Skip to main content

Privacy Policy

The purpose of this document is to inform the data subject (hereinafter referred to as the “Data Subject”) about the processing of their personal data (hereinafter referred to as “Personal Data”) collected by the data controller, Digital For Humanity, with registered office at Via Terralba 114, 16011 Arenzano, Genoa, Tax Code 95237730106, email address hello@skillando.org, certified email (PEC) digitalforhumanity@messaggipec.it (hereinafter referred to as the “Data Controller”), through the website skillando.org, Skillando Digital Volunteering (hereinafter referred to as the “Application”).

Any changes and updates shall be binding as soon as they are published on the Application. If the Data Subject does not accept the changes made to the Privacy Policy, they must cease using this Application and may request the Data Controller to delete their Personal Data.

 

  1. Categories of Personal Data Processed
    The Data Controller processes the following types of Personal Data voluntarily provided by the Data Subject:

    1. Contact data: name, surname, address, email, phone number, images, authentication credentials, any additional information submitted by the Data Subject, etc.
    2. Technical data: Personal Data generated by the devices, applications, tools, and protocols used, such as information about the device in use, IP addresses, browser type, Internet Service Provider (ISP) type.
      Such Personal Data may leave traces which, particularly when combined with unique identifiers and other information received from servers, can be used to create profiles of natural persons.
    3. Browsing and usage data of the Application: such as pages visited, number of clicks, actions performed, session duration, etc.
    4. Failure by the Data Subject to provide Personal Data for which there is a legal or contractual obligation, or which constitutes a necessary requirement for the conclusion of the contract with the Data Controller, will result in the Data Controller being unable to establish or continue the relationship with the Data Subject.
      The Data Subject who provides the Data Controller with Personal Data of third parties is solely and fully responsible for their origin, collection, processing, communication, or disclosure.
  2. Cookies and Similar Technologies
    The Application uses cookies, web beacons, unique identifiers, and other similar technologies to collect the Data Subject’s Personal Data regarding the pages visited, links clicked, and other actions performed when the Data Subject uses the Application. These are stored and then transmitted upon the Data Subject’s subsequent visits.
    The full Cookie Policy can be viewed at the following address: https://www.skillando.org
  3. Legal basis and purpose of processing
    The processing of Personal Data is necessary:

    • for the performance of the contract with the Data Subject, specifically:
      1. fulfillment of any obligation arising from the pre-contractual or contractual relationship with the Data Subject
      2. Registration and authentication of the Data Subject: to allow the Data Subject to register on the Application, access it, and be identified, including through external platforms.
    • Object to the processing of their Personal Data
      1. the fulfillment of any obligation required by applicable laws, statutes, and regulations, particularly in tax and fiscal matters.
    • based on the legitimate interest of the Data Controller, for:
      1. Marketing purposes via email of the Data Controller’s products and/or services to directly sell the Data Controller’s products or services using the email provided by the Data Subject in the context of the sale of a product or service similar to the one being sold.
    • Based on the Data Subject’s consent, for:
      1. Profiling of the Data Subject for marketing purposes: to provide the Data Subject with information about the Data Controller’s products and/or services through automated processing aimed at collecting personal information to predict or evaluate their preferences or behaviors.
      2. Marketing purposes of the Data Controller’s products and/or services: to send commercial and/or promotional information or materials, to carry out direct sales activities of the Data Controller’s products and/or services, or to conduct market research using automated and traditional methods.
    • Based on the legitimate interest of the Data Controller, the Application allows interactions with external platforms or social networks, whose processing of Personal Data is governed by their respective privacy policies, to which reference should be made. The interactions and information obtained through this Application are always subject to the privacy settings chosen by the Data Subject on those platforms or social networks. This information, unless specific consent is given for further processing, is used solely to enable the use of the Application and to provide the requested information and services.
      The Data Subject’s Personal Data may also be used by the Data Controller to protect its rights in legal proceedings before the competent judicial authorities.
  4. Methods of Processing and Recipients of Personal Data
    The processing of Personal Data is carried out using paper and electronic tools, with organizational methods and logic strictly related to the purposes indicated, and through the adoption of appropriate security measures.
    Personal Data are processed exclusively by:

    • Persons authorized by the Data Controller who have committed to confidentiality or are subject to an appropriate legal obligation of confidentiality;
    • Entities that operate independently as separate Data Controllers or entities appointed as Data Processors by the Data Controller to carry out all processing activities necessary to achieve the purposes outlined in this privacy notice (for example, business partners, consultants, IT companies, service providers, hosting providers);
    • Entities or authorities to whom Personal Data must be disclosed by law or by order of the authorities.
    • The above-mentioned entities are required to use appropriate safeguards to protect Personal Data and may only access the data necessary to perform their assigned tasks.
    • Personal Data will not be disclosed indiscriminately in any way.
  5. Location
    Personal Data will not be transferred outside the territory of the European Economic Area (EEA).
  6. Retention Period of Personal Data
    Personal Data will be retained for the period necessary to fulfill the purposes for which they were collected, in particular:

    • for purposes related to the execution of the contract between the Data Controller and the Data Subject, the data will be retained for the entire duration of the contractual relationship and, after its termination, for the ordinary statute of limitations period of 10 years. In the case of legal disputes, the data will be retained for the entire duration of the dispute, until all appeal deadlines have been exhausted
    • for purposes related to the legitimate interest of the Data Controller, the data will be retained until the fulfillment of such interest.
    • for the fulfillment of a legal obligation, by order of an authority, and for legal protection, the data will be retained in compliance with the timelines established by such obligations and regulations, and in any case until the expiration of the statute of limitations provided by the applicable laws.
    • for purposes based on the Data Subject’s consent, the data will be retained until the consent is withdrawn.
    • At the end of the retention period, all Personal Data will be deleted or stored in a form that does not allow the identification of the Data Subject.
  7. Rights of the Data Subject
    Data Subjects may exercise certain rights regarding the Personal Data processed by the Data Controller. In particular, the Data Subject has the right to:

    • be informed about the processing of their Personal Data
    • withdraw consent at any time
    • restrict the processing of their Personal Data
    • object to the processing of their Personal Data
    • access their Personal Data
    • verify and request correction of their Personal Data
    • obtain the restriction of the processing of their Personal Data
    • obtain the deletion of their Personal Data
    • transfer their Personal Data to another controller
    • to lodge a complaint with the supervisory authority for the protection of their Personal Data and/or to take legal action.
    • To exercise their rights, Data Subjects may send a request to the following email address hello@skillando.org or certified email digitalforhumanity@messaggipec.it. Requests will be promptly processed by the Data Controller and responded to as soon as possible, in any case within 30 days.

Last update: 05/01/2023