Cookies policy

Foreword

This information is provided pursuant to Article 13 of the EU Regulation 2016/679 (hereinafter, the "Regulation") as well as Dlg. n. 196/2003, as amended (hereinafter, the "Code"), and is intended to make users of the Site (hereinafter, "Users") aware of how their Personal Data is processed.

"Personal Data" hereafter means any information capable of identifying, directly or indirectly, the person of the User. "Processing" means any operation or set of operations, performed with or without the aid of automated processes and applied to Personal Data, such as collecting, recording, organizing, structuring, storing, adapting or modifying, extracting, consulting, using, communicating by transmission, disseminating or otherwise making available, comparing or interconnecting, limiting, erasing or destroying.

In general terms, the processing of the User's Personal Data will be governed by the principles of fairness, lawfulness, transparency, purpose limitation and storage, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability referred to in Article 5 of the Regulations. In general, Personal Data will be processed in accordance with the provisions of the Regulations, the Code and other applicable laws.

1. DATA CONTROLLER

The data controller cultural association "Fatoma Yaiw" with registered office via boltraffio 7, 20159 Milan (MI) , CF No. 97943670154 (hereinafter referred to as the "Data Controller").

2. PERSONAL DATA BEING PROCESSED

a. Navigation data

The use of Internet communication protocols inherently implies the transmission of certain data, which, however, are not collected to be associated with identified individuals. For example, the IP addresses of the computers used by Users, the time of Users' requests, parameters related to the User's operating system and computer environment fall into this category. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to allow the proper provision of services and for security reasons.

b. Data voluntarily provided by the user

Users may voluntarily provide personal information to the Owner, such as through:
(i) filling out forms on the Site (e.g., for newsletter subscription, payment for requested services, etc.);
(ii) sending messages to the e-mail addresses listed on the Site;
(iv) the various communication channels chosen by the Customer itself at its discretion.

In the case of paid services, where payments are made through PayPal, you will be redirected to PayPal's site, which will process the relevant data as an autonomous owner, thus excluding any responsibility on the part of the Owner; PayPal itself will be exclusively responsible for taking appropriate confidentiality and security measures.

c. Cookies

What are cookies?
Cookies are small text files that sites visited by the User send to the User's terminal, where they are stored and then retransmitted on the next visit by the same User.
Some of the Cookies (so-called "technical" Cookies) are strictly necessary to ensure the technical operation of the sites, to respond to user requests, to navigate and use all the features of its. These are mostly so-called "Session Cookies", which are automatically deleted when the browser is closed. These Cookies do not collect information about the user or track web browsing. The installation of these Cookies is a necessary condition for the proper use of a site; blocking them risks compromising browsing. The use of these Cookies does not require the user's prior consent.
Other Cookies (so-called "analytics" Cookies) are used to analyze access/visits to the site, solely for statistical purposes, by collecting information in an anonymous and aggregate form. The use of such Cookies does not require the user's prior consent.
Other Cookies, called "Targeting" or "Advertising" Cookies, control the user's navigation, tracking it in order to monitor and profile the user. The use of such Cookies allows to know what web pages are visited by the user, what is read on the network, purchased etc. The user can be profiled by tastes, habits, consumption choices etc., also for the purpose of sending personalized advertising. The use of such Cookies requires the user's prior consent.

What Cookies does the Owner use? How to disable them?
The Site uses the Cookies indicated at the bottom of the page.
At any time, the User will have the option of accepting or not accepting the use of Cookies. The User will be able to change browser parameters related to Cookies in the manner specific to each individual browser. The path to be followed to change the parameters of the following browsers is indicated here:

To disable Google Analytics cookies, you can download the opt-out browser extension from Google Analytics

3. Purpose of processing.

The User's Personal Data will be processed for the following purposes:

a) enable the Owner to provide the services requested by the User (e.g., newsletter subscription, purchasing tickets for special events, etc.);
(b) enable the User to support special projects and for sending updates on the status of related projects;
c) respond to specific requests addressed to the Owner through the communication channels published on the site;
(d) to fulfill any obligations under applicable laws, regulations or EU legislation, or to comply with requests from authorities;
e) to enable navigation of the Site and for statistical purposes, without being able to trace the 'identity of the User.

4. LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF PROCESSING

The legal basis for the processing of Personal Data for the purposes set out in section 3(a), 3(b) and 3(c) is Article 6(1)(b) of the Regulations ("[...] processing is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures taken at the data subject's request"), as the processing operations are necessary for the provision of the service.

