politica sulla riservatezza
1. Data Controller
NUI APS Association
Registered office: Via Antonio Ceci n16, 56125 Pisa (PI), ITALY
Contact email: nui.coordination@gmail.com
The Data Controller processes the personal data of users who browse the website
and use the contact and information request forms.
2. Types of data processed
The following categories of personal data are processed:
Browsing data (e.g., IP address, access logs, browser and device technical data).
Data provided voluntarily via online forms (e.g., first and last name, email address, subject and content of the message, if applicable).
Any additional data freely entered in the text of messages sent via the forms.
The website may also use technical cookies and, where applicable, profiling/third-party cookies (e.g., social media buttons, content embedded from other websites).
3. Data Processing via Forms (3 Types)
The site uses three types of online forms. Providing identification data and email address in the fields marked as mandatory is necessary to process the request; failure to provide such data will make it impossible to respond.
3.1 "Write to Us / General Contacts" Form
Data processed: first and last name, email address, subject (if applicable), message content.
Purpose:
Manage requests for information or support sent by users.
Provide operational and/or organizational feedback regarding the Association's activities.
Legal basis: Implementation of pre-contractual measures adopted at the request of the interested party or the legitimate interest of the Data Controller in following up on requests received.
The data is retained for the time necessary to process the request and in any case no longer than 24 months, except in the case of further legal obligations or disputes.
3.2 Application/Project Participation Form (if applicable)
Data processed: identification and contact information, any profile data (age, nationality, interests, previous experience), additional information requested by the call or project.
Purpose:
Evaluate the interested party's application for projects, activities, events, or opportunities promoted by the Association.
Manage any subsequent participation (organizational, logistical, and administrative communications).
Legal basis: Implementation of pre-contractual measures and/or execution of a contract to which the interested party is a party; fulfillment of legal obligations related to funded projects.
The data is retained for the duration of the project and for the time necessary to comply with the reporting and retention obligations set forth in the applicable funding programs.
3.3 Newsletter/Periodic Communications Subscription Form (if applicable)
Data processed: name (if applicable), email address.
Purpose: Sending newsletters, updates on projects, opportunities, and initiatives of the Association.
Legal basis: Explicit consent from the data subject, provided via the appropriate checkbox in the dedicated forms.
The data subject may withdraw consent at any time by clicking the unsubscribe link in each email or by writing to info@tdm2000.org.
The data is retained until consent is revoked or deletion is requested.
4. Processing Methods
Personal data is processed using computerized tools and, in limited cases, on paper, in compliance with the principles of fairness, lawfulness, transparency, and data minimization established by the GDPR.
Adequate technical and organizational measures are adopted to ensure data security and prevent loss, illicit or incorrect use, and unauthorized access.
5. Cookies and Embedded Content
The site uses:
Technical cookies necessary for the proper functioning of the site and management of the browsing session.
Any third-party cookies linked to external services (e.g., social media buttons, embedded content from platforms such as Facebook, Instagram, or other sites).
Embedded content from other sites (e.g., videos, posts, or social media widgets) behaves as if the user were visiting the third-party site directly, which may collect data, use cookies, and other tracking systems.
For further details on the types and management of cookies, it is advisable to prepare a dedicated Cookie Policy and a specific consent banner, in compliance with current legislation.
6. Data Recipients
Personal data may be disclosed to:
Collaborators and volunteers authorized by the Data Controller, acting according to specific instructions.
Providers of IT, hosting, website, and email platform maintenance services, appointed as Data Processors where necessary pursuant to Art. 28 GDPR.
Public bodies, funding agencies, or competent authorities, when required by legal or project obligations.
The data will not be disclosed indiscriminately to the public.
7. Transfer of data to third countries
Some IT services used (e.g., newsletter providers, analysis tools, or online collaboration tools) may involve the transfer of data to countries outside the European Economic Area.
In such cases, the Data Controller verifies the existence of adequate data protection guarantees (adequacy decisions of the European Commission, standard contractual clauses, supplementary measures).
8. Retention period
Personal data is retained for the time strictly necessary to achieve the purposes for which it was collected, without prejudice to further retention periods required by legal obligations or the need for legal protection.
At the end of the required retention periods, the data will be deleted or irreversibly anonymized.
9. Rights of data subjects
As a data subject, you may exercise the following rights at any time:
Right to access your personal data and obtain a copy thereof.
Right to rectify inaccurate data or complete incomplete data.
Right to erasure of personal data (right to be forgotten) where provided for by law.
Right to restriction of processing.
Right to data portability, where applicable.
Right to object to processing based on the Data Controller's legitimate interest.
Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Requests can be addressed to the Data Controller by writing to info@tdm2000.org.
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
10. Changes to this Policy
The Data Controller reserves the right to update this Policy at any time to reflect regulatory changes or changes in the processing performed.
Changes will be published on this page and, if relevant, may be communicated to data subjects via the channels deemed most appropriate (e.g., notice on the website, email).