We inform you, pursuant to art. 13 of the EU Regulation n. 2016/679 (hereinafter, ""GDPR""), that
the processing of the data you provide will be carried out with methods and procedures aimed at
ensuring that the processing of personal data is carried out in compliance with fundamental rights
and freedom, as well as the dignity of the 'concerned, with particular reference to confidentiality
and security, personal identity and the right to the protection of personal data.
We remind you that the term is intended to indicate any operation or set of operations, carried out
with or without the aid of automated processes and applied to personal data or sets of personal
data, such as collection, registration, organization, structuring, the conservation, adaptation or
modification, extraction, consultation, use, communication by transmission, dissemination or any
other form of making available, comparison or interconnection, limitation, cancellation or
destruction (Article 4 of the GDPR)

1. Object of the processing and legal basis
The data processed by the ‘NON PROFIT FACTORY’ Social Promotion Association – with registered
office in Acquasparta via Bruno Buozzi 7 – refer to
– Personal and identification data, such as name, surname, postal address, e-mail address.

2. Origin of the data
The data may also be collected following a donation or through an email request to or through the
website www.nonprofitfactory.it

3. Purpose of the treatment
Personal data and any changes that you will communicate in the future to the ‘NON PROFIT
FACTORY’ Social Promotion Association are collected and processed exclusively for sending
information and promotional material relating to the activities of the Association, via email, paper
mail, telephone and / or sms
4. Processing methods
The processing is carried out by means of the operations indicated in art. 4 GDPR:
– Collection of data from the interested party, by filling in paper forms or web applications;
– Recording and processing on computer and paper support;
– Organization of archives, mainly in automated form, through company applications and
computerized personal data.
The data will be processed using suitable tools to ensure its confidentiality, integrity and
availability. The processing is carried out on paper and through information and / or automated
systems and will include all the operations or set of operations provided for in art. 4 of the GDPR
and necessary for the processing in question, including communication to the subjects in charge of
the processing itself.

5. Data retention times (DATA RETENTION)
The ‘NON PROFIT FACTORY’ Social Promotion Association will process personal data for the time
necessary to fulfill the above mentioned purposes and in any case as long as the interested party
maintains his consent to receive the Association's information and promotional material. Following
a request for cancellation, the name and related contacts are deleted. You can withdraw your
consent, for one or more of the means of contact indicated, or object to such processing at any
time by writing to dimmi@nonprofitfacvtory.it.
6. Access to treatment
The data will be made accessible, for the purposes referred to in point n. 4, to the parties indicated
below (the ""Recipients""):
i) subjects who typically act as data processors, i.e. persons, companies or professional firms that
provide assistance and advice to the Association in accounting, administrative, legal, tax, financial,
credit recovery or other matters;
ii) subjects delegated to carry out technical maintenance activities (including maintenance of
network equipment and electronic communication networks);

iii) persons authorized by the Association to process Personal Data, who are committed to
confidentiality or have an adequate legal obligation of confidentiality (eg employees and
collaborators of the ‘NON PROFIT FACTORY’);
iv) subjects, bodies or authorities to whom it is mandatory to communicate your Personal Data by
virtue of legal or regulatory provisions or orders of the authorities.
7. Communication of data
In any case, the data will not be disclosed to unauthorized third parties or disseminated in any way.
To this end, the processing is conducted with the use of security measures suitable to prevent
unauthorized access to data by third parties and to guarantee its confidentiality. Without the need
for explicit consent, the Data Controller may communicate your data to the following subjects
– Supervisory Bodies, Judicial Authorities, Control Bodies
– Other subjects whose right to access your personal data is recognized by provisions of law or
secondary or community legislation.
These subjects will process the data in their capacity as independent data controllers.

8. Data transfer
The management and storage of personal data will take place on servers located within the
European Union of the Data Controller and / or third-party companies appointed and duly
appointed as Data Processors.
9. Rights of the interested party
According to the provisions of the GDPR, the interested party has the following rights towards the
Data Controller:
– obtain confirmation as to whether or not personal data concerning him is being processed and, in
this case, to obtain access to personal data (Right of access art. 15);
– to obtain the correction of inaccurate personal data concerning him without undue delay (Right
of Rectification Article 16);
– obtain the cancellation of personal data concerning him without undue delay and the data
controller is obliged to cancel the personal data without undue delay, if certain conditions are met
(Right to be forgotten, Article 17);
– obtain the limitation of processing in certain cases (Right to limitation of processing art.18);
– receive in a structured format, commonly used and readable by an automatic device, the personal
data concerning him provided and has the right to transmit such data to another Data Controller,
without impediments by the data controller to whom he provided them, in certain cases (Right to
data portability art.20);
– oppose at any time, for reasons connected with his particular situation, to the processing of
personal data concerning him (Right to object, Article 21);
– receive without undue delay communication of the violation of personal data suffered by the
Data Controller (Article 34);
– withdraw the consent expressed at any time (Conditions for consent art.7)
Where applicable, the interested party may exercise the above rights, by email or telephone to the
Data Controller. The Data Controller reserves the right to verify the identity of the data subject
before taking further actions based on his request.

10. Data Controller

The Data Controller is NON PROFIT FACTORY Social Promotion Association
Via Bruno Buozzi 7 – Acquasparta (TR)
Email: dimmi@nonprofitfacotry.it
This information may be subject to changes. Any substantial changes will be communicated to the
interested parties by notice or publication on the website www.nonprofitfactory.it