Privacy Policy

Website Privacy Notice

The personal data you provide through the website https://www.fondazionegenoa.com/ (hereinafter the “Website”) will be processed by Fondazione Genoa 1893 ETS (hereinafter the “Data Controller” or the “Foundation”), which provides the following information pursuant to Article 13 of Regulation (EU) 2016/679.

If a user or a participant in an event organised by the Foundation is a minor (hereinafter a “minor”), this notice refers to the minor’s data. In that case, it is addressed to the persons exercising parental responsibility for the minor, who may exercise the rights described in this notice on the minor’s behalf.

Only persons over the age of 18 who hold a valid credit card may purchase products and/or services through the Website.

Data Controller

The Data Controller is Fondazione Genoa 1893, with registered office at Via al Porto Antico 4, Genoa, VAT number 01634160996, represented by its legal representative pro tempore.

Categories of data processed

The personal data processed may include, by way of summary and without limitation:

  • personal identification data;
  • shipping address;
  • contact details (such as telephone number and email address);
  • details of purchases made;
  • payment data.

Purposes of processing

Your personal data will be processed for the following purposes:

  1. to fulfil your purchase order, send you communications about it and ship the products purchased;
  2. to handle requests for information and/or bookings relating to activities organised by the Foundation (for example, educational services), including requests sent via WhatsApp;
  3. to comply with legal accounting and tax obligations;
  4. to enable the completion and management of questionnaires made available on the Website;
  5. to send commercial and/or promotional communications, subject to your consent, including through newsletter subscriptions and other electronic communication tools;
  6. to defend a right in court or before an authority;
  7. to manage the Website and its operational functions, monitor its proper operation, improve the quality of the services offered and optimise its functionality;
  8. to prevent and detect fraudulent activity or abuse harmful to the Website: the Data Controller has a legitimate, genuine and current interest in avoiding harm caused by unlawful conduct by others;
  9. to process payment of the Supporting Member fee;
  10. to receive donations in support of the Foundation.

Legal bases for processing

The legal basis for processing for the purposes listed in points 1, 2, 9 and 10 is the performance of the purchase contract to which you are a party.

The legal basis for the purpose listed in point 3 is compliance with legal obligations.

The legal basis for the purpose listed in point 5 is your consent.

The legal basis for the purposes listed in points 4, 6, 7 and 8 is the Data Controller’s legitimate interest in protecting its rights, which has been assessed as prevailing over the resulting limitation of your rights.

Requirement to provide data and consequences of not providing it

When using the Website, providing personal data is mandatory. These data are necessary for your relationship with the Data Controller and for use of its services. You may choose not to provide your personal data; however, without them you will not be able to use the Data Controller’s services. Providing data for purposes that require your consent is optional. Refusing to provide such consent does not prevent you from using the Data Controller’s services.

Data retention period

Your personal data collected through the Website will be retained by the Data Controller for as long as necessary to pursue the purposes described above and, subsequently, for accounting purposes and to comply with legal obligations, for 10 years or until the limitation period for rights that may be protected using those data expires, if longer.

Your personal data processed for marketing purposes will be retained for a maximum of 24 months from the date of collection.

Recipients of data

For the purposes described above, the Data Controller may disclose your data to:

  • the Data Controller’s employees and collaborators, duly instructed and authorised to process data pursuant to Article 29 of the GDPR and Article 2-quaterdecies of Italian Legislative Decree 196/2003;
  • third parties necessary to carry out activities related to and resulting from the performance of the contract (such as IT, banking, insurance, accounting, tax and legal service providers), acting as data processors or independent data controllers.

A complete list of, and contact details for, the parties to whom your personal data may be disclosed and the appointed data processors is available at the Foundation’s registered office.

Trasferimento dei dati

The Data Controller does not transfer data outside the European Economic Area. However, should such a transfer become necessary for the purposes stated above, it will take place only on the basis of an adequacy decision under Article 45 of the GDPR or, in any case, in compliance with the safeguards set out in Chapter V of the GDPR.

Rights of the data subject

The Company informs you that you have the right to:

  1. object at any time to the processing of your data, particularly to processing for direct marketing purposes, including in relation to services identical to those already provided by the Company (right to object);
  2. obtain data and information about the processing, particularly the types of data processed, the purposes of processing, the processing period and the parties to whom the data are disclosed (right of access);
  3. have inaccurate personal data concerning you and/or a minor under your care corrected or completed (right to rectification);
  4. have personal data concerning you and/or a minor under your care erased where: (i) the data are no longer necessary for the purposes for which they were collected; (ii) you have withdrawn consent where processing is based on consent; (iii) you have objected to processing where the data are not processed on the basis of a legitimate interest of the Company; or (iv) the processing does not comply with the law. The Company may nevertheless lawfully retain personal data where necessary to comply with a legal obligation or to establish, exercise or defend a right in legal proceedings (right to erasure);
  5. have personal data concerning you stored without further use where: (i) you contest the accuracy of the data, for the period necessary for the Company to verify their accuracy; (ii) the processing is unlawful but you oppose erasure; (iii) the data are required to establish, exercise or defend legal claims; or (iv) you have objected to processing pending verification of whether our grounds for processing override your rights (right to restriction of processing);
  6. receive personal data concerning you and/or a minor under your care in a commonly used, machine-readable and interoperable format, where the data are processed on the basis of a contract or consent, and/or transmit those data to another controller where feasible (right to data portability);
  7. withdraw consent at any time for processing that requires it. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

You may exercise your rights and/or, where applicable, those of a minor under your care by emailing the Company at mailto:privacy@fondazionegenoa.com or by writing to Fondazione Genoa 1893, Via al Porto Antico 4, Genoa.

Right to lodge a complaint

If you believe that the processing of your personal data infringes the Regulation, you have the right to lodge a complaint with the Italian Data Protection Authority, as provided for by Article 77 of the Regulation, or to bring proceedings before the competent courts (Article 79 of the Regulation).