately after processing. The data may be used to establish liability in the event of hypothetical computer crimes against the Website or third parties. Except for this possibility, the web contact data does not persist for more than 7 days and is deleted immediately after aggregation (unless there is a need for investigation of crimes by the judicial authorities).
Data voluntarily provided by the data subject
The optional, explicit, and voluntary sending of emails to the address indicated on the Website involves the subsequent acquisition of the personal data provided. In this case, the information will be kept until the matter is resolved and for a subsequent period, in compliance with legal requirements. Filling out the form involves sending information, including name, email address, and the information contained in the request. It is possible to request registration for the newsletter by providing consent.
Cookies
Please refer to the specific cookie policy at [insert link to cookie policy]. Information on the minimum age for registration on the Website. Registration on the Website is only allowed for individuals of legal age, as it is reserved for organizations that provide specific services for users of the website. Purposes of processing and legal basis
The Data Controller informs users of the Website that the collected data will be processed lawfully in accordance with Article 6 of the GDPR, solely for the following purposes:
- Allow navigation and consultation of the website;
- Respond to requests for assistance or information received via email;
- Respond to messages received by filling out the contact form; Conduct studies, research, and anonymous statistical analysis reports on visits;
- Legal protection: processing of Personal Data carried out to provide a response to received requests, exercise and protect the rights and interests of the Data Controller (e.g., for fraud prevention, the Data Controller may implement an automatic control system that involves the detection and analysis of user behavior on the website, including the IP address), fulfill obligations related to the relationship with data subjects, and for exclusive security and fraud prevention purposes;
- Display content identified by the data controller on external platforms accessible through widgets;
- Mapping of organizations within the website;
- Access to the reserved area (Dashboard), allowed only upon registration request by the organization. The registration process involves filling out an online form in which the user is asked to provide organization data for the activation of authentication credentials (login + password) to subsequently access the area and services reserved for registered organizations;
- Sending newsletters.
The legal basis for the processing is, for purposes a, b, c, f, g, h, the necessity to perform a contract in which the data subject is a party or to take pre-contractual measures at the data subject’s request; for purposes d and e, the legal basis is the legitimate interest of the data controller; for purpose i, the legal basis is the consent of the data subject.
Recipients of personal data
The Personal Data provided may be known and used by the employees of the Data Controller responsible for managing the Website and users’ requests, solely for the purpose of carrying out the activities for which the data was collected. The Personal Data of users may also be communicated to third parties, appointed as Data Processors, who will process the data on behalf of the Data Controller, such as providers of IT services, subjects performing control and auditing activities on behalf of the Data Controller; individuals, companies, or professional firms providing assistance, consultancy, or collaboration services to the Data Controller in accounting, administrative, and legal matters; companies and institutional entities operating in fraud prevention.
Retention period
The Data is processed and stored for the time required for the purposes for which it was collected. Therefore: Personal Data collected for purposes related to the performance of a contract or pre-contractual measures will be retained until the execution of such contract or measures is completed. Personal Data collected for purposes related to the legitimate interests of the Data Controller will be retained until such interests are satisfied. Personal Data collected for purposes based on the consent of the User may be retained until such consent is revoked. The Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or an order from an authority. At the end of the retention period, Personal Data will be deleted. Therefore, upon expiration of this period, the right of access, erasure, rectification, and the right to data portability cannot be exercised.
Transfer of personal data
The data will be processed and stored within the European Union (EU), except for data that is publicly available or processed using services or resources provided by suppliers (e.g., IT, social media) with offices or establishments abroad. Data processed with the assistance of platforms, virtual spaces, or applications developed, for example, by suppliers operating on an international scale or by suppliers operating outside the Italian Republic, may also be stored at their premises, including outside the territory of the European Union, under the following conditions: 1) In compliance with the Standard Contractual Clauses; 2) In compliance with Binding Corporate Rules, if applicable; 3) In compliance with adequacy decisions; 4) In compliance with applicable adequate safeguards.
Rights of the data subject
Data subjects have the right to request access to their personal data from the Data Controller and to rectify or erase such data or restrict its processing, as well as the right to data portability; They have the right to lodge a complaint with the Italian Data Protection Authority, following the procedures and instructions published on the website www.garanteprivacy.it; To exercise their rights, users can send a request to the following email address: numeroverderifugiati@gmail.com. Requests are free of charge and will be processed by the Data Controller as soon as possible, in any case within one month.
Changes to this privacy policy
The Data Controller reserves the right to make changes to this privacy policy at any time. Therefore, please consult this page, referring to the date of the last modification indicated at the bottom.
