INFORMATION PROCESSING OF PERSONAL DATA
pursuant to art. 13 Regulation (EU) 2016/679 (“GDPR”)
Dear Sir / Madam,
With reference to the personal data that LHS Foundation processes when filling out the form on the “Contacts” page on the website www.fondlhs.org, pursuant to art. 13 of the GDPR we provide you with the following information.
HOLDER OF THE TREATMENT
The data controller is: LHS FOUNDATION, via Martiri di Cefalonia nr. 67, 20097 San Donato Milanese (MI), tel. 0244254850 e-mail email@example.com – fondlhs.org. (“Foundation”)
PURPOSE, LEGAL BASIS OF THE PROCESSING AND STORAGE PERIOD OF PERSONAL DATA
The data you provide will be processed for the following purpose:
send requests for information on the Foundation and / or its services. The legal basis is the execution of a contract of which you are a part. The data will be kept for the time necessary to respond to your request and, in any case, for no more than 180 days.
sending informative communications via e-mail (“Newsletter”). The legal basis is your free, optional and revocable consent at any time. The data will be kept until the withdrawal of your consent. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before the revocation.
Once the aforementioned storage deadlines have elapsed, personal data will be destroyed or anonymized, compatibly with the technical procedures of cancellation and backup.
MANDATORY DATA SUPPLY
The provision of the data marked in the collection form with “requested” is mandatory to provide you with the necessary information; therefore failure to provide such data will not allow the Foundation to process your request.
On the contrary, the provision of data for the purpose of sending newsletters is optional.
METHOD OF TREATMENT
The data processing is based on the principles of correctness, lawfulness and transparency and data minimization; it can be carried out both manually and through automated methods designed to store, process and transmit them and it will take place by means of adequate technical and organizational measures, as far as reason and state of the art are concerned, to guarantee, among other things, security, confidentiality, integrity, availability and resilience of systems and services, avoiding the risk of loss, destruction, unauthorized access or disclosure or, in any case, illegal use, as well as through reasonable measures to promptly delete or correct inaccurate data with respect to the purposes for which are treated.
RECIPIENTS OF THE DATA
Your data may be communicated to subjects operating as independent holders (such as, for example, supervisory and control authorities and any public entity legitimated to request data) or processed, on behalf of the Foundation, by subjects designated as Data Processors treatment, to which adequate operating instructions are given. These subjects are essentially included in the following categories:
Saipem Group companies also not present within the EU (on the basis of the adequacy decisions of the European Commission or on the basis of standard model clauses) in order to carry out the management of contractual provisions and carry out any personnel management activities;
third parties (for information companies providing IT services, companies providing massive e-mail sending services, etc.) also not present within the EU (based on the adequacy decisions of the European Commission or on the basis of standards model clauses) who carry out outsourcing activities on behalf of the Data Controller, in their capacity as data processors.
SUBJECTS AUTHORIZED TO TREATMENT
The data may be processed exclusively by the employees of the Data Controller or Data Processors appointed to pursue the aforementioned purposes, who have been expressly authorized to process and who have received adequate operating instructions.
RIGHTS OF THE INTERESTED PARTY
The interested party has the right to ask the Data Controller for access to personal data concerning you, their correction, cancellation, portability, opposition to the treatment as well as the integration of incomplete personal data and the limitation of treatment in cases provided by art. 18 GDPR. Furthermore, where applicable, you can revoke the consent given at any time.
These rights can be exercised at any time, towards the Data Controller, by sending a specific request in writing to the e-mail address firstname.lastname@example.org
Furthermore, you have the right to lodge a complaint with the Guarantor for the protection of personal data and to resort to other means of protection provided for by the applicable legislation