NOTICE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 GDPR 2016/679

We inform you that the data you provide will be used exclusively to enable your participation in specific activities organized and, if applicable, to benefit from specific grants (e.g., scholarships, awards, contributions for events, idea competitions, training programs, ecological, social, and inclusion awareness initiatives, and similar). Such data will be processed in compliance with the applicable regulations, including Regulation (EU) 2016/679 “General Data Protection Regulation” (“GDPR”), as well as any other applicable provisions on personal data protection.

  1. Data Controller Contact Information

The Data Controller of personal data is Fondazione Roma Regeneration ETS – Ente Terzo Settore (hereinafter, the “Controller” or the “Foundation“), headquartered in Rome, Via Claudio Monteverdi, 16 – 00198. You may contact the Controller via email at privacy@romaregeneration.it or by regular mail at the address provided above.

  • Personal Data categories

The personal data you (hereinafter also the “Data Subject“) provide may include, by way of example but not limited to, your name, address, or other personal identification elements, necessary to participate in activities organized by the Foundation and potentially benefit from specific grants provided by the Foundation (e.g., scholarships, awards, contributions for events, idea competitions, training programs, ecological, social, and inclusion awareness initiatives, and similar).

In any case, if you provide personal data that is not relevant or pertinent to the contractual relationship, the Foundation will not process such data and will delete it immediately.

  • Purpose and legal basis of the processing

The personal data you provide will be processed, directly and/or through third parties, for:

  1. Management of the activities organized by the Foundation and provision of any benefits. Your personal data provided in relation to participation in activities organized by the Foundation will be processed to fulfill obligations arising from the activity itself and related legal obligations (e.g., provision of scholarships, granting of awards, participation in training programs, etc.).
  2. Protection of any rights in judicial proceedings. Your personal data may also be processed to defend a right in judicial proceedings.
  3. Publication of your data on the Foundation’s channels. Your data (i.e., name and surname), only with your consent or, in the case of a minor, by the person exercising parental responsibility, may be published on the Foundation’s communication channels (i.e., website: www.romaregeneration.it, profiles on platforms “X” and “Facebook”, “LinkedIn”) solely for the purpose of advertising and promoting the activities organized by the Foundation and the “benefits” you have received (e.g., scholarships, awards, training programs, ecological, social, and inclusion awareness initiatives, and similar).

All personal data you have provided for participation in the initiative promoted by the Foundation, as well as any other relevant personal information you may share, will be processed by the Data Controller as part of its data processing activities.

The aforementioned processing activities will be carried out, depending on the applicable requirements, based on the following legal grounds.

  • Art. 6, par. 1, lett. a) GDPR – Consent of the Data Subject for specific purposes (e.g., publication of their name on the Foundation’s communication channels)
  • Art. 6, par. 1, lett. b) GDPR – Performance of a contract to which the Data Subject is a party or pre-contractual measures taken at their request
  • Art. 6, par. 1, lett. c) GDPR – Compliance with legal obligations to which the Data Controller is subject;
  • Art. 6, par. 1, lett. f) GDPR – Processing necessary for the pursuit of a legitimate interest of the Data Controller (e.g., protection of a right in legal proceedings).
  • Processing Methods

The processing of personal data is carried out for the purpose outlined above, in accordance with Article 5 of the GDPR, both on paper and electronic formats, as well as through electronic or automated tools.

The processing is carried out directly by the Foundation, as the Data Controller, by its volunteers and collaborators who have been authorized to perform the personal data processing operations related to the contractual relationship and have been trained accordingly, as well as by external parties who, on behalf of the Foundation, provide various services as further specified in the following point 7.

Your personal data will not be transferred outside the European Union and/or the European Economic Area (“SEE“)

  • Nature of Data Provision and Consequences of Refusal

“For purposes a) and b) of paragraph 3, the provision of data is necessary to participate in the activities promoted by the Foundation and, where applicable, to benefit from the related advantages (e.g., scholarships, awards, training programs, environmental, social, and inclusion awareness initiatives, and similar), as well as to fulfill the contractual and legal obligations arising from them. Failure to provide the data may result in the inability to establish the contractual relationship or to fully or partially fulfill the related contractual and legal obligations.

