Information on the processing of personal data

In relation to volunteer activities

(application, selection, participation in the activity)

The Antonio Emanuele Augurusa Foundation, with registered office in Filogaso (VV) at Gallippi Antonio street, 11, in the person of the legal representative p.t, as Holder of the Treatment of Personal Data (hereinafter, “Owner”), informs you pursuant to Article 13 EU Regulation No. 2016/679 (hereinafter, ” GDPR“) and the national harmonization legislation in force, that the Your data will be processed in the following manner and for the following purposes:

Object of Treatment

The Holder processes personal, identifying (e.g., first name, last name, address, telephone, e-mail, etc.), and possibly special (e.g., personal data revealing political opinions, religious or philosophical beliefs, or trade union membership, etc.) health-related and judicial data disclosed by the candidate, only if it is functional for the execution of the inter partes volunteer relationship.

Purposes, legal basis for processing and data retention times

Personal data provided by filling out the application form are collected directly from the data subject and are processed for the following purposes:

  1. perform pre-contractual and contractual obligations, and, in this case, to evaluate, analyze and select candidates who have volunteered to become volunteers, with eventual acceptance and inclusion in the volunteer workforce. The legal basis for the processing is Article 6(1)(b) GDPR since the processing is aimed at fulfilling pre-contractual or contractual obligations to which the data subject is a party. In this case, in order to process the request to become a volunteer for the Foundation, with analysis of the request and eventual selection. The period of data retention is determined according to the time period necessary to give effect to the evaluation, analysis and selection of the submitted profile and, if the applicant is selected, for the period of volunteer activity for the Foundation.
  2. storage of the data of the aspiring volunteer in the Foundation’s archives, even where not selected. The legal basis for the processing is the “legitimate interest” (Art. 6(1)(f), GDPR, Recital C47, GDPR and Opinion 09 April 2014, No. 6 of Working Party 29, para. III.3.1.) of the Data Controller in having useful profiles available to place the person in its volunteer service and to contact him/her again. This is, likewise, balanced by the person’s interest in being contacted for proposals to work with the Holder towards which he or she has already expressed willingness to work for activities organized by the Holder or for activities related to the statutory objectives at the Holder’s premises, whether he or she has already been employed or discarded at the first selection stage. The period of data retention could be extended beyond an initial assessment involving a lack of immediate interest in the candidate’s profile, if it may be deemed useful for future volunteer activities similar to those preferred by the candidate. In any case, this period will not be longer than No. 3 years. Without prejudice to the data subject’s right to request termination of such processing activities at any time.
  3. To comply with applicable national laws or under decisions of the European Union. The legal basis for the processing is Article 6(1)(c) GDPR as the processing is aimed at fulfilling legal obligations to which the Data Controller is subject. The period of data retention is determined according to individual national and EU regulations that impose legal obligations to which the Controller is subject. For administrative, tax and accounting purposes, in any case, the data are kept for a maximum period of no. 10 (ten) years
  4. Perform direct marketing activities with promotional, informational and institutional contacts about our projects, popular and institutional events, fundraising initiatives, awareness actions, surveys and research. The legal basis is the “legitimate interest” (Art. 6(1)(f), GDPR, Recital C47, GDPR and Opinion April 09, 2014, No. 6 of Working Party 29, para. III.3.1.) of the Data Controller in maintaining an active relationship established by the candidate a who, by applying to become a volunteer candidate, has expressed liking and sharing of the Foundation’s statutory purpose. The Holder will, therefore, inform the person about its activities and, in particular, about which projects could be financed with financial contributions or about the awareness actions that it is considered useful to make known in order to demonstrate its constant commitment to the realization of its mission; it will also contact the person to ask for opinions about the services provided by involving him or her in surveys and research. Such contacts will allow the person to learn about these opportunities and decide, if they wish, to join. This is counterbalanced by the person’s expectations to receive information that relates to topics of interest to him or her, without prejudice to the data subject’s right to request termination of such processing activities at any time. In this case, the data retention period will be no longer than n. 3 years
  5. To carry out statistical processing of volunteer/activist applications. In this case, the data will be processed anonymously and do not require a legal basis or time limit for processing.

Mode of treatment

The processing of personal data is carried out by means of the operations indicated in Art. 4 No. 2) GDPR and specifically: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data.

Personal data are subject to both paper and electronic and/or automated processing.

Data access

The data may be made accessible for the above purposes to employees of the Foundation, in their capacity as authorized processors and/or system administrators and/or other types of authorized persons, in the performance of specific duties that legitimize access, as well as to any duly designated external managers.

Disclosure of data

Without the need for express consent (ex art. 6 lett. b) and c) GDPR), the Data Controller may communicate the data to judicial authorities, as well as to those subjects for whom communication is made obligatory by law or by contract. These subjects will process the data in their capacity as autonomous data controllers or as external data processors designated for this purpose.

The data will not be disseminated.

Data Transfer

Personal data is stored on Google Cloud (Google Drive). The Data Controller ensures that the system meets the adequacy standards set out in GDPR 2016/679. The Data Controller ensures that any transfer of data to non-EU countries will take place in accordance with applicable legal provisions, subject to standard contractual clauses provided by the European Commission.

External managers - Authorized

The updated list of data processors and data processors is kept at the registered office of the Data Controller.

Nature of data provision and consequences of refusal to respond

The processing of data for the purposes set forth in items 1 and 3 of chapter “Purposes, legal basis for processing and data retention times” is mandatory. If the data is not provided, the inter partes relationship cannot be followed up. In relation to points 2 and 4, the candidate may exercise the right to object to the processing at any time.

Item 5 is related to anonymous data and is not subject to the rules of GDPR 2016/679.

Rights of the data subject

At any time, the data subject may exercise, against the Controller, the rights provided for in Articles 15-22 of the Regulations.

Exemplifying and not exhaustively, you may ask:

  • Access to their personal data and related information;
  • rectification in case of inaccuracy of the same or supplementation of incomplete ones;
  • The deletion of data upon the occurrence of the conditions stipulated in Article 17(1) of the Regulations and subject to the exceptions stipulated in paragraph 3;
  • The limitation of their processing when the cases indicated in Article 18(1) of the Regulations occur.

The exercise of the foregoing rights may be exercised by written notice to be sent by e-mail or to the contact addresses as indicated below.

The interested party shall have the right to lodge a complaint with the Guarantor for the Protection of Personal Data by hand delivery at the offices or by sending a registered letter with return receipt addressed to: Garante per la protezione dei dati personali, Piazza Venezia, 11 – 00187 Roma or by certified e-mail message addressed to: protocollo@pec.gpdp.it

Ways of exercising rights

Interested parties may exercise their rights at any time by sending an e-mail to: privacy@fondazioneagurusa.org