This notice is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and describes how the personal data of users who visit this website or use the services offered through it are processed.

1. Data Controller

Associazione P.A. Fratellanza Popolare F. Sardelli
Via Brindisi snc, 72019 San Vito dei Normanni (BR), Italy
Tax code (Codice fiscale): 90007350748
Email: fratellanzapopolare84@gmail.com
PEC: fratellanzapopolare84@pec.it

2. Types of data collected

• Data voluntarily provided by the user through the website forms: first name, last name, email, phone number, subject and message text (contact form); personal details, contact details and information about medicines (medicine request form).
• Browsing data: the systems running the website acquire, during normal operation, some technical data (e.g. IP address, browser type, date and time of the request) recorded in system logs, used only to ensure the operation and security of the website.

Providing the data requested in the forms is necessary to handle the request: without it, the service cannot be provided. The website does not use third-party profiling or analytics tools.

3. Purposes and legal basis

• Replying to requests sent through the contact form – legal basis: performance of a service requested by the data subject (Art. 6.1.b GDPR).
• Handling medicine pickup or delivery requests – legal basis: performance of the requested service (Art. 6.1.b GDPR) and, for health data, the explicit consent of the data subject (Art. 9.2.a GDPR).
• Ensuring website security and complying with legal obligations or requests from authorities – legal basis: legitimate interest of the Controller and legal obligation (Art. 6.1.c and 6.1.f GDPR).

4. Processing methods and recipients

Processing is carried out with IT and electronic tools, adopting appropriate security measures to prevent unauthorised access, loss or misuse of data. Data may be processed by authorised volunteers and staff of the association and by technical service providers (hosting, IT services) appointed, where necessary, as Data Processors. Messages sent through the contact form are delivered to the association's staff via the Telegram messaging service. Data is not disclosed or transferred to third parties for commercial purposes.

5. Place of processing and data transfers

Data is processed at the Controller's premises and at the providers listed above. Some providers (e.g. Telegram) may process data outside the European Union; in that case the transfer takes place in compliance with the safeguards set out in Articles 44 et seq. of the GDPR.

6. Retention period

Data is kept for as long as strictly necessary to handle the user's request and, afterwards, for any period required by law or for the protection of the Controller's rights. Data is then deleted or anonymised.

7. Data subject rights

Users may at any time exercise the rights set out in Articles 15-22 GDPR: access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of any consent given (without affecting the lawfulness of processing based on consent before its withdrawal). Requests should be sent to the Controller's contact details in section 1 and will be answered within one month. Users also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Cookies

For information about the cookies used by this website, please see the Cookie Policy.

9. Changes

The Controller may change this notice at any time by publishing the updated version on this page.