Privacy Policy of keycosystem.eu
Privacy Information pursuant to EU Regulation 2016/679
The owner of the processing of personal data
Pursuant to art. 13 of EU Regulation 2016/679 (GDPR), for example non-profit organization , with registered office in Palermo, via Saladino, 3-5, 90134 Palermo, tax code 972 658 908 28, is the data controller of your personal data . The Owner informs you that the data you provide in relation to existing legal relationships (user / interested party) will be processed in compliance with the aforementioned legislation. This treatment will take place in a lawful manner and according to the principles set forth in art. 5 of EU Regulation 2016/679. Further communications may be disclosed at a later date, even verbally. The person responsible for the protection of personal data has not been appointed.
Data subject to processing
Article. 4 of EU Regulation 2016/679 defines «personal data» as any information concerning an identified or identifiable natural person («interested»);the identifiable natural person who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social.
„Processing of personal data“ means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring , conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of provision, comparison or interconnection, limitation, cancellation or the destruction. Specifically, these are data voluntarily provided by you for the execution of existing legal relationships with the Data Controller:
- Data relating to natural persons: name and surname of natural persons, addresses such as residential address, post code, city, province, telephone, email;
- Data relating to the names of freelancers / companies / commercial activities: data relating to economic and commercial activities; name, tax domicile or other identification elements (company name, address, registered office address, telephone number, fax number, e-mail address, tax code or VAT number).
Added to this are the navigation data, computer systems and software procedures used to operate this website, which could acquire, during their normal operation, your personal data, whose transmission is implicit in the use of protocols Internet communication. However, this information is not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment. These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site or requests by the authorities.
Purpose of the processing
Subject to your specific consent, the purposes of processing your personal data are as follows:
- management of existing and / or future legal relationships;
- obligations related to the obligations deriving from the aforementioned legal relationships;
- organizational management of any legal relationship in progress or being defined;
- acquittal of regulatory, accounting and / or tax obligations;
- protection of contractual rights;
- functional purposes for carrying out statistical analysis;
- social marketing activities, fundraising and institutional e-mail and paper communication regarding the services provided.
Treatment of special categories of personal data
Please note that it is forbidden to process personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as to treat genetic data, biometric data intended to uniquely identify an individual, data relating to health or sex life or sexual orientation of the person.
However, the aforementioned prohibition does not apply, among other hypotheses, if the processing is carried out, within the framework of its legitimate activities and with adequate guarantees, by a foundation, association or other non-profit organization that pursues political, philosophical, aims religious or trade union, on condition that the treatment concerns only the members, former members or persons who have regular contact with the foundation, the association or the organization because of its purposes and that the personal data are not communicated to the outside without the interested party’s consent.
In the previous cases, the request for specific consent to the processing of data will be made.
Duration of treatment
Personal data relating to purposes 1, 2, 3, 4, 5 and 6, will be kept for as long as necessary to allow the execution of the services offered by the Data Controller and for a maximum of 10 (ten) years . After this period of time the data will be destroyed.
The data processed for administrative and accounting purposes will however be kept , in compliance with legal obligations, for a period of time not exceeding 10 (ten) years .
The data provided for purposes referred to in point 7 will be processed for a maximum of 10 (ten) years only .
You can withdraw your consent to this treatment at any time.
Nature of data provision
The consent to the processing of data is obligatory in relation to the purposes 1 – 6, that is to fulfill legal obligations regarding a relationship established and for any other purpose connected to legal obligations, regulations and community regulations; the refusal to communicate data will prevent the Data Controller from fulfilling these obligations and consequently the impossibility of providing you with the services and / or services requested by you. Communications will be sent for the purposes referred to in point 7 , by electronic or paper mail. The interested party may at any time exercise the rights pursuant to art. 7, par. 3, and to the articles 15 and ss. of EU Regulation 2016/679 or the termination of such communications, also showing the willingness to receive communications exclusively through other contact methods, where provided.
The provision of your data and consent to the processing for the purposes referred to in point 7 are entirely optional.
Failure to provide personal data for the purposes indicated above will make it impossible to carry out activities related to: sending newsletters by paper / electronic mail relating to the promotion of institutional activities.
Data processing methods
The data will be processed and stored exclusively for the aforementioned purposes through the use of both paper and computer media, inserted into relevant databases and processed with suitable tools to guarantee the integrity, security and confidentiality of the data, in compliance with the provisions of EU Regulation 2016/679. All appropriate technical and organizational measures will be adopted to guarantee a level of data protection compliant with the provisions of EU Regulation 2016/679. Access will be allowed only to authorized persons in writing to the processing of personal data. The data may also be communicated and / or collected to / from third parties (such as in the case of data acquisition from processing centers or other companies). The same will be appropriately designated Responsible for the processing of personal data and will be involved in the obligations required by the legal relationship in place, as well as by specific legal obligations.