For the purpose referred to in letter c) of paragraph 3, your consent is required. Failure to provide consent will have no consequences. Therefore, even if consent is not given, it will not affect your participation in the activities promoted by the Foundation or the potential to benefit from the related advantages (e.g., scholarships, awards, training programs, environmental, social, and inclusion awareness initiatives, and similar).

Your personal data will be retained for the entire duration of the contractual relationship and, thereafter:

  • Within the limits of applicable statute of limitations. In the event of acts that interrupt the statute of limitations, the retention period will be extended accordingly.
  • Within the limits set by regulatory laws on data retention (e.g., tax declarations), to properly fulfill any legal obligations.
  • For the period necessary to protect the rights of the Data Controller in the event of potential legal disputes

Once this period has expired, your data will be deleted or removed from the Data Controller’s active systems

  • Recipients of Personal Data

Within the purposes outlined in point 3, your personal data may be communicated to the following categories of recipients. A complete list of these individuals or categories of individuals is available at the Data Controller’s premises.

  • Data processors, pursuant to ex art. 28 of the GDPR, appointed on a case-by-case basis;
  • Companies and professionals engaged by the Data Controller to fulfill the obligations arising from the execution of the contract to which the Data Subject is a party, or by law, or to protect a right of the Data Controller (e.g., accountants, lawyers, tax consultants, auditors, etc.);
  • banks, finacial and insurance institutions;
  • Companies responsible for the technical management of networks and information systems;
  • public entities;
  • partners of the Foundation;
  • Judges and courts, in response to any request or as part of legal proceedings;
  • Public authorities authorized by law, in the event of audits, investigations, and/or inspections.

Your personal data will not be subject to disclosure.

  • Rights of the Data Subject

You have the right to exercise at any time the rights granted by Articles 15-21 of the GDPR, which are briefly summarized below

  • Right of access: You may request information regarding the processing we carry out on your data or confirmation that the Data Controller processes your personal data. In this case, you can request us to provide a copy of your data and verify which data we hold.
  • Right to rectification: You have the right to request the correction of your personal data if it is inaccurate, including the right to request the completion of incomplete personal data.
  • Right to cancellation: You have the right to request the deletion of your data (or part of it) that you have provided to us, including data that is no longer necessary to retain in relation to the purposes for which the data was collected or otherwise processed
  • Right to restrict processing: You may request us to restrict the processing of your personal data if the legal circumstances apply.
  • Right to object: You may object to the processing of your personal data, unless there are overriding legitimate grounds for continuing such processing.
  • Right to data portability: You may obtain from the Foundation, in a structured, commonly used, and machine-readable format, the personal data you have provided to us, in order to transmit it to another entity. This right is applicable when the Foundation processes such data through automated means, based on consent or for the purpose of providing services.
  • Right to withdraw consent: When the processing is based on consent, you have the right to withdraw it at any time, without affecting the lawfulness of the processing carried out before such withdrawal.
  • Right to lodge a complaint with the Supervisory Authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent Supervisory Authority if you believe that the processing of your data violates the applicable data protection laws.

Any requests made to exercise your rights can be submitted to the Data Controller by writing to the email address provided in paragraph 1 of this privacy notice.

COLLECTION OF CONSENT FOR THE PUBLICATION OF ONE’s NAME ON THE FOUDATION’s COMMUNICATION CHANNELS

Having read and understood the above information, pursuant to art. 7 of the GDPR, the data subject or (in the case of a minor) the individual exercising parental responsibility

 CONSENT  DOESN’T CONSENT

To the publication of the name (i.e., first name and last name) of the data subject, in the event of being a winner/recipient of the _____________________, on the official communication channels of the Foundation, according to the methods and purposes outlined in the privacy notice.

***

________________________

(Signature of the undersigned)