Welcome to our website fondazionelibellula.com (the Site).
For Fondazione Libellula Impresa Sociale (hereinafter, Fondazione Libellula), your privacy and the security of your personal data are extremely important. For this reason, we collect and manage your personal data with the utmost care and adopt appropriate measures to keep it safe.
Below you will find information regarding the processing by Fondazione Libellula of your personal data. To obtain detailed information on how Fondazione Libellula manages your personal data, we invite you to read this Privacy Policy in full.
With regard to the use of cookies, we invite you to read the “Cookie Policy”, which contains detailed information about the use of cookies in the conditions of our services and during the use of the Site. You can find it at the bottom of every page of the Site.
Fondazione Libellula was created as a social project of Zeta Service Srl, Tax Code 03901650964, strongly desired by the board of Zeta Service Srl in order to promote concrete initiatives to combat gender-based violence and to foster cultural change in companies and in society. Thanks to the impact and growth recorded over the years, in 2020 the project became an autonomous Foundation, while maintaining a close collaborative relationship with Zeta Service Srl. This relationship also results in the sharing of certain technological tools and platforms necessary to ensure the continuity and operational efficiency of the Foundation’s activities.
In light of the above, considering the relationships between Fondazione Libellula and Zeta Service Srl, the Database of all data collected through the Site and all data collected through the website of Zeta Service Srl is unique and shared. Therefore, for technical reasons both companies may view the aforementioned personal data; the same may also be done by Lumina STP Srl, VAT and Tax Code 08669630967, in its capacity as Joint Controller of the data collected on the website of Zeta Service Srl, whose Privacy Policy is referenced (https://www.zetaservice.com/privacy-policy/). It is understood that Zeta Service Srl and Lumina STP Srl will not carry out any processing activities on your data except for mere viewing. If you do not wish to consent to your data being included in the above-mentioned Database, we invite you not to provide your personal data while browsing the Site.
The Data Controller of the personal data is Fondazione Libellula Impresa Sociale, with registered office in Viale Ortles 54/A, Milan (MI), registered with the Milan Companies Register, special section social enterprises no. 182232/37663, VAT No. 11197420968, e-mail address: fondazionelibellula@legalmail.it
The processing of your personal data is carried out by Fondazione Libellula in full compliance with the provisions of Regulation (EU) 2016/679 – General Data Protection Regulation (GDPR), with the rules concerning the processing of personal data and with the measures of the Supervisory Authority (http://www.garanteprivacy.it).
The categories of personal data that Fondazione Libellula collects and processes when you browse the Site are the following:
we collect the personal data you provide when you complete and create your account through the Site registration form;
we collect the personal data you provide when you request a service or purchase a product offered on fondazionelibellula.com;
we collect the personal data you provide when you register for events on the Site;
we collect the data you provide when you make a donation to Fondazione Libellula or decide to donate your 5×1000;
we collect the personal data you provide when you subscribe to our newsletter service;
we collect the personal data you provide when you fill in the contact form.
If you access fondazionelibellula.com and use the services offered by Fondazione Libellula, you declare that you are of legal age.
Fondazione Libellula collects and processes your personal data for the following purposes:
registration of your account on the Fondazione Libellula Site in order to download PDFs of interest available on the Site, to access services offered by Fondazione Libellula, to purchase products available on the Site, to make donations to Fondazione Libellula and to participate in events;
provision of services/purchase of products offered on fondazionelibellula.com (such as, for example, events organized by the controller). For this purpose Fondazione Libellula needs to collect, in relation to each service and its characteristics, the personal data necessary to provide the service requested by you;
donations, including through the purchase of solidarity gifts and 5×1000 donations to Fondazione Libellula;
conducting statistical research, opinion surveys and market research and profiling activities in order to understand the needs and characteristics of donors and users for the achievement of the social purposes of Fondazione Libellula. The resulting reports may also be disseminated through the Site, during events, conferences or published in printed and/or online informational materials and/or through digital media;
communication of informational and promotional materials regarding the activities of Fondazione Libellula, its projects, events and fundraising initiatives, also aimed at requesting donations and proposing the purchase of promotional materials;
compliance with specific legal obligations or obligations deriving from provisions issued by authorities and/or other entities legally entitled to do so;
to exercise or defend a right of the controller or a third party in court;
newsletter service;
completion of the “contact form” to request information or to be contacted.
