{"id":489,"date":"2026-02-25T10:43:41","date_gmt":"2026-02-25T10:43:41","guid":{"rendered":"https:\/\/demo.fondazionefiammaviva.org\/privacy-policy-2\/"},"modified":"2026-07-19T09:05:10","modified_gmt":"2026-07-19T09:05:10","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/demo.fondazionefiammaviva.org\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"

Last updated: 18 July 2026<\/strong><\/p>\n

This notice explains how Fondazione Fiamma Viva ETS<\/strong> processes the personal data of people who browse and use www.fondazionefiammaviva.org<\/strong>, submit online forms, communicate with the Foundation or make a donation. It is provided under Articles 12, 13 and 14 of Regulation (EU) 2016\/679 (\u201cGDPR\u201d), Italian Legislative Decree No. 196 of 30 June 2003, as amended, and the applicable data-protection rules.<\/p>\n

1. Data Controller<\/h2>\n

The Data Controller is Fondazione Fiamma Viva ETS<\/strong>, Corso d\u2019Italia 38, 00198 Rome RM, Italy, Italian tax code 96623930581, registered in the Italian National Third Sector Register (RUNTS) by Lazio Region determination G06426 of 23 May 2025.<\/p>\n

Privacy-related requests and requests to exercise the rights described in this notice may be sent to privacy@carmelitaniscalzi.com<\/a>.<\/p>\n

2. Scope<\/h2>\n

This notice covers processing carried out through the website and the digital services directly connected with it. It does not govern processing by third-party websites, platforms or services reached through external links; their own privacy notices apply.<\/p>\n

3. Categories of personal data processed<\/h2>\n

3.1 Browsing and technical data<\/h3>\n

During normal operation, IT systems, software and hosting services collect data whose transmission is inherent in Internet protocols. This may include IP address, browser and device type, operating system, language, date and time of the request, pages visited, requested resource, server response code, referring page, technical identifiers, security logs and diagnostic information.<\/p>\n

3.2 Contact-form data<\/h3>\n

When a user submits a contact form, the Foundation processes the user\u2019s full name, email address, message, acknowledgement of the privacy notice and any other information voluntarily included in the request.<\/p>\n

3.3 Donation-related data<\/h3>\n

When a user uses a donation form or communicates an intention to support the Foundation, the following data may be processed: donation type and amount, first name, surname, email address, telephone number and information necessary to manage the request. For donations made by bank transfer or another channel, the Foundation may also process donor identification details, amount, date, payment reference and transaction information supplied by banks or payment-service providers. The website should not directly collect full payment-card details where the payment is handled by an external provider.<\/p>\n

3.4 Communications sent to the Foundation<\/h3>\n

Sending a message to an address published on the website entails processing the sender\u2019s address, the content of the communication and any other data needed to reply and manage the request.<\/p>\n

3.5 Cookies, preferences and external content<\/h3>\n

The website may process online identifiers and technical preferences, including the selected language and choices recorded through any consent-management tool. Some pages include or link to external services such as Google Maps, Google Fonts and social-media profiles. Further information is available in the Cookie Policy<\/a>.<\/p>\n

3.6 Special categories of data<\/h3>\n

The website forms are not designed to collect special categories of data under Article 9 GDPR or data relating to criminal convictions and offences. Users should not submit such information unless it is strictly necessary and an appropriate legal basis exists. In that event, the Foundation will limit processing to what is indispensable.<\/p>\n

4. Sources of personal data<\/h2>\n

Data is collected directly from the individual through browsing, forms, communications and donations. Additional information may be received from banks, payment providers or parties involved in the administrative management of a donation, solely for the related purposes.<\/p>\n

5. Purposes and legal bases<\/h2>\n

5.1 Website operation, maintenance and security<\/h3>\n

Technical data is processed to deliver requested pages, ensure stability, prevent abuse, fraud, unauthorised access and security incidents, and perform diagnostics, backups and maintenance. The legal basis is the Foundation\u2019s legitimate interest in keeping its systems secure and operational under Article 6(1)(f) GDPR, together with compliance with any legal obligations.<\/p>\n

5.2 Requests and communications<\/h3>\n

Data submitted by form or email is processed to read the request, reply, provide information and manage any follow-up. The legal basis is taking steps at the individual\u2019s request under Article 6(1)(b) GDPR or the legitimate interest in handling institutional relations and communications. Where the form expressly asks for consent, processing may also rely on Article 6(1)(a).<\/p>\n

5.3 Donations and related obligations<\/h3>\n

Donation data is processed to handle the request, record the contribution, communicate with the donor, comply with administrative, accounting, tax and reporting obligations and protect the Foundation\u2019s rights. The legal bases are the individual\u2019s request, compliance with legal obligations and, where applicable, the legitimate interest in proper administration and legal defence under Article 6(1)(b), (c) and (f) GDPR.<\/p>\n

5.4 Preferences and non-essential services<\/h3>\n

Technical cookies and strictly necessary features are used to provide the service requested. Non-essential cookies or external content are activated on the basis of consent where the law requires it, under Article 6(1)(a) GDPR and Article 122 of the Italian Data Protection Code.<\/p>\n

5.5 Legal obligations and protection of rights<\/h3>\n

Data may be processed to answer public-authority requests, comply with legal obligations, prevent unlawful conduct and establish, exercise or defend legal claims. The legal bases are legal obligation and the Controller\u2019s legitimate interest.<\/p>\n

6. Whether data must be provided<\/h2>\n

Fields marked as mandatory are required to submit a form. Without them, the Foundation cannot receive or properly handle the message. Other data is optional. Making a donation is voluntary, although certain information may be necessary to carry it out and comply with administrative and tax obligations.<\/p>\n

7. Processing methods and security<\/h2>\n

Processing is carried out electronically and, where necessary, on paper, in accordance with the principles of lawfulness, fairness, transparency, minimisation, accuracy, storage limitation and integrity. The Foundation adopts measures proportionate to the risks, including access controls, authorisation management, software updates, backups, communication safeguards and incident procedures. No system can guarantee absolute security; measures are reviewed in light of technical developments and risks.<\/p>\n

8. Authorised persons, recipients and processors<\/h2>\n

Data may be processed by Foundation staff, collaborators and expressly authorised persons within their assigned duties. It may also be disclosed or made accessible to providers supporting the website and related operations, including:<\/p>\n