Data Privacy

Data Privacy Policy

Associazione Sangha Onlus

Last updated

24th May 2018

Definitions

ASO means Associazione Sangha Onlus, a registered onlus
GDPR means the General Data Protection Regulation.
Responsible Person means the Director and Board of the ASO.
  1. Your personal data – what is it? Personal data relates to a living individual who can be identified from that data. Identification can be by the information alone or in conjunction with any other information in the data controller’s possession or likely to come into such possession. The processing of personal data is governed by the General Data Protection Regulation (the “GDPR”).
  2. Who are we? The ASO is the data controller (contact details below). This means it decides how your personal data is processed and for what purposes.
  3. How do we process your personal data? The ASO complies with its obligations under the GDPR by keeping personal data up to date; by storing and destroying it securely; by not collecting or retaining excessive amounts of data; by protecting personal data from loss, misuse, unauthorised access and disclosure and by ensuring that appropriate technical measures are in place to protect personal data. We use your personal data for the following purposes:
  • To inform you of news, events, volunteering opportunities, and services run by the ASO and other affiliated FPMT organisations;
  • To fundraise and promote the interests of the onlus;
  • To manage our members, volunteers and residents;
  • To maintain our own accounts and records (including the processing of donations).
  1. What is the legal basis for processing your personal data?
    1. Explicit consent from you so that we can keep you informed about:
      1. Our newsletter, events, activities, and other services organised by the ASO
      2. Opportunities to participate in the development of the ASO and other affiliated FPMT bodies including by volunteering and through fundraising.
    2. When processing is necessary for carrying out legal obligations. This includes processing in relation to donations or social protection law, resident member information and volunteering.
    3. The legitimate interest condition is when we process your personal data for the purpose of complying with your request for:
      1. enrolment/registration for events, newsletter, and prayer requests
      2. administering your donation (including for the purpose of financial auditing)
    4. In all correspondence, we will give you the option to opt out.
  2. Sharing your personal data Your personal data will be treated as strictly confidential and will not be shared with anyone outside of the ASO. We will only share your data with third parties outside of the ASO by obtaining further consent from you. We use Mail Chimp to store our mailing list data, making it easy for you to unsubscribe, or amend your personal data. Please see Mail Chimp’s Privacy Policy here. We use PayPal to manage your online donations. Please see PayPal’s Privacy Policy here. We do not collect sensitive data about you unless there is a clear reason for doing so.
  3. Our website Our website is hosted by Aruba, where you can register your details to receive our newsletter and be kept informed of the activities of the ASO. Please see Aruba’s Privacy Policy here.Our website uses cookies which are small text files that are placed on your device to provide you with a better user experience when using our site. In general, cookies are used to retain user preferences, store information for things like shopping carts, and provide anonymous tracking data to third-party applications such as Google Analytics. As a rule, cookies will make your browsing experience better.However, you may prefer to disable cookies on this and other sites. The most effective way to do this is to disable cookies in your browser. Consult the Help section of your browser or take a look at the All about Cookies website which offers guidance for managing cookies.
  4. How long do we keep your personal data? The ASO shall ensure that personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed. Personal data held in respect to requests for prayers will be destroyed once the request has been fulfilled. 
  5. Your rights and your personal data Unless subject to an exemption under the GDPR, you have the following rights with respect to your personal data:
  • The right to request a copy of your personal data which the ASO holds about you;
  • The right to request that the ASO corrects any personal data if it is found to be inaccurate or out of date;
  • The right to request your personal data is erased where it is no longer necessary for the ASO to retain such data;
  • The right to withdraw your consent to the processing at any time;
  • The right to request that the ASO provides you with your personal data and where possible, to transmit that data directly to another data controller, (known as the right to data portability);
  • The right, where there is a dispute in relation to the accuracy or processing of your personal data, to request a restriction is placed on further processing;
  • The right to object to the processing of personal data, (where applicable).
  1. Further Processing If we wish to use your personal data for a new purpose, not covered by this Data Protection Notice, then we will provide you with a new notice explaining this new use prior to commencing the processing and setting out the relevant purposes and processing conditions.Where and whenever necessary, we will seek your prior consent to the new processing.
  2. Contact Details The processing of data is overseen by the Board of the ASO (Data Controller).  Regarding day-to-day data protection inquiries, please contact us at info@sangha.it

The Director and Board
Associazione Sangha Onlus
Via Poggiberna 15
56040 Pomaia (Pisa)