With this information we wish to inform you about how we process the personal data of users (hereinafter "Personal Data") who consult the website (hereinafter "Portal").
Below you will find information on how we collect, use and transfer the User's Personal Data (hereinafter "User"), or all that information that can be used to identify or contact the User.
1. DATA CONTROLLER
The Data Controller is Suore Terziarie di San Francesco, Via Nostra Signora di Lourdes 2, 00167 Roma, ITALIA, e-mail: email@example.com
2. PERSONAL DATA SUBJECT OF THE PROCESSING
The Personal Data being processed will consist of data suitable for making the User identified or identifiable. In particular, the Personal Data processed through the website are as follows:
a. Navigation data
During their normal operation, the IT systems and software procedures used to operate the Portal acquire some Personal Data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers used by the User who connect to the Portal, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the User's IT environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Portal and to check its correct functioning, to identify anomalies and / or abuses. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Portal or third parties.
b. Data for interaction with social media
In addition, the Portal allows the sharing of some content via social media (WhatsApp, Twitter, Facebook). Also in this case, the same indications as above are considered applicable and the User is required to consult the privacy policies of said social media for the processing of personal data by them.
c. Data voluntarily provided by the User
3. LEGITIMACY OF THE PROCESSING OF YOUR PERSONAL DATA
The information we collect mostly comes directly from the User: it was voluntarily provided to us or was necessary for the provision of our services.
4. PURPOSE AND METHOD OF TREATMENT
The processing of the User's Personal Data, with specific consent, where necessary, has the following purposes:
a. allow navigation and consultation of the Portal and its contents;
b. allow the provision of the requested services;
c. ensure the conservation, security and custody of data;
d. fulfill legal obligations;
e. guarantee security and prevent fraudulent conduct.
The data controller will not process the information provided by the User for purposes other than those explicitly indicated above.
Furthermore, the data controller will not make automated decisions based on the information provided.
All Personal Data collected are processed with automated and manual tools for the time strictly necessary to achieve only the purposes indicated above and in order to guarantee their integrity, confidentiality and security.
5. RECIPIENTS OF THE DATA
Personal Data may be communicated by the data controller to other public and private subjects only by virtue of the law, regulation and / or related order of the Judicial Authority.
The Personal Data collected are processed by specifically authorized personnel (employees of the data controller or third parties in charge of the maintenance and development services of the systems used for the computerized management of Personal Data as well as third parties who manage the management of network traffic) exclusively for purposes related to the exercise of their functions. They act on the basis of specific instructions provided regarding the purposes and methods of the processing itself in compliance with the confidentiality and security of the Personal Data themselves and in relation to the services to which they are assigned.
6. COOKIES AND OTHER TRACKING SYSTEMS
The data controller uses its own session technical cookies (non-persistent) strictly limited to what is necessary for safe and efficient navigation of the Portal. The data controller also uses third-party cookies for data analysis.
Please refer to the relevant pages of the YouTube and Google terms of service for further information.
7. STORAGE, SECURITY AND DATA CUSTODY
The data controller keeps the collected Personal Data, accurately, completely and updated, as long as these are necessary for the provision of the services to which the Personal Data are linked.
Browsing data only will be kept for a period of 12 months for ascertaining responsibility in case of hypothetical computer crimes against the Portal or third parties in the event of a request by the competent Police Authorities.
We can assure you that all the necessary steps have been taken to guarantee the security of the Personal Data to the User once they have been collected, through the use of computer systems with limited access and the use of protected storage solutions according to the standards of security provided for the security measures indicated by best practices.
The data controller adopts specific security measures to prevent data loss, illicit or incorrect use and unauthorized access.
8. INTERESTED PARTIES RIGHTS
Users to whom the Personal Data refer, in their capacity as interested parties, can at any time exercise:
- the right of access or to have a copy of the Personal Data, allowing you to know the type of User Personal Data processed by the data controller and the characteristics of the treatment that is performed;
- the right to request the correction of Personal Data in the event of omissions or errors;
- cancellation or limitation of treatment;
- the right to object to the processing.
The interested party also has the right to withdraw / revoke his consent at any time, without however affecting the lawfulness of the treatment based on the consent given before the revocation / withdrawal.
9. METHOD OF EXERCISE OF THE RIGHTS OF THE INTERESTED PARTY AND DELETION OF OPTIONAL SERVICES
For the exercise of the rights, referred to in point 8, the interested party may contact the data controller by sending an email to firstname.lastname@example.org with the subject "PERSONAL DATA".