In relation to all the activities indicated above, we will process your personal data mainly through IT and electronic tools, in full compliance with the applicable regulations.
We process your personal data only where one of the conditions – legal bases – provided for by applicable legislation exists (Art. 6 GDPR – lawfulness of processing):
in relation to the processing of your data for the purposes referred to in letters a), b), c), i) above, the legal basis is the performance of a contract to which the data subject is a party or the implementation of pre-contractual measures taken at the request of the same;
in relation to the processing of your data for the purposes referred to in letters d), e) above, the legal basis is the “legitimate interest” (Art. 6, paragraph 1, letter f), GDPR, recital C47 GDPR and Opinion No. 6 of April 9, 2014 of Working Party 29, para. III.3.1.) of the Controller in maintaining the relationship established with Fondazione Libellula by you who, through your action aimed at interacting with the controller, have expressed appreciation and sharing of the Foundation’s social purposes. The Controller will therefore inform you about its activities and, in particular, about projects that could be financed through financial contributions or products that you could purchase to support the Foundation, or awareness initiatives considered useful to demonstrate the constant commitment of Fondazione Libellula in fulfilling its mission. Furthermore, you may be contacted to request opinions on services provided, involving you in surveys and research. These contacts will allow you to learn about these opportunities and decide, if you wish, to participate. This is balanced by your expectations of receiving information relating to topics of interest to you and therefore of your expressed appreciation by joining initiatives, projects and fundraising campaigns of Fondazione Libellula, sharing their objectives and social purposes;
in relation to the processing of your data for the same purposes referred to in letters d), e) above, in the case of purchasing products and services on the site without registering an account, the legal basis of processing is the consent of the data subject. You are free to give or withhold your consent, but without it we will not be able to carry out the processing for the purposes indicated;
in relation to the processing of your data for the purposes referred to in letters f), g) above, the legal basis is compliance with a legal obligation;
in relation to the processing of your data for the purposes referred to in letter h) above, the legal basis is the consent of the data subject. You are free to give or withhold your consent, but without it we will not be able to carry out the processing for the purposes indicated.
Your personal data will be processed by internal staff of Fondazione Libellula specifically instructed and authorized to process the data (with reference only to the mere viewing of the data, also by internal staff of Zeta Service Srl and Lumina STP Srl, likewise specifically instructed and authorized).
Your personal data may also be transmitted to third parties that we use to provide our services or carry out our activities. These parties have been appropriately selected and offer suitable guarantees of compliance with regulations regarding the processing of personal data. These subjects have been appointed by Fondazione Libellula and, where necessary, designated as external data processors or bound by specific agreements. They carry out their activities according to the instructions given by Fondazione Libellula and under its control.
These third parties belong to the following categories: internet providers, companies specialized in IT and telematic services; companies carrying out marketing activities on our behalf; companies specialized in market research, surveys and data processing on our behalf; credit institutions; companies managing transport, storage and return of goods; public bodies and administrative authorities.
Your data may be transmitted to police forces and judicial and administrative authorities, in accordance with the law, for the detection and prosecution of crimes, prevention and protection from threats to public security, to allow Fondazione Libellula to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
Some of the third parties listed in the previous paragraph “Who processes the data” may be located in countries outside the European Economic Area that nevertheless offer an adequate level of data protection, as established by specific decisions of the European Commission.
The transfer of your personal data to countries outside the European Economic Area, in the absence of an adequacy decision, will be carried out in compliance with Articles 46 et seq. of the GDPR so that personal data are transferred only if the third country has provided adequate safeguards and provided that data subjects have enforceable rights and effective legal remedies.