Social platforms
The website could offer access ports to services and so-called Social Network platforms. The terms of use and privacy policies applicable to each of these social media, published on the respective sites, govern the information provided. The Cesie , does not perform any form of control over the use of personal information communicated in a public forum, a comment area, a bulletin board, making the user solely responsible for any disclosure.
Cookies
Pursuant to the provision of the Data Protection Authority of 8 May 2014, n. 229, two macro-categories of cookies are identified: „Technicians“ and „Profiling“.
Technical Cookies
Technical cookies are used for the sole purpose of transmitting a communication over an electronic communications network, or as strictly necessary for the provider of an information society service explicitly requested by the subscriber or user to provide this service . They are not used for other purposes and are normally installed directly by the website owner or manager. They can be divided into (i) browsing or session cookies, which guarantee the normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); (ii)analytics cookies, similar to technical cookies when used directly by the site manager to collect information, in aggregate form, on the number of users and how they visit the site; (iii) functional cookies, which allow the user to browse based on a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service rendered to the same. For the installation of these cookies, the prior consent of the users is not required, while the obligation to provide the information pursuant to art. 13 of the EU Regulation 2016/679.
Profiling cookies
Profiling cookies are designed to create user profiles and are used in order to send advertising messages in line with the preferences shown by the user while browsing the net. Due to the particular invasiveness that such devices can have in the private sphere of users, the user must be adequately informed about their use and express their valid consent.
Each domain, or portion thereof, that is visited with the browser can set cookies. Since a typical Internet page, for example that of a newspaper on the net, contains objects that come from many different domains and each of them can set cookies, it is normal to host many hundreds of cookies in your browser. The purpose is to record, but also sometimes trace information on the user experience, passing from one page to another on the site, keeping the user authenticated, saving user preferences already entered (username, password, etc.) , track the tastes and preferences of the user allowing them to manage the presence or absence of targeted marketing initiatives. If limitations are placed on their use, this will surely affect the user’s status during the consultation. Blocking or removing them from the browser cache could cause an incomplete use of the services offered by the web application.
The website could offer access ports to services and so-called Social Network platforms. The terms of use and privacy policies applicable to each of these social media, published on the respective sites, govern the information provided. The Cesie , does not perform any form of control over the use of personal information communicated in a public forum, a comment area, a bulletin board, making the user solely responsible for any disclosure.
Communication to third parties and / or dissemination of data
For the purposes referred to in numbers from 1 to 7, the Organization informs you that your data could be communicated to external subjects, designated in writing, should this be necessary to fulfill an obligation set by law, to perform obligations arising by a contract of which you are / will be a part, as well as to fulfill, before the conclusion of the contract, your specific requests.
The recipients of the personal data communications of the interested party can also be identified in the following categories of recipients:
- Supervisory bodies, judicial authorities, bodies, professionals, companies, public administrations or other structures designated for the execution of processing connected with the fulfillment of the administrative, accounting and management obligations connected with the ordinary performance of the economic activity of the Owner (legal obligations );
- banks, financial institutions, freelancers, professional firms and consultants to whom the communication of the aforementioned data is necessary for the performance of the owner’s activity and, in particular, in relation to the fulfillment of the contractual obligations assumed towards the interested party ( contractual obligations);
The data collected will not be disseminated in any way.
Intention to transfer data abroad
The data will be transmitted exclusively in Italy and within the European Union.
Rights under EU Regulation 2016/679
The interested party may, at any time, exercise the rights pursuant to art. 7, par. 3, and to the articles 15 and ss. of EU Regulation 2016/679:
- right to access personal data;
- the right to obtain the rectification or cancellation of the same or the limitation of the processing;
- right to oppose the processing;
- right to data portability;
- right to revoke consent, where applicable (revocation of consent does not affect the lawfulness of the processing based on the consent given before the revocation);
- right to lodge a complaint with the supervisory authority (Privacy Guarantor).
The exercise of the aforementioned rights may take place by sending a communication to For example , with headquarters in via Saladino 3-5, 90134 – Palermo, Italy, by calling +39 3479776306 or by e-mail at info @ peresempionlus .org
The interested party declares to have been informed about the rights provided by the art. 7, par. 3, and by the articles 15 and ss. Further information regarding the processing of personal data may also be communicated verbally at the time of data collection.
The Owner