WEBSITE INFORMATION and TELEPHONE CONTACT and EMAIL
PRIVACY POLICY
GENERAL HOUSE OF THE INSTITUTE OF THE MISSIONARY SUNS OF CONSOLATA
Via Umiltà, 745
Nepi (VT)
(Information on the processing of personal data pursuant to art. 13 of EU Regulation 679/2016 and Legislative Decree 196/2003 and subsequent amendments)

General House of the Institute of the Missionary Sisters of the Consolata, as Data Controller (hereinafter also: “Controller”) pursuant to EU Regulation 679/2016 (hereinafter: “GDPR”) and Legislative Decree 196/2003 (hereinafter “Privacy Code”) – invites you, before communicating any personal data to the Controller, to carefully read this Privacy Policy because it contains important information on the protection of your personal data.
This Privacy Policy:
– is intended for missionariedellaconsolata.org (hereinafter: “Site”) and for contact via the number; fax; email,
– is an integral part of the Site and the services we offer,
– is provided pursuant to art. 13 of the GDPR and the Privacy Code to those who interact with the web services of the Site or who contact by telephone, post, fax or email CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA.
The processing of your personal data will be based on the principles of correctness, lawfulness, transparency, limitation of purposes and conservation, minimization and accuracy, integrity and confidentiality, as well as the principle of accountability pursuant to art. 5 of the GDPR.

Your personal data will therefore be processed in accordance with the legislative provisions of the GDPR and the confidentiality obligations provided for therein as well as those of the Privacy Code still in force today
By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction, as defined in art. 4.2 of the GDPR.
We inform you that the personal data subject to processing may consist of – also depending on your decisions on how to use the services – any information concerning your person suitable to make him or her identified or identifiable, including textual information, photographic or video images and any other information provided, depending on the type of services requested.

DATA CONTROLLER: WHO WE ARE AND WHAT WE DO
The data controller is the GENERAL HOUSE OF THE CONSOLATA MISSIONARY SISTERS INSTITUTE, with headquarters in Via Umiltà, 745 – Nepi (VT), which is a missionary religious congregation with female participation, with sisters directly involved in humanitarian missions.
WHAT DATA WE PROCESS
We inform you that the personal data being processed may consist of – also depending on your decisions on how to use the services – an identifier such as your name, an identification number, location data, an online identifier, cookies or one or more characteristic elements of your physical, physiological, genetic, psychological, economic, cultural or social identity suitable for making the interested party identified or identifiable, depending on the type of services requested (hereinafter only “personal data”).
The personal data processed through the Site are the following:

1. Navigation data
   The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the Site, the URI (Uniform Resource Identifier) ​​addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment. This data is used for the sole purpose of obtaining any anonymous statistical information on the use of the Site to check its correct functioning, to identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site or third parties.

1. Data provided voluntarily by you – Special Data
   Unless otherwise specified, this Privacy Policy is also intended to apply to the processing of data voluntarily provided by you via email and/or by telephone and/or fax. In this regard, we invite you not to communicate information that may fall within the category of special categories of personal data pursuant to art. 9 of the GDPR (for example, data relating to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, sexual life/orientation, as well as genetic data, biometric data or data relating to your state of health), unless expressly requested and subject to specific information and possible consent.
2. Data of third parties provided voluntarily by you
   When using particular services, the personal data of third parties may be processed, communicated by you to CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA. With respect to these hypotheses, you act as an independent Data Controller, assuming all legal obligations and responsibilities. In this sense, you grant the broadest indemnity with respect to any dispute, claim, request for compensation for damage from processing, etc. that may be received by the Data Controller from third parties, whose personal data have been processed through your use of the services of the Site in violation of the applicable rules on the protection of personal data. In any case, if you provide or otherwise process personal data of third parties in the use of the Site, you guarantee from now on – assuming all related liability – that this particular hypothesis of processing is based on the prior acquisition – by you – of the information and consent of the third party to the processing of information concerning him and that said processing by you will take place in compliance with the GDPR.
3. Cookies
   Information on the cookies served by the Site is available at the following address missionariedellaconsolata.org/privacy-policy-2
   3.1 Name of the cookies used
   3.1.1 cookieyes-consent. Duration 1 year
   3.1.2 wpEmojiSettingsSupports. During the session
   3.1.3: YSC. During the session. youtube.com
   3.1.4: VISITOR_INFO1_LIVE. Duration 6 months youtube.com
   3.1.5: VISITOR_PRIVACY_METADATA. Duration 6 months youtube.com
   3.1.6: yt-remote-device-id. Duration: never youtube.com
   3.1.7: yt-remote-connected-devices. Duration: never youtube.com

