INFORMATION
pursuant to Article 13 of Regulation (EU) 2016/679
Dear user, Fondazione Voce di Padre Pio, Edizioni Padre Pio da Pietrelcina srl and Fmc Media srl, Joint Data Controllers, welcome you to the website www.vocedipadrepio.com (the “Site”) and invite you to pay attention to the following information (the “Information”), issued pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data, as well as on the free circulation of such data (“GPDR”).
This document contains the description of all the processing carried out by the Joint Data Controllers, as defined below, through the Site. The purpose of the processing pursued from time to time will depend on the service requested by you.
This information does not concern other sites, pages or online services accessible via hypertext links.
1 – Who is the Data Controller
Joint data controllers are the Fondazione Voce di Padre Pio with headquarters in p.zza Immacolata n. 6, 71121 Foggia; Edizioni Padre Pio da Pietrelcina with headquarters in p. le Santa Maria delle Grazie n. 4, 71013 San Giovanni Rotondo; FMC Media srl with headquarters in p. le Santa Maria delle Grazie n. 4, 71013 San Giovanni Rotondo.
Data Protection Officer
The Data Protection Officer (DPO) is Dr. Rosangela Francesca Fiorentino and can be reached at the following address: Fondazione Voce di Padre Pio – Data Protection Officer – Piazzale Santa Maria delle Grazie n. 4 – 71013 San Giovanni Rotondo (Fg) – email: dpo@padrepio.foundation
2 – What personal data we process
2.1 – Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of computers used by users who connect to the site, URI (Uniform Resource Identifier) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
This data is used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and is deleted after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site. For more information, see our Cookie Policy.
2.2 – Data provided voluntarily by the user
The optional and voluntary sending of e-mails to the addresses indicated on this Site and the completion of the “formats” (masks) entails the subsequent acquisition of the e-mail address, necessary to respond to requests, and any other personal data communicated spontaneously.
Unless you communicate further personal data for the management of your request, for the purposes indicated in this Policy, the Data Controller processes the following personal data provided by you:
personal data: name, surname, address, telephone number, e-mail and other contact details;
Specific summary information will be progressively reported or displayed on the pages of the site set up for particular services on request, if they imply further and different processing of data.
3 – Purpose of the processing and legal basis
This point 3 contains a description of the possible processing purposes pursued by the Data Controller depending on the service requested by you from time to time.
3.1 – Requests made through the Site
Your personal data may be processed to:
satisfy your requests made by writing to one of the email addresses available on the Site or by filling in the forms on the Site;
provide you with the requested services.
Failure to provide the requested data will make it impossible for the Data Controller to execute your request.
The legal basis for the processing is the need to execute your request, in compliance with Article 6, paragraph 1, letter b), GDPR. Therefore, it is not necessary to obtain your prior consent to the processing.
The data collected for this purpose will be processed for the time strictly necessary to satisfy your request and subsequently stored for 10 years after processing.
3.2 – Commercial communications and newsletter
If you wish to be updated on the latest news on the website www.vocedipadrepio.com, you can join our initiatives by allowing the Data Controller to send you the newsletter and further commercial communications also in paper format to your address.
The legal basis for sending commercial communications and the newsletter is your express consent, which the Data Controller requests from you on all pages of the website where it is possible to join this service, in compliance with Article 6, paragraph 1, letter a), GDPR.
Your personal data will be processed until you decide to withdraw your consent or to object to the processing.
Right to object to direct marketing activities
We inform you that, at any time, you have the right to object to direct marketing activities by contacting the Data Controller at one of the contacts indicated in point 1 of this Notice or by clicking on the appropriate link in each communication sent by the Joint Controllers.
3.3 – Regulatory compliance
For the purposes of managing your requests, including the execution of commercial orders, the Data Controller may also process the personal data provided by you for the fulfillment of related regulatory obligations provided for by national or EU laws and/or regulations.
In this case, the legal basis of the processing is constituted by the need to fulfill a legal obligation, in compliance with Article 6, paragraph 1, letter c), GDPR. Therefore, it is not necessary to obtain your prior consent to the processing.
