The association ISTITUTO PER I VALORI D’IMPRESA, headquartered in Milan – Viale Bianca Maria 24, 20129 – (hereinafter for simplicity “ISVI” or the “Association“), as the data controller, is committed to protecting the privacy of the users of the website www.isvi.org.
owned by ISVI (hereinafter the “Users” and the “Site“).
The purpose of this Privacy Policy of ISVI is to provide any elucidation to the Users of ISVI on the policy adopted by ISVI regarding the processing of personal data.
“Personal data“ means any information relating to an identified or identifiable natural person (the “Data Subject“); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity. ISVI takes the protection of privacy, that is, the confidentiality of its Users’ personal data, seriously, believing that it is a fundamental asset to its business.
The principles described below underlie ISVI’s processing of Users’ personal data.
Data will be collected in accordance with the European General Data Protection Regulation 679/2016(“GDPR“) and current legislation. ISVI shall take all necessary measures to safeguard Users’ data, in order to treat them securely, avoiding their misuse, complying with all applicable laws and regulations protecting privacy, cooperating with the authorities in charge of the protection of personal data, and acting in any case in accordance with the generally recognized principles relating to the protection of personal data. ISVI, as, the data controller, pursuant to Art.
13 GDPR, makes the following Privacy and Data Protection Policy; ISVI describes how the Association collects and processes personal data of Users through its Site or service controlled by the Association, where the privacy policy is referred to and more generally whenever express reference is made to this Privacy Policy. ISVI, in connection with, the use of the Site processes the following personal data of Users (hereinafter the “Data“):

• User’s first and last name;
• his email address.

1. Legal Basis and Purpose of Processing.

1.1 The legal basis of processing is as follows: Associated User: the legal basis for the processing of personal data is based on the association relationship to which it is part.
Simple User: the legal basis for the processing of personal data is the relationship that arises when one registers directly through the Site to request the following services: – to the “write us” section to request information on services carried out by ISVI; – to the “newsletter” section by filling out the appropriate form to receive ISVI’s newsletter.
1.2 The processing is necessary for the management and execution of the contractual relationship and to provide the services requested by Users.
1.3 The Data held by ISVI will be used to provide the services requested by the User.

2. Method of processing and data retention period.

2.1 Personal data will be processed in accordance with the principles of fairness, lawfulness, transparency and protection of your privacy and rights.
2.2 Personal data will be kept in a form that allows your identification throughout the duration of the processing and also thereafter, for the fulfillment of all legal obligations.
2.3.
The processing of data for the purposes set out takes place using both automated methods, on electronic or magnetic media, and non-automated, on paper, in compliance with the rules of confidentiality and security provided by law, consequent regulations and internal provisions.

 

3. Place of processing.

The data collected are currently processed and stored at the Association’s operational headquarters located in Milan (20129), Viale Bianca Maria, 24.
They are also processed, on behalf of the undersigned Association, by professionals and/or companies appointed to carry out technical, development, management, administrative-accounting and legal activities.

 

4. Compulsory or optional nature of data provision and consequences of refusal to provide data.

The provision of data is compulsory for all that is required by legal and contractual obligations and therefore any refusal to provide them in whole or in part may result in the inability of the undersigned Association to handle the Request submitted.

5. Data disclosure.

5.1 Without prejudice to communications performed in fulfillment of legal and contractual obligations, all data collected and processed may be communicated in Italy and transferred abroad exclusively for the purposes specified above to:
(i) for an Associate User: – public and private institutions that collaborate with the Association with which they share the founding purposes; – business organizations that collaborate with the Association.
(ii) for a Simple User: – organizations that cooperate with the Association.
5.2 In addition, the following categories of internal and external appointees and/or managers identified in writing and to whom specific written instructions have been given may become aware of the Data in the management of the Data: – employees of the Association; – professionals or service companies working on behalf of the Association.
5.3 In the event that the Data are communicated to companies, institutions or entities that collaborate with or use ISVI’s services with the sole purpose of providing the related services requested by Users and for the pursuit of a legitimate interest of the Association such as research and development activities, in such case the companies, institutions or entities to which the Data have been communicated are autonomous controllers of their processing and ISVI will not be responsible for the processing of the Data carried out by the companies, institutions or entities themselves.

6. About Cookies.

6.1 Cookies are small text files that websites visited by Users send to their devices, where they are stored and then transmitted back to the same sites on each subsequent visit via the same devices.
In some cases, during navigation, third-party cookies may be transmitted through their present objects (e.g. banners, images, maps traceable to other domains and/or links to them, etc.).
6.2 Cookies are intended to speed up the analysis of Internet traffic and make it easier for Users to access services offered by the Site.
With the use of cookies, no personal data are transmitted or acquired and no User tracking systems are used.
For more extensive information on the nature and methods of use of cookies on the Site may be consulted Cookie policy.

7. Rights of the data subject.

Your rights under the GDPR include those of:

• to request from the data controller access to your personal data and information relating thereto; rectification of inaccurate data or supplementation of incomplete data; deletion of personal data concerning you (upon the occurrence of one of the conditions indicated in Article 17(1) of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); limitation of the processing of your personal data (upon the occurrence of one of the cases indicated in Article 18(1) of the GDPR);
• to request and obtain from the data controller – in cases where the legal basis of the processing is a contract or consent, and the processing is carried out by automated means – your personal data in a structured, machine-readable format, including for the purpose of communicating such data to another data controller (so-called right to personal data portability);
• To object at any time to the processing of your personal data in the event of special situations concerning you;
• revoke consent at any time, limited to cases where the processing is based on your consent for one or more specific purposes and involves common personal data (e.g., date and place of birth or place of residence), or special categories of data (e.g., data revealing your racial origin, political opinions, religious beliefs, health status, or sex life).
  Processing based on consent and carried out prior to the revocation of consent retains, however, its lawfulness;
• Propose a complaint to a supervisory authority (Data Protection Authority – www.garanteprivacy.it).

8. Data controller

8.1 The data controller, whom to contact in order to assert the rights referred to in Articles 13, 15, 16, 17,18, 19, 20, 21, 22, transcribed above, is ISTITUTO PER I VALORI D’ IMPRESA (ISVI), with headquarters in Milan (20129), Viale Bianca Maria, 24, in the person of its legal representative, pro tempore.
8.2 The aforementioned rights may be exercised by registered mail with return receipt or e-mail to the following addresses: ISTITUTO PER I VALORI D’ IMPRESA, (20129) Viale Bianca Maria, 24, e-mail isvi@isvi.org.