WHY WE PROCESS YOUR DATA – PURPOSE OF THE PROCESSING
Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable:
3.1. to allow navigation of the CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA website;
3.2. to respond to specific requests, including telephone requests, addressed to CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA;
3.3. to fulfill any obligations provided for by current laws, regulations or community legislation, or to satisfy requests from the authorities;
3.4. to exercise the rights of CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA;
3.5 to fulfill contractual and pre-contractual obligations arising from existing relationships with you;
3.6. for statistical purposes, without it being possible to trace your identity.
Your personal data, including those falling within the category of special categories (such as, for example, data relating to your religious or philosophical orientation or your state of health), will be processed with automated and non-automated tools.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF PROCESSING
The legal basis for the processing of personal data for the purposes referred to in section 3.1 and 3.2 and 3.5. is art. 6(1)(b) of the GDPR ([…] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract), as the processing is necessary for the provision of services. Providing personal data for these purposes is optional, but failure to provide such data would make it impossible to activate the requested services.
The legal basis for the purpose referred to in section 3.3 is art. 6(1)(c) of the GDPR ([…] processing is necessary for compliance with a legal obligation to which the data controller is subject). Once the personal data has been provided, in fact, processing is indeed necessary to comply with legal obligations to which CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA is subject.
The legal basis for the purpose referred to in section 3.4 is art. 6(1)(f) of the GDPR (…. Processing is necessary for the pursuit of the legitimate interests pursued by the controller or by third parties, provided that the interests or fundamental rights or freedoms of the Data Subject do not prevail..). Once the personal data has been provided, in fact, processing is indeed necessary for the pursuit of a legitimate interest of CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA under the conditions indicated above.
It is also specified that the processing referred to in section 3.6 is not performed on personal data and therefore can be freely carried out by the Data Controller.
Lastly, in the event of any provision of Particular Data, where requested, the Processing has a legal basis in your consent pursuant to art. 9(2)(a) of the GDPR ([…] the interested party has given his/her explicit consent to the processing of such personal data for one or more specific purposes).

WHY WE PROCESS YOUR DATA – PURPOSE OF THE PROCESSING
Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable:
3.1. to allow navigation of the CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA website;
3.2. to respond to specific requests, including telephone requests, addressed to CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA;
3.3. to fulfill any obligations provided for by current laws, regulations or community legislation, or to satisfy requests from the authorities;
3.4. to exercise the rights of CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA;
3.5 to fulfill contractual and pre-contractual obligations arising from existing relationships with you;
3.6. for statistical purposes, without it being possible to trace your identity.
Your personal data, including those falling within the category of special categories (such as, for example, data relating to your religious or philosophical orientation or your state of health), will be processed with automated and non-automated tools.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF PROCESSING
The legal basis for the processing of personal data for the purposes referred to in section 3.1 and 3.2 and 3.5. is art. 6(1)(b) of the GDPR ([…] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract), as the processing is necessary for the provision of services. Providing personal data for these purposes is optional, but failure to provide such data would make it impossible to activate the requested services.
The legal basis for the purpose referred to in section 3.3 is art. 6(1)(c) of the GDPR ([…] processing is necessary for compliance with a legal obligation to which the data controller is subject). Once the personal data has been provided, in fact, processing is indeed necessary to comply with legal obligations to which CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA is subject.
The legal basis for the purpose referred to in section 3.4 is art. 6(1)(f) of the GDPR (…. Processing is necessary for the pursuit of the legitimate interests pursued by the controller or by third parties, provided that the interests or fundamental rights or freedoms of the Data Subject do not prevail..). Once the personal data has been provided, in fact, processing is indeed necessary for the pursuit of a legitimate interest of CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA under the conditions indicated above.
It is also specified that the processing referred to in section 3.6 is not performed on personal data and therefore can be freely carried out by the Data Controller.
Lastly, in the event of any provision of Particular Data, where requested, the Processing has a legal basis in your consent pursuant to art. 9(2)(a) of the GDPR ([…] the interested party has given his/her explicit consent to the processing of such personal data for one or more specific purposes).

