Data Controller: INSTITUTE OF THE APOSTLES OF THE SACRED HEART OF JESUS, GENERALATE

Registered and operational office: Via Germano Sommelier, 38 – 00185 ROME

Types of Data collected

Among the Personal Data collected by this website, independently or through third parties, are: usage data, data collected through cookies, email address, first name, last name, and other information voluntarily entered by the user.

Complete details on each type of collected data are provided in the dedicated sections of this privacy policy or through specific information notices displayed before the data collection itself. Personal Data may be freely provided by the User or, in the case of Usage Data, automatically collected during the use of this Website. The use of cookies by this website or by the owners of third party services used by this website, unless otherwise specified, is intended to provide the Service requested by the User.

The User assumes responsibility for the Personal Data published or shared through this website or websites accessible from it and guarantees that they have the right to communicate or disclose such data, releasing the Data Controller from any liability toward third parties.

Methods and place of processing of collected Data

Processing methods

The Data Controller adopts appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of Personal Data.

The processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the stated purposes. In addition to the Data Controller, other persons involved in the organization of this institute, such as administrative and technical staff, as well as external parties, including third party technical service providers, hosting providers, and IT companies appointed as Data Processors by the Data Controller, may have access to the Data.

Legal basis for processing

The Data Controller processes Personal Data relating to the User when one of the following conditions applies:

• The User has given consent for one or more specific purposes.
• Processing is necessary for the performance of a contract with the User and/or for pre-contractual measures.
• Processing is necessary to comply with a legal obligation to which the Data Controller is subject.
• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.
• Processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.

The User may always request clarification from the Data Controller regarding the specific legal basis of each processing activity and, in particular, whether the processing is based on law, required by a contract, or necessary to enter into a contract.

Place of storage of data (Where the data acquired and managed through the website are stored)

The data are currently processed and stored at the registered office and workplace located at Via Germano Sommelier, 38 – 00185 ROME, as well as within cloud systems located in Italy.

The data may also be processed, on behalf of the Data Controller, by professionals and/or companies entrusted with technical, development, management, administrative, and accounting activities.

Retention period

Data are processed and stored for the time required for the purposes for which they were collected. Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Data Controller and the User shall be retained until such contract has been fully performed.
• Personal Data collected for purposes related to the legitimate interests of the Data Controller shall be retained until those interests are fulfilled. The User may obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.
• When processing is based on the User’s consent, the Data Controller may retain Personal Data for a longer period until such consent is withdrawn. Furthermore, the Data Controller may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, after this period expires, the rights of access, deletion, rectification, and data portability can no longer be exercised.

Purpose of processing collected Data

User Data are collected to allow the Data Controller to provide its Services, as well as for the following purposes: contacting the User, statistics and infrastructure monitoring, sending commercial information and newsletters, only with the User’s prior consent.

Details regarding the processing of Personal Data

The Data Controller collects the personal data of its users necessary to offer content and services better suited to the interests and needs of visitors, as well as to respond to requests sent by email.

Diritti dell’Utente

Users may exercise certain rights regarding the Data processed by the Data Controller. In particular, the User has the right to:

• Withdraw consent at any time. The User may withdraw previously given consent for the processing of Personal Data.
• Object to the processing of their Data. The User may object to the processing of their Data when it is carried out on a legal basis other than consent. Further details regarding the right to object are provided below.
• Access their Data. The User has the right to obtain information regarding the Data processed by the Data Controller, certain aspects of the processing, and to receive a copy of the processed Data.
• Verify and request rectification. The User may verify the accuracy of their Data and request updates or corrections.
• Obtain restriction of processing. When certain conditions apply, the User may request restriction of the processing of their Data. In such cases, the Data Controller will not process the Data for any purpose other than storage.
• Obtain deletion or removal of Personal Data. When certain conditions apply, the User may request deletion of their Data by the Data Controller.
• Receive their Data or transfer them to another controller. The User has the right to receive their Data in a structured, commonly used, and machine-readable format and, where technically feasible, to have them transferred to another controller without hindrance. This provision applies when the Data are processed by automated means and the processing is based on the User’s consent, on a contract to which the User is a party, or on related contractual measures.
• Lodge a complaint. The User may lodge a complaint with the competent data protection authority or take legal action.

Details regarding the right to object

When Personal Data are processed in the public interest, in the exercise of official authority vested in the Data Controller, or for the legitimate interests pursued by the Data Controller, the User may object to such processing by providing grounds related to their particular situation.

How to exercise rights

To exercise User rights, Users may send a request to the contact details of the Privacy Office Manager indicated in this document. Requests will be processed as quickly as possible.

Legal references

This privacy policy has been drafted on the basis of multiple legislative provisions, including Articles 13 and 14 of Regulation (EU) 2016/679.

This policy may be modified according to the needs of this institute or in the event of amendments to the aforementioned regulations.