We retain your personal data for a limited period of time, which varies depending on the type of activity involving the processing of your personal data.
Once this period has expired, your data will be permanently deleted or irreversibly anonymized.
Your personal data are retained according to the following terms and criteria:
data related to the creation of your account on the Site: the data will be retained for the period necessary for registration and as long as you remain registered and use the reserved services;
data collected in the context of the use of services offered on the Site: the data will be retained for a period not exceeding that necessary for the execution of the requested service, without prejudice to legal obligations;
data collected in the context of charitable donations (donations made by you and 5×1000): the data will be retained for the duration of the donation and related communications, also after the conclusion of the donation relationship, as long as retention is necessary to comply with legal and tax obligations related to the donation;
data used for promotional communication activities, opinion surveys, market research and profiling:
registered user: the data will be retained for the period necessary to maintain the relationship established with you and inform you about institutional activities, events, initiatives and projects, fundraising campaigns supporting the mission of Fondazione Libellula, allowing it to legitimately continue its social activity as long as it is believed that you share our principles. This retention period will end when you express your wish not to receive further information from Fondazione Libellula by communicating it as described in the section “withdrawal of consent, access to data, right to object and other rights”. Fondazione Libellula will adopt appropriate technical and organizational measures to ensure you are no longer contacted;
non-registered user: the data will be retained until you withdraw your consent as described in the section “withdrawal of consent, access to data, right to object and other rights”;
data provided for statistical research activities: the personal data will be stored in our archives for the period necessary to transform them into anonymous form. After this period, identifying data are no longer attributable to a person and therefore are no longer subject to the GDPR provisions;
data provided to comply with specific legal obligations or provisions issued by authorities and/or other entities legally entitled to do so: the data will be retained for the time necessary to fulfill the purpose for which they were collected;
data collected for sending newsletters: the data will be retained for the entire duration of the service until you exercise the right to object;
data collected to respond to requests for information: the data will be retained for the time necessary to respond to the request.
We inform you that in relation to the processing of your personal data you have the following rights, which may be exercised by submitting a written request to Fondazione Libellula:
Art. 15 GDPR – Right of access (right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to such data);
Art. 16 GDPR – Right to rectification (right to obtain correction, updating and modification of data);
Art. 17 GDPR – Right to erasure or right to be forgotten (right to obtain deletion of data);
Art. 18 GDPR – Right to restriction of processing (right to obtain restriction of processing);
Art. 20 GDPR – Right to data portability (right to receive a copy of data concerning you and request their transfer to another controller);
Art. 21 GDPR – Right to object to data processing;
Art. 22 GDPR – Right not to be subject to automated decision-making, including profiling, meaning a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you;
Art. 15 letter f) – Right to lodge a complaint with a supervisory authority: in Italy complaints may be submitted to the Italian Data Protection Authority. More information is available on the Authority’s website at https://www.garanteprivacy.it.
To exercise your rights, you may contact Fondazione Libellula by writing to: privacy@fondazionelibellula.com indicating the reason for the request and your contact details.
Pursuant to Art. 12 GDPR, Fondazione Libellula will respond without delay and in any case within one month.
We protect your personal data with specific technical and organizational security measures designed to prevent your personal data from being used unlawfully or fraudulently. In particular, we use security measures that ensure: pseudonymization or encryption of your data; confidentiality, integrity and availability of your data as well as the resilience of the systems and services that process them; the ability to restore data in case of a data breach. Furthermore, Fondazione Libellula undertakes to regularly test, verify and evaluate the effectiveness of technical and organizational measures in order to ensure continuous improvement in processing security.
The constant evolution of our services may result in changes in the characteristics of the processing of your personal data described above. Consequently, this privacy notice may be subject to modifications and additions over time, which may also be necessary with reference to new regulatory interventions regarding the protection of personal data.
We therefore invite you to periodically check its contents: where possible, we will try to promptly inform you about the changes made and their consequences.
The updated version of the privacy notice will in any case be published on this page, indicating the date of its last update.