RECIPIENTS OF PERSONAL DATA
Your personal data may be shared, for the purposes set out in section 3 of this Privacy Policy, with:
5.1. subjects, entities or authorities to whom it is mandatory to communicate your personal data by virtue of provisions of law or orders of the authorities;
5.2. persons authorized by CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA to process personal data necessary to carry out activities strictly related to the provision of services, who have committed to confidentiality or have an adequate legal obligation of confidentiality and who guarantee the Processing of Data in accordance with the GDPR.
PERSONAL DATA STORAGE
The personal data processed for the purposes referred to in section 3.1-3.2-3.3-3.4-3.5 will be retained for the time strictly necessary to achieve those same purposes and, in the case of processing carried out for the provision of services, up to the period of time foreseen and permitted by Italian law to protect the interests and right of defense of CASA GENERALIZIA DELL’ISTITUTO SUORE MISSIONARIE DELLA CONSOLATA, having regard to the limitation periods provided for by the applicable law.
More information regarding the data retention period and the criteria used to determine this period may be requested by sending a written request to the Data Controller at the addresses indicated in the “Contacts” section of this information.

RIGHTS OF THE INTERESTED PARTY
In your capacity as Interested Party, pursuant to Articles 15 et seq. of the GDPR and Article 7 of the Privacy Code, you have the right to:
1.obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
2.obtain the indication of: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identification details of the owner, managers and designated representative pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1 of the GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representative in the territory of the State, managers or persons in charge;

3. obtain: a) the updating, rectification or, when interested, the integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;
4. object, in whole or in part: a) to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by e-mail and/or through traditional marketing methods by telephone and/or paper mail. Please note that the right of opposition of the interested party, set out in the previous point b), for direct marketing purposes by automated methods extends to traditional methods and that in any case the possibility for the interested party to exercise the right to object even only partially remains intact. Therefore, the interested party can decide to receive only communications by traditional methods or only automated communications or neither of the two types of communication.
   Where applicable, you also have the rights referred to in articles 16 – 22 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object, right to object to automated processing including profiling).
   Requests must be addressed in writing to the Data Controller at the addresses indicated in the “Contacts” section of this information.
   In any case, you always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the protection of personal data), pursuant to art. 77 of the GDPR, if you believe that the processing of your data is contrary to the legislation in force.

CHANGES
THE GENERAL HOUSE OF THE CONSOLATA MISSIONARY SUNS INSTITUTE reserves the right to modify or simply update the content of this Privacy Policy, in part or completely, also due to changes in the applicable legislation. THE GENERAL HOUSE OF THE CONSOLATA MISSIONARY SUNS INSTITUTE will inform you of such changes as soon as they are introduced and they will be binding as soon as they are published on the Site. THE GENERAL HOUSE OF THE CONSOLATA MISSIONARY SUNS INSTITUTE therefore invites you to visit this section regularly to take note of the most recent and updated version of the Privacy Policy in order to always be updated on the data collected and on the use made of it by THE GENERAL HOUSE OF THE CONSOLATA MISSIONARY SUNS INSTITUTE.
CONTACTS
To exercise the rights listed above or for any other request, you can write to:
– Data Controller: THE GENERAL HOUSE OF THE CONSOLATA MISSIONARY SUNS INSTITUTE, Via Umiltà n. 745, Nepi (VT), telephone number: 0114477033 email suoreconsolata.privacy@gmail.com