Privacy Policy on the processing of personal data collected for the purpose of making a donation on this web page pursuant to article 13 of EU Regulation 2016/679 ("GDPR") and of Legislative Decree 196/2003 harmonised with the Legislative Decree 101/2018
1. Data controller
The data controller is Veneranda Fabbrica del Duomo di Milano, with its registered office in Via Carlo Maria Martini 1, 20122 Milan, tax code and VAT number 01989950157 (hereinafter, “VFD”), which guarantees compliance with the rules of personal data protection by providing the following information about the processing of data, freely communicated by you during navigation on this web page.
2. Data generated through accessing the web page
The computer systems and software procedures used to operate this page collect some user data automatically, anonymously however, whose transmission is implicit in the use of internet communication protocols. This data (such as, for example, domain names, operating system used, type of browser used for connection) are not accompanied by any added personal information and are used exlusively for:
i) obtaining anonymous statistical information on the use of the page;
ii) managing control requirements on how the page is used;
iii) ascertaining responsibility in case of hypothetical cyber crimes;
iv) improving user experience during navigation.
3. Cookies
This web page does not use cookie profiling designed to detect IP-associated behaviour or other information that can be linked to the user who is navigating the page. Only technical cookies for the web page manager and third-party analytics are used, but without the possibility of identification of the Interested Party (IP masking), aimed at improving navigation and usability.
4. Scope of communication and dissemination of data
The Data may come to the attention of employees and/or collaborators of the Data Controller charged with managing Data. These subjects, who are instructed in this sense by the Data Controller pursuant to Art. 29 GDPR, will process the Data exclusively for the purposes indicated in this informative notice and in respect of the provisions of the relevant legislation. Furthermore, the Data may come to the attention of third parties who process Data on behalf of the Data Controller in the role of external data managers. These may be, for example, goods and/or service providers, professionals and consultants, and in any case are third parties adequately selected and endowed with experience, ability and reliability and guarantors compliant with the current regulations of personal data processing. The complete and updated list of data processors appointed by the Data Controller can be requested by sending an email to the following address privacy@duomomilano.it.
5. Object and purpose of data processing
The data processing is aimed at: i) receiving and managing the Donations received by the interested party, ii) fulfilling the accounting and tax obbligations inherent in the Donations, iii) sending an automated thank you email after the Donation.
This data processing may also be carried out with the help of electronic and automated tools, in compliance with this information. The processing carried out by the Data Controller does not foresee any automated decision-making process and the Data will not be subject to diffusion. In particular, i) the Data collected in the donation form made with credit card (Name, Surname, Email Adress, Telephone Number) are necessary to complete donations made by the interested party to VFD, ii) in the case of continuous donations made through the SEPA Direct Debit mode, the tax code provided by the interested party will also be stored as it is mandatory by law. The data relating relating to credit cards are not stored by the system but are transmitted through a secure connection to the banking system provided. In the case of repeated donations, subsequent transactions will be made with an anonymous code provided by the bank in the first transaction. In the indicated case, the legal basis is the act of generosity freely made by the Interested Party.
For security reasons, in order to prevent and monitor fraudulent activity by malisious persons, the IP adress from which the transaction originates is stored ad hoc on an external system. This is strictly limited to the time necessary for the correct conclusion of the donation transaction, without this being associated to the interested party at this phase and without, therefore, any profiling purpose. In the indicated case, the legal basis is any request for information by a competent judicial authority.
Data processing shall be based on the principles of correctness, lawfulness, transparency, lawfully and in compliance with the rules of confidentiality and security.
6. Data retention
Data will be kept for the entire duration of the collaboration with Veneranda Fabbricca del Duomo di Milano to allow for the necessary transactions related to donations and in any case for a maximum duration of 10 (ten) years from the date of the last transaction for the purpose of accounting and legal obligations. VFD does not deliberately request, collect, use and disclose the Data of those under 18 years of age without the prior consent of parents or guardians. Should the Institution learn that it has collected the personal data of a minor, this data will be canceclled.
7. Data provision
Data processing is based on your consent.
8. Data transfer
Data will not be transferred to Countries outside of the European Union.
9. Rights of the interested party
Pursuant to Article 13 of the GDPR, you have the right to:
a) Ask the data controller for access to personal Data and the correction or cancellation of said Data, or to limit the processing or to oppose the processing of said Data;
b) in relation to data processing founded on the legal basis of consent, withdraw consent at any time, without prejudice for the lawfulness of the data processing based on the consent given prior to annulment;
c) lodge a complaint with the national supervisory authority;
d) receive the personal data provided in a structured, commonly-used and readable (on automatic devices) format for portability purposes;
To exercise the rights listed, as for every request regarding the processing of Data and the security measures adopted, the interested party can contact the following email address: privacy@duomomilano.it
Secur