Your personal data processed for the time necessary to fulfill regulatory obligations and, subsequently, exclusively stored for 10 years in compliance with the limitation period provided for by the Italian Civil Code.
4 – Processing methods and minors under 14
The processing of your personal data will take place, in compliance with the provisions of the GDPR, using paper, computer and telematic tools, with logic strictly related to the purposes indicated and, in any case, with methods suitable to guarantee their security and confidentiality in accordance with the provisions of Article 32 GDPR.
The processing does not imply the transfer of data to countries outside the European Union. If this were necessary, the transfer will take place in compliance with the legislation on the protection of personal data.
Furthermore, if you are between 14 and 18 years of age, the processing of your data will be intended exclusively for information society services (web services).
If you are under 14 years of age, you will not be able to access the services of the site that require the acquisition of data without the authorization of the holder of parental responsibility over you.
5 – Data retention periods
The data is retained for the time strictly necessary to manage the purposes for which the data is collected in compliance with current regulations and legal obligations.
6 – To which parties may your personal data be communicated and who may become aware of it
For the pursuit of the purposes described in the previous point 3, your personal data will be known by the collaborators of the Joint Controllers who will operate as subjects authorized to process and/or responsible for processing.
Your personal data will not be transferred to third parties outside the European Union and will not be disclosed.
7 – What rights do you have as a data subject
In relation to the processing described in this Notice, as a data subject you may, under the conditions set out in the GDPR, exercise the rights established by Articles 15 to 21 of the GDPR and, in particular, the following rights:
right of access – Article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to your personal data – including a copy of the same – and communication, among other things, of the following information:
purpose of the processing
categories of personal data processed
recipients to whom the personal data have been or will be communicated
period of data retention or the criteria used
rights of the data subject (rectification, erasure of personal data, restriction of processing and right to object to processing
right to lodge a complaint
right to receive information on the origin of my personal data if they were not collected from the data subject
the existence of an automated decision-making process, including profiling;
right to rectification – Article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
right to erasure (right to be forgotten) – Articles
colo 17 GDPR: right to obtain, without undue delay, the erasure of personal data concerning you, when:
the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
you have withdrawn your consent and there is no other legal basis for the processing;
you have successfully objected to the processing of personal data;
the data have been unlawfully processed,
the data must be erased for compliance with a legal obligation;
the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1, GDPR.
The right to erasure does not apply to the extent that processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or for the establishment, exercise or defense of legal claims.
right to restriction of processing – Article 18 GDPR: right to obtain restriction of processing, when:
the data subject contests the accuracy of the personal data;
the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be restricted
although the data controller no longer needs them for the purposes of the processing, the personal data are required by the data subject for the establishment, exercise or defence of legal claims;
the data subject has objected to processing, as indicated below, pending verification whether the legitimate grounds of the data controller override those of the data subject;
right to data portability – Article 20 GDPR: right to receive, in a structured, commonly used and machine-readable format, the personal data concerning you provided to the Controller and the right to transmit those data to another controller without hindrance, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly from the Data Controller to another controller if this is technically feasible;
right to object – Article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue processing that prevail over the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a right in court.
revoke the consent previously given;
file a complaint with the Personal Data Protection Authority, Piazza di Montecitorio n. 121, 00186, Rome (RM).
To exercise your rights, as well as to receive any information relating to the processing of personal data and/or this Policy, you can write to:
Fondazione Voce di Padre Pio, Piazzale Santa Maria delle Grazie n. 4 – 71013 San Giovanni Rotondo (FG)
or send an email to: info@vocedipadrepio.com
The Data Controller will take charge of your request and provide you, without undue delay and, in any case, no later than one month after receiving it, with information relating to the action taken regarding your request.
The exercise of your rights as an interested party is free of charge pursuant to Article 12 GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller may charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.
Finally, we inform you that the Data Controller may request further information necessary to confirm the identity of the interested party.