Welcome to www.otbfoundation.org (the “Site”). This Privacy Policy refers to the processing of data (hereinafter collectively, “Personal Data”) provided to and/or collected during the visit to the Site by unregistered and registered users. For further information and clarification on our Privacy Policy you could send us a request writing an email to info@otbfoundation.org.
1. WHO COLLECT YOUR PERSONAL DATA
Subject who collect and process the Personal Data, as data controller (hereinafter “Data Controller” or “Controller”) is OTB Foundation, via dell’Industria 2, Breganze, Italy.
In order to fulfill technical issues connected to the Site, we (Data Controller) has appointed some data processors (hereinafter collectively “Processors”) that process data on our behalf. These subjects were appointed because of their technical skills related to purposes and modalities of the processing, guarantees offered in relation to security measures adopted and in compliance to applicable data protection laws. These subjects are under our control and you could request a full list writing an email to info@ otbfoundation.org.
2. WHY WE COLLECT YOUR PERSONAL DATA
A. Donations-
OTB Foundation will collect through the application form information about organizations which wish to file application for donation. Data with asterisk are mandatory and if missing we will not be able to process your application for donation. Other data are optional and will help us to better know your organization and to evaluate your project. OTB Foundation will keep strictly confidential that information. The legal basis for this processing is: execution of a contract involving the data subject.
The legal basis for this processing is: execution of a service/contract involving the data subject.
Data collected will be retained for ten years after the termination of relationship with the Controller. After this date the data will be destroyed or made anonymous compatibly with technical erasure and backup procedures.
In accordance with article 13, clause 2, letter e) of the GDPR, please note that providing your Personal Data is necessary for the service requested, therefore a refusal to provide this information means it will not be possible to establish a relationship with the Foundation.
Furthermore, in the case of donations in order to send receipts to donors and to comply with the tax obligations, the Foundation, will process some personal data optional or mandatory, if the refusal to provide the data could make it not possible to make the donation. The legal basis of this treatment is compliance with tax and accounting regulations and the duration of the treatment is that provided for by tax and accounting regulations.
The processing of data may take place through paper or computer and / or telematic supports and in any case it will take place in a manner suitable for guaranteeing its confidentiality, security and use in accordance with the purposes described.
The data may be processed, on behalf of the Foundation, by external parties designated as data processors, who are given adequate operating instructions (including OTB Spa) and independent external companies that are data controllers (auditing companies, accountants); the data will be processed by subjects external to the Foundation in the case of subjects, public or private, entitled to request the data and operating as independent owners such as, by way of example, supervisory and control authorities and bodies and in general.
The data may be processed by employees of the corporate functions responsible for pursuing the aforementioned purposes, who operate under the direct responsibility of the owner, who have been expressly authorized for processing and who have received adequate operating instructions.
By sending an e-mail to info@otbfoundation.org, interested parties can ask the owner for access to data concerning them, their cancellation, correction of inaccurate data, integration of incomplete data, limitation of processing. in the cases provided for by art. 18 GDPR, as well as opposition to processing, for reasons related to their particular situation, in the hypothesis of legitimate interest of the owner. Furthermore, in the event that the processing is based on consent or on the contract and is carried out with automated tools, the interested parties have the right to receive the data in a structured format, commonly used and readable by automatic device, as well as, if technically feasible , to transmit them to another holder without impediments. The interested parties have the right to lodge a complaint with the competent supervisory authority in the Member State in which they usually reside or work or in the State in which the alleged violation has occurred.
Identity and contact details of the Data Controller: The Data Controller is Only The Brave Foundation Onlus, with registered office in via dell’Industria 2, 36042 Breganze (VI), tel. 0424 47755, e-mail: info@otbfoundation.org.
B. Newsletter
If you request so, we collect your e-mail address for sending updating about the progress of the Projects. You can unsubscribe from the mailing list at any time by contacting the Foundation at the following addressinfo@otbfoundation.org.
The legal basis for this processing is: execution of a service/contract involving the data subject.
The legal basis for this processing is: execution of a contract involving the data subject. Data collected will be retained until newsletter recipients unsubscribe from the service. After this date the data will be destroyed or made anonymous compatibly with technical erasure and backup procedures.
In accordance with article 13, clause 2, letter e) of the GDPR, please note that providing an e-mail address is necessary for the service requested, therefore a refusal to provide this information means it will not be possible to send newsletters.
C. Site
The Site collect automatically Personal Data. Information systems and software procedures relied upon to operate the Site acquire, as part of their standard functioning, Personal Data as part of the transmission of such data is an inherent feature of Internet communication protocols. Such information are not collected in order to relate it to identified data subjects, however it might allow user identification per se after being processed and matched with data held by third parties.
The Personal Data includes: IP addresses and/or the domain names of the computers used by any user connecting with this website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), other parameters related to the user’s operating system and computer environment, data related to browsing behavior of the user on the Site, information about pages that have been visited or searched, in order to select and return specific contents to the user of the Site, for example, using cookies, in respect of which you will find complete information at the following URL https://www.otbfoundation.org/cookies-policy/
In the processing of Personal Data that may directly or indirectly identify your person, we try to respect a principle of strict necessity. For this reason, we configured the Site in such a way that the use of Personal Data is reduce to a minimum and to limit the processing of Personal Data that could identify the data subject only when needed or at the request of the authorities and the police (as, for example, for traffic data and the time you spend on the Site or your IP address) or for the assessment of responsibility in case of hypothetical crimes against the Site.
Some Personal Data are strictly necessary to operate the Site, others are used only to obtain anonymous statistical information about the Site and to check its correct functioning and are deleted immediately after processing. From time to time you will be informed about obligation or optional nature of the communication of Personal Data and possible consequences.
The legal basis for this processing is: execution of a service/contract involving the data subject.
Data collected will be retained until the data subject is connected to the Site.
In accordance with article 13, clause 2, letter e) of the GDPR, please note that providing your Personal Data is necessary for the service requested, therefore a refusal to provide this information means it will not be possible to use the Site.
3. HOW WE WILL USE YOUR PERSONAL DATA
Your Personal Data will be processed using automated tools for the time necessary to fulfill the purposes for which such data was collected and in compliance with the principle of necessity and proportionality, avoiding to process the Personal Data where operations could be realized through the use of anonymous data or through other means.
Specific security measures are applied to prevent the loss of the Personal Data, illegal or improper utilization and unauthorized access, but please do not forget that it is essential for the safety of your data that your device is equipped with tools such as constantly antivirus updated and that your internet provider provides a connection ensuring a secure data transmission through firewalls, spam filters, and similar measures.
4. WHO WILL USE YOUR PERSONAL DATA
Controller will process your personal data for the technical administration of the website. Your data will be processed by employees and collaborators of Controller appointed as persons in charge of the processing and data processors. .
Other information regarding the sphere of communication and dissemination of your personal data shall be provided to you in specific areas of the website
5. YOUR RIGHTS
According to Chapter III of Regulation (EU) 2016/679 and other local applicable data protection laws, you can at any time request information on personal data collected, used, disclosed or processed by the data controllers (right of access), as well as request for integration, rectification or erasure and object to their processing. Furthermore, starting from 25th of May 2018 (when the Regulation EU 2016/679 will apply), you will be able to exercise also the following rights: restriction of processing, data portability and lodge a complaint with a supervisory authority.
In order to exercise your rights above and/or submit an inquiries or complaints with regard to the processing of your personal data, you may send a request to the data controllers by writing to info@ otbfoundation.org or to the postal addresses and contacts mentioned in the epigraph of this privacy policy.