The processing referred to in Section 3(d) constitutes lawful processing of personal data within the meaning of Article 6(1)(c) of the Regulations ("[...] processing is necessary for compliance with a legal obligation to which the controller is subject").

The processing of Section 3(e) is not performed on personal data and therefore can be freely carried out.

5. RECIPIENTS OF PERSONAL DATA

The User's Personal Data may be shared with:

  • Individuals who typically act as data controllers viz:

    • (i) individuals who provide assistance and consulting services to the Controller with respect to the provision of services;

    • (ii) parties with whom it is necessary to interact for the provision of services (e.g. hosting providers);

    • (iii) or parties delegated to carry out technical maintenance activities (including maintenance of network equipment and electronic communication networks);

  • individuals, entities or authorities to whom it is mandatory to disclose Personal Data by virtue of legal provisions or orders of the authorities or in case of reports of abuse to investigate complaints and identify the source of messages received from Users;

  • persons authorized by the Owner to process Personal Data necessary to carry out activities closely related to the provision of services, who have committed to confidentiality or have an appropriate legal obligation of confidentiality (e.g., employees of the Owner).

The full list of any data controllers can be requested by the User by writing to the following email address: fatomayaiw@gmail.com

6. SOCIAL MEDIA.

The User is given the opportunity to share content from the Site via certain social networks, in particular:

  1. Facebook (services rendered by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland);

  2. Instagram (services rendered by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland);

  3. LinkedIn (services rendered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; "LinkedIn");

  4. WhatsApp (services rendered by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).

In this case, the User will be interacting with the respective social media providers, for which the general terms and conditions and data processing conditions of the respective social media will apply. The Owner is not aware of the content and extent of data processing by such social media. Information on the use of Personal Data can be found in each provider's privacy policy:

Without prejudice to the above, the Controller also processes the data of those Users who use the Controller's own social media profiles to send messages or comments to the Controller. The legal basis for data processing is therefore the User's consent under Article 6(1)(a) GDPR or, in the case of contractually relevant requests, Article 6(1)(b) GDPR

7. TRANSFER OF PERSONAL DATA

Certain Personal Data of Users may be transferred outside the European Economic Area.
This is specifically in connection with the use of the Mailchimp service, an address management and email message and newsletter delivery service provided by The Rocket Science Group, LLC.
Personal Data disclosed to Mailchimp: first name, last name, email, nationality.
Place of processing: United States - on the basis of appropriate Standard Contractual Clauses
https://mailchimp.com/eu-us-data-transfer-statement/
The User receiving emails through Mailchimp will in any case have the opportunity to set their privacy preferences by accessing the link that will be contained in each email received.

8. STORAGE OF PERSONAL DATA

  • The Personal Data processed for the purposes of section 3.a), 3.b) and 3.c) will be kept for as long as is strictly necessary to achieve those purposes.

  • Personal Data processed for the purposes set forth in Section 3.d) will be retained as long as required by the specific applicable legal obligation or rule.

More information regarding the data retention period and the criteria used to determine this period can be obtained by writing to the following address: fatomayaiw@gmail.it .

It is in any case without prejudice to the possibility for the Controller to keep the User's Personal Data for the time provided for and allowed by Italian law to protect its interests: art. 2947(1)(3) c.c.

9. USERS' RIGHTS

The User has the right to request from the Controller, at any time, access to the Personal Data pursuant to art. 15 of the Regulations, rectification pursuant to art. 16 of the Regulations, deletion of the same pursuant to art. 17 of the Regulations, limitation of processing in the cases provided for by art. 18 of the Regulations, as well as to obtain in a structured, commonly used and machine-readable format the data concerning him, in the cases provided for by art. 20 of the Regulations.
Where the processing is based on the User's consent, the User also has the right to withdraw consent at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal.
Requests should be addressed in writing to the following address: fatomayaiw@gmail.it .
In any case, the User always has the right to lodge a complaint with the competent Supervisory Authority (Garante per la Protezione dei Dati Personali), pursuant to Article 77 of the Regulations, if he/she believes that the processing of his/her Personal Data is contrary to the legislation in force.

10. CHANGES

The Owner may amend or simply update this notice, in part or in full, including as a result of changes in the laws and regulations governing the subject matter.
Such changes will be made known to Users by posting on the Site.
We therefore invite the User to visit the Site regularly to become aware of the most recent and updated version of this policy.